ueberauth/ueberauth

Ueberauth is an Elixir authentication framework that manages two-phase OAuth-style flows via Plug interceptors. It provides a standardized strategy behavior for implementing providers, along with structured data models for handling successful credentials and authentication failures. The system supports flexible configuration of request and callback paths, allowing applications to integrate multiple authentication services through a unified interface.

The application now includes a configuration file defining a set of Ueberauth authentication providers. These providers include simple callbacks, redirectors with custom request and callback paths, and options for handling errors or specific HTTP methods, allowing users to authenticate via these predefined strategies.

config · high confidence

This release establishes the foundational structure for the Ueberauth library, introducing essential developer tooling such as \.formatter.exs\ for code formatting, \.gitignore\ for build artifacts, and \.tool-versions\ specifying Elixir 1.19.5 and Erlang 28.4.1. It also includes a comprehensive \CHANGELOG.md\ documenting versions from 0.1.0 through 0.10.5, a \CONTRIBUTING.md\ guide, and a \Makefile\ for CI tasks. The \README.md\ has been significantly expanded to provide detailed integration instructions for Phoenix applications, including setup steps, controller examples, and explanations of the request and callback phases.

(repo-wide) · high confidence

Introduces the Ueberauth library, a two-phase authentication framework for Elixir inspired by Omniauth. The core module provides a plug that intercepts requests for 'request' and 'callback' phases, allowing applications to configure multiple authentication strategies (providers) via application configuration. Users can define providers, customize base paths (defaulting to /auth), select specific providers per plug instance, and configure OTP app namespaces for multi-app setups.

lib · high confidence

This change introduces the foundational data structures and behavior contracts for the Ueberauth library. It adds \Ueberauth.Auth\ to represent successful authentication results (including UID, provider, credentials, and extra info) and \Ueberauth.Failure\ (along with \Ueberauth.Failure.Error\) to represent authentication errors. Additionally, it defines the \Ueberauth.Strategy\ behavior, which establishes the standard request, callback, and cleanup phases that all authentication strategies must implement, providing default implementations for callbacks to simplify strategy development.

lib/ueberauth · high confidence

A new \Ueberauth.Strategy.Helpers\ module has been added to provide convenience methods for strategy implementations. This includes functions to construct request and callback URLs (respecting configured schemes, ports, and paths), handle callback parameters (filtering out the provider and nil values), manage HTTP method validation for callbacks, and process authentication failures by attaching error structures to the connection.

lib/ueberauth/strategies · high confidence

The library now exposes dedicated structs for handling authentication details: \Ueberauth.Auth.Credentials\ stores token and scope information, \Ueberauth.Auth.Extra\ holds raw provider data, and \Ueberauth.Auth.Info\ contains user profile fields including a newly added \birthday\ field. These changes provide a structured way to access and validate authentication results within the Ueberauth framework.

lib/ueberauth/auth · high confidence

Added test support infrastructure for Ueberauth strategies; Initial test suite for core authentication flows.

The project is initialized with version 0.10.8, requiring Elixir \~\> 1.14 and depending on Plug \~\> 1.5. Development tooling includes Credo, Dialyxir, ExCoveralls, ExDoc, and InchEx, with the dependency lock file pinning specific versions for these tools and their transitive dependencies like Plug 1.20.3 and Telemetry 1.4.2.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 53 → 61 (+7.7)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.2)
• Architecture 69 → 69 (+0.0)
• Maturity 53 → 53 (+0.0)
• Readiness 46 → 59 (+13.6)
• Security 57 → 80 (+22.6)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — no supported dependency manifest was read
• Duplicated block (7 lines × 2) (lib/ueberauth.ex)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No exposed public API
• Off-boarding risk: anonymized user #1
• Test reliability not included

• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Duplicated block (8 lines × 2) (lib/ueberauth.ex)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• High: security finding (details withheld)
• No dependency advisory monitoring
• Outdated: dialyxir
• Outdated: ex_doc

• 1 commits — 0 feature/other, 1 fixes

• lib/ueberauth — 1 commit

• fix: fix: exclude the provider param from callback_url params (#216)

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

ueberauth/ueberauth was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.