netlify/gotrue
Gotrue
GoTrue es un proveedor de identidad JWT y API de gestión de usuarios. Funciona como un servidor compatible con OAuth 2.0 que maneja el registro y la autenticación de usuarios mientras emite JSON Web Tokens firmados para controlar el acceso a recursos de API protegidos.
El servicio integra proveedores de identidad externos para permitir a los usuarios iniciar sesión utilizando cuentas de terceros. También incluye un servicio de notificación SMTP para enviar restablecimientos de contraseña, confirmaciones de registro y correos electrónicos de recuperación de cuenta.
El sistema cubre capacidades más amplias para la gestión de cuentas de usuario, incluyendo la capacidad de actualizar perfiles de usuario y gestionar metadatos personalizados. Proporciona control de acceso a la API mediante la generación y validación de tokens, y admite el seguimiento de ejecución de solicitudes para el monitoreo del rendimiento.
Features
- OAuth 2.0 Authorization Servers - Functions as a full OAuth 2.0 authorization server that manages client registrations and issues access tokens.
- JWT Authentications - Provides a complete identity provider system using signed JWTs to authenticate users and protect API resources.
- JWT Format Tokens - Issues signed JWTs to verify user identity and permissions for subsequent API requests.
- API Access Control - Implements granular API access control by validating signed tokens for protected resources.
- User Profile Management - Provides functionality for retrieving and updating user account attributes and custom profile metadata.
- Identity Authentication - Provides identity authentication via external providers to grant access without local credentials.
- JWT Identity Servers - Functions as an OAuth 2.0 compliant identity provider that manages users and issues signed JWTs.
- Stateless Session Management - Utilizes signed JWTs to maintain stateless user sessions without server-side session storage.
- Third-Party Identity Integrations - Integrates third-party identity providers to enable users to sign in with existing external accounts.
- Token Authentication - Generates secure authentication tokens using various grant types to control API access.
- User Account Management - Manages user account registration, profile updates, and metadata for web applications.
- User Account Registrations - Handles the creation of new user accounts through email and password registration flows.
- User Identity Management - Provides a backend API for managing user profiles, account registration, and identity-related data lifecycles.
- Stateless Architectures - Employs a stateless architecture that verifies identity using self-contained tokens instead of server-side state.
- Identity Provider Integration - Integrates external identity providers to enable third-party sign-in via authorization code exchange.
- Account Verification Workflows - Automates the sending of confirmation and recovery emails to secure and verify new user accounts.
- User Notifications - Provides an SMTP notification service for delivering password resets, signup confirmations, and account recovery emails.
- Account Lifecycle Notifications - Sends automated lifecycle notifications for signup confirmations and password recovery.
- SMTP Integrations - Provides SMTP integrations to dispatch automated account verification and password reset emails.
- OAuth Token Exchanges - Implements OAuth 2.0 token exchange flows to generate signed JWTs based on various grant types.
