apogee-auth¶
Authentication and authorization module. Drop-in RBAC with role hierarchies, MFA via TOTP, audit log, session/JWT management, and password policy.
Highlights¶
- RBAC — roles, permissions, hierarchical role inheritance
- MFA — TOTP, recovery codes
- Audit log — every auth event recorded, queryable
- Sessions — JWT or opaque tokens, configurable refresh
- Password policy — pluggable strength rules, history, expiry
- Wire-once —
apogee make:authplugs the whole module into a generated project