{"id":44312102,"url":"https://github.com/fells-code/seamless-auth-server","last_synced_at":"2026-05-17T21:13:04.881Z","repository":{"id":323956796,"uuid":"1009940896","full_name":"fells-code/seamless-auth-server","owner":"fells-code","description":"The Seamless Auth Server Side SDKs, allowing quick integration with seamless auth instances","archived":false,"fork":false,"pushed_at":"2026-05-03T04:34:25.000Z","size":558,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-05-03T06:32:47.014Z","etag":null,"topics":["passwordless","passwordless-auth","passwordless-authentication","react"],"latest_commit_sha":null,"homepage":"https://seamlessauth.com","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/fells-code.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-06-28T02:29:29.000Z","updated_at":"2026-04-22T03:59:13.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/fells-code/seamless-auth-server","commit_stats":null,"previous_names":["fells-code/seamless-auth-server"],"tags_count":22,"template":false,"template_full_name":null,"purl":"pkg:github/fells-code/seamless-auth-server","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fells-code%2Fseamless-auth-server","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fells-code%2Fseamless-auth-server/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fells-code%2Fseamless-auth-server/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fells-code%2Fseamless-auth-server/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/fells-code","download_url":"https://codeload.github.com/fells-code/seamless-auth-server/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/fells-code%2Fseamless-auth-server/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33155545,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-17T09:28:26.183Z","status":"ssl_error","status_checked_at":"2026-05-17T09:27:52.702Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["passwordless","passwordless-auth","passwordless-authentication","react"],"created_at":"2026-02-11T04:12:29.411Z","updated_at":"2026-05-17T21:13:04.876Z","avatar_url":"https://github.com/fells-code.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Seamless Auth Server Packages\n\nSeamless Auth is an open source, passwordless authentication system designed to be embedded directly into applications.\n\nIt provides a small, explicit core and framework-specific adapters that make it easy to integrate secure, session-based authentication into APIs and web applications without redirects, third-party identity providers, or opaque middleware chains.\n\nThis repository contains the core building blocks and official server-side framework integrations.\n\n---\n\n## Philosophy\n\nSeamless Auth is built around a few guiding principles:\n\n- **Passwordless by default**\n  Authentication is based on possession and verification, not shared secrets.\n\n- **Embedded authentication**\n  Auth flows live inside your application. No redirects, callbacks, or hosted UI.\n\n- **Server-side session validation**\n  Sessions are managed using secure, HTTP-only cookies and validated by the API.\n\n- **Explicit over magical**\n  Authentication and authorization are enforced with clear, composable middleware.\n\n- **Self-hosted and open source**\n  You control the infrastructure and the data.\n\n---\n\n## Packages\n\nThis repository is structured as a small core plus framework adapters.\n\n### @seamless-auth/core\n\nThe core package contains framework-agnostic logic used across all integrations.\n\nResponsibilities include:\n\n- Verifying signed session cookies\n- Authenticated server-to-server requests\n- Resolving the current authenticated user\n- Shared types and helpers\n\nThe core package does **not** depend on any specific web framework.\n\nIt is intended to be reused by:\n\n- Node.js frameworks\n- Server-side rendering environments\n- Edge runtimes\n- Future non-JavaScript adapters\n\nLocation:\n\n```\npackages/core\n```\n\n---\n\n### @seamless-auth/express\n\nThe Express adapter provides middleware for integrating Seamless Auth into Express applications.\n\nIt builds on the core package and adds:\n\n- `requireAuth` middleware for session authentication\n- `requireRole` middleware for role-based authorization\n- A normalized `req.user` contract for downstream handlers\n\nThe Express adapter intentionally keeps authentication and authorization concerns separate from business logic.\n\nIt is also the natural initializer boundary for adopter-supplied auth messaging configuration such as:\n\n- email transports\n- SMS transports\n- custom auth-message handlers\n- optional auth template overrides\n\nFor WebAuthn PRF flows, the adapter proxies PRF registration query flags and assertion request bodies to the Seamless Auth API. PRF outputs remain browser-only and are never handled by the server adapter.\n\nLocation:\n\n```\npackages/express\n```\n\nExample usage:\n\n```ts\napp.get(\n  \"/api/beta_users\",\n  requireAuth({ cookieSecret: process.env.COOKIE_SIGNING_KEY! }),\n  requireRole(\"betaUser\"),\n  handler,\n);\n```\n\n---\n\n## Extensibility\n\nFramework integrations are designed as thin adapters over the core package.\n\nFuture adapters are expected to follow the same pattern:\n\n- Delegate cryptography and verification to `@seamless-auth/core`\n- Populate a framework-native request context with a normalized user object\n- Expose composable authentication and authorization primitives\n\nPlanned and likely future integrations include:\n\n- Fastify\n- NestJS\n- Python (ASGI / FastAPI)\n- Other server runtimes where cookie-based sessions are appropriate\n\nAdding a new adapter does not require changes to the core authentication model.\n\n---\n\n## Versioning and Releases\n\nThis repository uses a staged release model:\n\n- **Beta releases**\n  Automatically published from the `dev` branch under the `beta` npm dist-tag.\n\n- **Stable releases**\n  Published when a GitHub Release is published for an explicit package tag\n  (for example `core-v1.0.0` or `express-v1.0.0`).\n\nEach package is versioned and released independently.\n\n---\n\n## Documentation\n\nFull documentation for Seamless Auth is available at:\n\n[https://docs.seamlessauth.com](https://docs.seamlessauth.com)\n\nThe documentation covers:\n\n- Architecture and authentication flow\n- Session and cookie handling\n- Role-based authorization\n- Framework-specific integration guides\n- Deployment considerations\n\n---\n\n## Repository Structure\n\n```\n.\n├─ packages/\n│  ├─ core/        # Framework-agnostic authentication logic\n│  └─ express/     # Express middleware adapter\n├─ .github/\n│  └─ workflows/   # CI and release pipelines\n└─ README.md\n```\n\n---\n\n## License\n\nThis repository is licensed under the AGPL-3.0 license.\n\nIndividual packages may include additional notices or licenses where appropriate.\nRefer to each package directory for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffells-code%2Fseamless-auth-server","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ffells-code%2Fseamless-auth-server","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ffells-code%2Fseamless-auth-server/lists"}