Skip to content
identity and trustpackages/iam/oauth

oauth package

oauth — focused capability inside the identity and trust domain, boundary at packages/iam/oauth.

Stability
Stable
Scope
Tenant-scoped
Boundary
packages/iam/oauth
oauthpackages/iam/oauth
Tenant-isolated
Policy decisionpass
  • Actor verified
    19 ms
  • Tenant scope
    14 ms
  • oauth authorized
    16 ms
  • Audit logged
    6 ms
Active session
actor_akwayne_8723
viewermfa
Expires in 10m

Active sessions

748

+7%

Audit entries / day

42,752

Policy checks / s

224

+8%
packages/iam/oauthIdentity and trust · single boundary
Usageoauth.ts
typescript
oauth.ts
1import { oauth } from "@nebutra/oauth";
2
3// Tenant-scoped, audit-logged by default.
4await oauth.check({
5  actor: getCurrentActor(),
6  tenantId: org.id,
7});
More in domain · identity and trust
auditPackage
packages/iam/audit

Hash-chained, SHA-256 append-only audit log for actor/tenant actions. SOC 2-grade tamper detection, streaming export, and replay-safe queries.

Explore
authPackage
packages/iam/auth

Better Auth on Postgres — organization membership, device-flow login, MFA-enforced, session HMAC-signed. One identity layer, no vendor in the loop.

Explore
captchaPackage
packages/iam/captcha

Bot challenge with Cloudflare Turnstile / hCaptcha / reCAPTCHA behind one verify() call. Server-side scoring, per-route enable, no third-party tracker on the client.

Explore
identityPackage
packages/iam/identity

Shared actor primitive — usr_/svc_/api_ ID space, role/membership lookup, tenant attachment. The single identity object every iam package reads.

Explore