Expand description
§Auth-O-Tron
Authentication and authorization gateway for web APIs.
Auth-O-Tron validates credentials from multiple providers simultaneously,
enriches users with roles and attributes via augmenters, and issues signed
JWTs. It is designed to work as an NGINX auth_request backend.
Modules§
- augmenters
- Post-authentication user enrichment (LDAP, static rules, conditional roles).
- auth
- Authentication pipeline: provider chain execution and augmenter application.
- config
- Configuration loading, versioning (v1/v2), and environment variable overrides.
- metrics
- Metrics collection and exposition for Prometheus.
- models
- Core data types: User, Token, and JWT claims.
- providers
- Credential validation backends (JWT, Basic auth, OIDC, API keys).
- routes
- HTTP route definitions and handlers.
- startup
- Application startup and server initialization.
- state
- Shared application state.
- store
- Optional persistent token storage (MongoDB or no-op).
- utils
- Shared utilities: logging, HTTP helpers, and value conversion.