ueberauth/guardian

Guardian is an Elixir authentication library that manages user sessions via JSON Web Tokens (JWT). It provides a flexible pipeline for verifying tokens, enforcing permissions, and handling HTTP headers or cookies. The system supports dynamic secret fetching, custom claim validation, and multiple permission encoding strategies.

This period focused on modernizing the Guardian library by migrating configuration to the Elixir 1.13+ standard and refactoring the core API to use JOSE instead of Joken. The update introduced new features such as token refreshing, exchange, and permissions, while restructuring the authentication plugs to use a centralized pipeline and error handling system.

9 changes

This period focused on expanding the library's capabilities by introducing JWT token support with comprehensive claim verification and a configurable secret fetching mechanism. It also added a new permissions system supporting multiple encoding strategies and a corresponding HTTP plug, accompanied by extensive test coverage for both features.

9 changes

ueberauth/guardian was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point the surveyor at a repository you know and see whether you agree with it.