netlify/gotrue
Gotrue
GoTrue هو مزود هوية JWT وواجهة برمجة تطبيقات (API) لإدارة المستخدمين. يعمل كخادم متوافق مع OAuth 2.0 يتعامل مع تسجيل المستخدمين والمصادقة مع إصدار رموز JSON Web Tokens موقعة للتحكم في الوصول إلى موارد API المحمية.
تدمج الخدمة مزودي هوية خارجيين للسماح للمستخدمين بتسجيل الدخول باستخدام حسابات طرف ثالث. كما تتضمن خدمة إشعارات SMTP لتسليم رسائل إعادة تعيين كلمة المرور، وتأكيدات التسجيل، ورسائل استعادة الحساب.
يغطي النظام قدرات أوسع لإدارة حسابات المستخدمين، بما في ذلك القدرة على تحديث ملفات تعريف المستخدمين وإدارة البيانات الوصفية المخصصة. ويوفر التحكم في الوصول إلى API عبر توليد الرموز والتحقق منها، ويدعم تتبع تنفيذ الطلبات لمراقبة الأداء.
Features
- OAuth 2.0 Authorization Servers - Functions as a full OAuth 2.0 authorization server that manages client registrations and issues access tokens.
- JWT Authentications - Provides a complete identity provider system using signed JWTs to authenticate users and protect API resources.
- JWT Format Tokens - Issues signed JWTs to verify user identity and permissions for subsequent API requests.
- API Access Control - Implements granular API access control by validating signed tokens for protected resources.
- User Profile Management - Provides functionality for retrieving and updating user account attributes and custom profile metadata.
- Identity Authentication - Provides identity authentication via external providers to grant access without local credentials.
- JWT Identity Servers - Functions as an OAuth 2.0 compliant identity provider that manages users and issues signed JWTs.
- Stateless Session Management - Utilizes signed JWTs to maintain stateless user sessions without server-side session storage.
- Third-Party Identity Integrations - Integrates third-party identity providers to enable users to sign in with existing external accounts.
- Token Authentication - Generates secure authentication tokens using various grant types to control API access.
- User Account Management - Manages user account registration, profile updates, and metadata for web applications.
- User Account Registrations - Handles the creation of new user accounts through email and password registration flows.
- User Identity Management - Provides a backend API for managing user profiles, account registration, and identity-related data lifecycles.
- Stateless Architectures - Employs a stateless architecture that verifies identity using self-contained tokens instead of server-side state.
- Identity Provider Integration - Integrates external identity providers to enable third-party sign-in via authorization code exchange.
- Account Verification Workflows - Automates the sending of confirmation and recovery emails to secure and verify new user accounts.
- User Notifications - Provides an SMTP notification service for delivering password resets, signup confirmations, and account recovery emails.
- Account Lifecycle Notifications - Sends automated lifecycle notifications for signup confirmations and password recovery.
- SMTP Integrations - Provides SMTP integrations to dispatch automated account verification and password reset emails.
- OAuth Token Exchanges - Implements OAuth 2.0 token exchange flows to generate signed JWTs based on various grant types.
