This repository provides authentication for the 3Sixty API stack, covering sign-in, token refresh, password management and user administration backed by entity storage, with an auth header processor that resolves the caller for each request.
Alongside these flows, the repository includes authentication audit logging, rate limiting of sensitive actions and a tenant override processor that lets callers holding the escalated privilege role act on another tenant. Route access is governed by the authorization packages, so each route declares its default authorization rather than checking scopes itself.
- api-auth-models - Contracts for authentication audit and rate limiting.
- api-auth-service - Authentication audit and rate limiting services, tenant override processing and audit REST routes backed by entity storage.
- api-auth-rest-client - REST client for the authentication audit endpoints.
- api-auth-entity-storage-models - Contracts for authentication flows and admin user management with entity storage.
- api-auth-entity-storage-service - Authentication service implementation and REST routes backed by entity storage.
- api-auth-entity-storage-rest-client - REST clients for authentication and admin operations against entity storage endpoints.
To contribute to this package see the guidelines for building and publishing in CONTRIBUTING
This repository is derived from the original iotaledger/twin-api-auth repository.