@x12i/credorix-fastify

Inbound service guards for JWT/JWKS and static Bearer authentication.

app.addHook(
  "preHandler",
  createCredorixAuthGuard({
    type: "jwt",
    issuer: "https://identity.example.com",
    audience: "skills",
    jwksUri: "https://identity.example.com/.well-known/jwks.json",
    requiredScopes: ["skills:invoke"],
    publicRoutes: ["/health", "/ready", "/metadata", "/_live"],
  }),
);