@glassly/auth

Helpers for miniapp backends that need to verify Local Runtime auto-auth tokens.

import {createAuthService, type AuthVariables} from "@glassly/auth";
import {Hono} from "hono";

const glasslyAuth = createAuthService({
  packageName: "com.example.miniapp",
});

const app = new Hono<{ Variables: AuthVariables }>();

app.use("/api/*", glasslyAuth.hono());

app.post("/api/endpoint", async (c) => {
  const session = c.get("glasslyAuth");
  return c.json({userId: session.glasslyUserId});
});

Defaults:

• packageName: required, or set GLASSLY_PACKAGE_NAME, MINIAPP_PACKAGE_NAME, or PACKAGE_NAME.
• jwksUrl: GLASSLY_AUTH_JWKS_URL, falling back to https://core.glassly.ai/.well-known/jwks.json.
• issuer: GLASSLY_AUTH_ISSUERS as a comma-separated list, or GLASSLY_AUTH_ISSUER as one value, falling back to cloud-core.

Use jwksUrl for local, staging, test, or self-hosted Core deployments:

const glasslyAuth = createAuthService({
  packageName: "com.example.miniapp",
  jwksUrl: "http://localhost:3000/.well-known/jwks.json",
});

Lower-level helpers are available when a framework middleware is not enough:

await glasslyAuth.verifyToken(token);
await glasslyAuth.verifyAuthHeader(header);
await glasslyAuth.verifyRequest(request);