identity and trustpackages/iam/oauth

oauth package

oauth — focused capability inside the identity and trust domain, boundary at packages/iam/oauth.

Open docs

Stability: Stable
Scope: Tenant-scoped
Boundary: packages/iam/oauth
Owners: @nebutra/iam

oauthpackages/iam/oauth

Tenant-isolated

Policy decisionpass

Actor verified
x
19 ms
Tenant scope
x
14 ms
oauth authorized
x
16 ms
Audit logged
x
6 ms

Active session

actor_akwayne_8723

viewermfa

Expires in 10m

Active sessions

748

+7%

Audit entries / day

42,752

Policy checks / s

224

+8%

packages/iam/oauthIdentity and trust · single boundary

Usageoauth.ts

typescript

oauth.ts

1import { oauth } from "@nebutra/oauth";
2
3// Tenant-scoped, audit-logged by default.
4await oauth.check({
5  actor: getCurrentActor(),
6  tenantId: org.id,
7});

More in domain · identity and trustView domain

auditPackage

packages/iam/audit

Hash-chained, SHA-256 append-only audit log for actor/tenant actions. SOC 2-grade tamper detection, streaming export, and replay-safe queries.

Explore

authPackage

packages/iam/auth

Multi-provider auth — Clerk, Better Auth, or NextAuth. Same React surface, swap providers via preset config. MFA-enforced, session HMAC-signed.

Explore

captchaPackage

packages/iam/captcha

Bot challenge with Cloudflare Turnstile / hCaptcha / reCAPTCHA behind one verify() call. Server-side scoring, per-route enable, no third-party tracker on the client.

Explore

identityPackage

packages/iam/identity

Shared actor primitive — usr_/svc_/api_ ID space, role/membership lookup, tenant attachment. The single identity object every iam package reads.

Explore

oauth packagepackage

oauth packagepackage

oauth package

oauth package