tlmanz / authkit / 28336602492

63%

push

github

feat: Implement platform admin authentication and session management

- Add PlatformAdmin struct and associated methods for capability checks.
- Implement PlatformAdminStore interface for retrieving platform admin records.
- Create PlatformLogin and PlatformLogout handlers for managing platform admin sessions.
- Introduce impersonation context for platform admins to act within a tenant.
- Add tests for platform admin login, permission gating, and impersonation features.

feat: Introduce refresh token management

- Define RefreshToken struct and RefreshTokenStore interface for managing refresh tokens.
- Implement token rotation and reuse detection in RefreshAccessToken handler.
- Add tests for refresh token lifecycle, including rotation and reuse scenarios.

feat: Add JWT access token issuance and verification

- Implement signing and verification of access tokens using Ed25519 keys.
- Create JWKS endpoint for publishing public keys for token verification.
- Add tests for access token issuance, expiration handling, and key rotation.

test: Enhance test coverage for token and platform admin functionalities

- Implement in-memory stores for testing refresh tokens and platform admin records.
- Add comprehensive tests for access token round-trip, refresh token rotation, and PKCE flow.

371 of 530 new or added lines in 9 files covered. (70.0%)

1216 of 1648 relevant lines covered (73.79%)

6.99 hits per line