netlify/gotrue
Gotrue
GoTrue ist ein JWT-Identitätsanbieter und eine API für das Benutzer-Management. Es fungiert als OAuth 2.0-konformer Server, der Benutzerregistrierung und Authentifizierung abwickelt und signierte JSON Web Tokens ausstellt, um den Zugriff auf geschützte API-Ressourcen zu steuern.
Der Dienst integriert externe Identitätsanbieter, um es Nutzern zu ermöglichen, sich mit Konten von Drittanbietern anzumelden. Er enthält zudem einen SMTP-Benachrichtigungsdienst für den Versand von Passwort-Resets, Anmeldebestätigungen und E-Mails zur Kontowiederherstellung.
Das System deckt breitere Funktionen für das Benutzerkonten-Management ab, einschließlich der Möglichkeit, Benutzerprofile zu aktualisieren und benutzerdefinierte Metadaten zu verwalten. Es bietet API-Zugriffskontrolle durch Token-Generierung und -Validierung und unterstützt das Tracing von Request-Ausführungen zur Leistungsüberwachung.
Features
- OAuth 2.0 Authorization Servers - Functions as a full OAuth 2.0 authorization server that manages client registrations and issues access tokens.
- JWT Authentications - Provides a complete identity provider system using signed JWTs to authenticate users and protect API resources.
- JWT Format Tokens - Issues signed JWTs to verify user identity and permissions for subsequent API requests.
- API Access Control - Implements granular API access control by validating signed tokens for protected resources.
- User Profile Management - Provides functionality for retrieving and updating user account attributes and custom profile metadata.
- Identity Authentication - Provides identity authentication via external providers to grant access without local credentials.
- JWT Identity Servers - Functions as an OAuth 2.0 compliant identity provider that manages users and issues signed JWTs.
- Stateless Session Management - Utilizes signed JWTs to maintain stateless user sessions without server-side session storage.
- Third-Party Identity Integrations - Integrates third-party identity providers to enable users to sign in with existing external accounts.
- Token Authentication - Generates secure authentication tokens using various grant types to control API access.
- User Account Management - Manages user account registration, profile updates, and metadata for web applications.
- User Account Registrations - Handles the creation of new user accounts through email and password registration flows.
- User Identity Management - Provides a backend API for managing user profiles, account registration, and identity-related data lifecycles.
- Stateless Architectures - Employs a stateless architecture that verifies identity using self-contained tokens instead of server-side state.
- Identity Provider Integration - Integrates external identity providers to enable third-party sign-in via authorization code exchange.
- Account Verification Workflows - Automates the sending of confirmation and recovery emails to secure and verify new user accounts.
- User Notifications - Provides an SMTP notification service for delivering password resets, signup confirmations, and account recovery emails.
- Account Lifecycle Notifications - Sends automated lifecycle notifications for signup confirmations and password recovery.
- SMTP Integrations - Provides SMTP integrations to dispatch automated account verification and password reset emails.
- OAuth Token Exchanges - Implements OAuth 2.0 token exchange flows to generate signed JWTs based on various grant types.
