@opendj/auth
v0.1.2
Published
OAuth/OIDC login providers, email/password fallback, sessions, and claims for OpenDJ.
Readme
@opendj/auth
OSS identity layer for OpenDJ. Hosts and logged-in guests are the same base User type.
Contents (planned — see docs/agent-brief.md §"Authentication, accounts, and claims"):
- OAuth/OIDC login providers: Google, Apple, Facebook
- Email/password fallback (Argon2id default; pluggable
PasswordHasherinterface) - Generic
OAuthProviderConfig-driven flow (used for both login providers and music providers) - Server-side sessions backed by
auth_sessions; opaque session token in secure httpOnly cookie - Account membership + claims model (
account:read,session:create,queue:moderate,provider:connect, etc.) requireAuth,requireClaim,requireAnyClaim,requireSessionGuestmiddleware
Music-provider connections (Spotify, Soundtrack, etc.) live in @opendj/backend provider modules — they are separate from login identities.
