菜单
How to use @owlmeans/web-auth — web client auth plugins that register into @owlmeans/client-auth/manager. Currently ships the development-only PK-based supervisor login form (appendSupervisorAuth). Auto-invoked when importing @owlmeans/web-auth.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
PK-based supervisor authentication — a development-only login where a holder of one of the project's trusted private keys mints a token for any user id/email (registering them on first use), bypassing external IdPs. Primary use is end-to-end tests. Covers appendSupervisorAuth (server + web), the supervisor plugin, and the @owlmeans/test-ui helpers. Use when wiring or testing supervisor auth.
Discovery-first, reuse-first workflow for OwlMeans projects. Use BEFORE planning or building any feature, before proposing a third-party library or a custom solution, and after writing code. Find an existing @owlmeans/* package or existing code first; extend before writing new; simplify what you write.
How to scaffold a new OwlMeans Common project — the @owlmeans/create-app CLI (npm/bun/yarn create), its flags, what it generates, and the manual alternative. Use when asked to create/bootstrap/start a new OwlMeans app or set up a fresh project.
Discovery-first, reuse-first workflow for OwlMeans projects. Use BEFORE planning or building any feature, before proposing a third-party library or a custom solution, and after writing code. Find an existing @owlmeans/* package or existing code first; extend before writing new; simplify what you write.
How to scaffold a new OwlMeans Common project — the @owlmeans/create-app CLI (npm/bun/yarn create), its flags, what it generates, and the manual alternative. Use when asked to create/bootstrap/start a new OwlMeans app or set up a fresh project.
How to use @owlmeans/api — HTTP client service (axios-based) used to call entrypoints across services. Auto-invoked when importing the API service or when ctx.entrypoint(...).call() under the hood is involved.
| name | web-auth |
| description | How to use @owlmeans/web-auth — web client auth plugins that register into @owlmeans/client-auth/manager. Currently ships the development-only PK-based supervisor login form (appendSupervisorAuth). Auto-invoked when importing @owlmeans/web-auth. |
| user-invocable | false |
Layer: Web
Install: "@owlmeans/web-auth": "^0.1.11" in dependencies
Web-side auth UI plugins that register into the shared @owlmeans/client-auth/manager plugin registry
(mirrors @owlmeans/web-oidc-rp). Currently ships the PK-based supervisor login form.
| Export | Description |
|---|---|
appendSupervisorAuth(context, opts?) | Dev-only: register the supervisor login form plugin |
SUPERVISOR_LOGIN_PATH | /authentication/login/pk-supervisor (the typed-route path) |
supervisorClientPlugin | The client AuthenticationPlugin (self-contained form) |
./auth/plugins — side-effect import that always-registers the supervisor plugin
(import '@owlmeans/web-auth/auth/plugins'). Prefer the dev-gated appendSupervisorAuth.import { appendSupervisorAuth } from '@owlmeans/web-auth'
// in your web client makeContext():
appendSupervisorAuth(context) // enabled in development only (cfg.debug)
The form renders at SUPERVISOR_LOGIN_PATH via the standard CAUTHEN_AUTHEN_TYPED route — no extra
route registration needed. Test ids: supervisor-auth-form, supervisor-user-id, supervisor-pk,
supervisor-submit, supervisor-error.
See the supervisor-auth skill for the full feature (server append, options, security, test helpers).
@owlmeans/client-auth, @owlmeans/web-client, @owlmeans/client@owlmeans/auth (type + buildSupervisorPayload), @owlmeans/basic-keys, @owlmeans/basic-ids