Identity

experimental

Passwordless email-code login + server-side sessions, built on @microservices-sh/auth. Bridges an authenticated session to a short-lived scoped service token (Plan 26).

2 hooks 4 events 5 permissions

Identity is source-visible, contract-first code — your agent reads the whole interface before it composes, never a black box.

Every hook has typed I/O and required tests, and the composition is pinned in microservices.lock.json — what you inspect here is exactly what pnpm microservices check verifies and deploys.

Typed hooks

Extension points with typed input/output and required tests — customize behavior without forking the module.

  • beforeVerifyCode
  • afterSessionCreated

Events emitted

A stable, documented event surface other modules can subscribe to.

  • identity.login_code_issued
  • identity.login_verified
  • identity.session_created
  • identity.session_destroyed

Permissions

Scoped capabilities the module declares; the gateway enforces them at the boundary.

  • identity.login
  • identity.session
  • identity.admin
  • identity.extend
  • identity.observe

Experimental listing. Generated from the canonical module manifest via `registry build`.