mirror of
https://github.com/djdevin/recflare.git
synced 2026-09-08 22:51:30 -07:00
Devin Zuczek
25 lines
1.2 KiB
Markdown
25 lines
1.2 KiB
Markdown
# auth
|
|
|
|
Auth Worker served on the `auth` subdomain. A Hono app handling authentication.
|
|
Binding-dependent behavior (database queries) is stubbed for now — no real
|
|
KV/D1/DO bindings yet.
|
|
|
|
## Routes
|
|
|
|
| Method | Path | Description |
|
|
| ------ | ------------------------------------------ | ---------------------------------- |
|
|
| GET | `/eac/challenge` | EAC challenge, served as text |
|
|
| GET | `/cachedlogin/forplatformid/:platform/:id` | Cached logins (stubbed → `[]`) |
|
|
| POST | `/connect/token` | OAuth token endpoint, issues a JWT |
|
|
| GET | `/role/developer/:id` | Developer role lookup (TODO) |
|
|
|
|
## Notes / TODO
|
|
|
|
- `JWT` is signed with a placeholder dev secret in `src/jwt.ts`. Move to a secret
|
|
binding before real use.
|
|
- `/eac/challenge` content is inlined in `src/auth.app.ts` (Workers have no
|
|
filesystem) — replace `EAC_CHALLENGE` with the real challenge text.
|
|
- `/cachedlogin/...` and the `RoomInstance` cleanup in `/connect/token` need a DB
|
|
binding to be implemented.
|
|
- `/role/developer/:id` is a stub (`// TODO: implement`).
|