types, interfaces to sqlite

.github/workflows/test.yml

@@ -0,0 +1,17 @@
+name: Test
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+    - name: Build
+      run: cargo build --manifest-path authd-rs/Cargo.toml
+    - name: Test
+      run: cargo test --manifest-path authd-rs/Cargo.toml

.gitignore

@@ -0,0 +1,7 @@
+target/
+
+
+node_modules/
+
+
+.DS_Store

LICENSE

@@ -1,6 +1,6 @@
 BSD 3-Clause License
 
-Copyright (c) 2026, Here by There
+Copyright (c) 2026, Here by There LLC
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:
@@ -16,7 +16,6 @@ modification, are permitted provided that the following conditions are met:
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.
 
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE

README.md

@@ -0,0 +1,32 @@
+# Authd
+
+An authentication service for multiple projects, organizaitons, and web services.
+
+Authd is a REST api for self-hosted services, DIYers, and organizations that want to own their data.
+
+## Setup
+
+### Auth-cmd
+
+```sh
+auth-cmd setup ./db.sqlite
+auth-cmd maintenance ./db.sqlite
+```
+
+## Start a service
+
+It's recommended to use a service manager like `systemd`.
+
+### Auth-server
+
+Use the following command to run an api server:
+
+```sh
+auth_server ./db.sqlite 127.0.0.1:4000
+```
+
+## Todos
+
+- last read at for data that needs cleanup
+- a way to reset a "secret" from the admin api and reset that stuff
+

api.md

@@ -0,0 +1,47 @@
+## API
+
+Inital setup
+- create admin with password
+
+Web interface:
+How maintainers manage the authd service
+(Someting like 127.0.0.1:3050)
+- Admin login
+- Create API key (with expiration date)
+- View organizations (view org id)
+- View members of organizaiton
+- Suspend ban or block members
+- View Delete sessions
+- Set global ratelimits (per organization)?
+(Stretch)
+- create / invite / delete patron
+
+Web api (requires API key)
+How organizations access the authd service.
+Returns an answer via status code OR a one-line body response
+- Create invite for organization (includes contact, possible email to send)
+- Create person for organization with invite (dangerous action with "invite" category)
+- Create person for organization with initial password (old school, can reset password on first login)
+- Log person in and create session
+- Rate limit ip session
+- Rate limit logins
+- Rate limit session
+- Rate limit 404s (crawlers)
+- Set ratelimits
+- IP icebox
+- Person icebox
+
+Constants?
+- there are lots of "kinds" but really it's just a string
+- could there be a series of constants?
+
+Dangerous actions:
+- request add contact
+- request reset password
+- request add / delete account (signup delete)
+- request create / delete TOTP
+
+Server maintenance:
+- Delete stale sessions
+- Delete stale dangerous actions
+- Delete stale api keys