Skip to content

FEATURE: Add stateless passwordless authentication - #10

Merged
hahuang65 merged 1 commit into
mainfrom
hh/passwordless-entry
Aug 29, 2026
Merged

FEATURE: Add stateless passwordless authentication#10
hahuang65 merged 1 commit into
mainfrom
hh/passwordless-entry

Conversation

@hahuang65

Copy link
Copy Markdown
Member

Summary

  • replace phone OTP and application Token APIs with stateless Authentication Evidence
  • add Email Magic Link, Apple, Google, and discoverable Passkey flows
  • keep identity, persistence, credentials, sessions, and authorization in Host Applications
  • update the Rails Engine, generator templates, documentation, and tests for version 0.2.0

Verification

  • bundle exec rake test
  • bundle exec rubocop
  • gem build bitsmithy-auth.gemspec

Replace phone OTP and application Token APIs with validation-only Email
Magic Link, Apple, Google, and Passkey flows that return Authentication
Evidence.

Keep identity, persistence, replay claims, credentials, sessions, and
authorization under Host Application control. Update the Rails Engine,
generated templates, documentation, and tests for the breaking 0.2.0
contract.
@hahuang65
hahuang65 merged commit cc65045 into main Aug 29, 2026
2 checks passed
@hahuang65
hahuang65 deleted the hh/passwordless-entry branch August 29, 2026 04:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant