What problem does it solve?
Firebase Authentication integration with 27 OAuth providers, RBAC enforced via CSL-gated cosine similarity, and phi-scaled token lifecycles to securely manage user sessions and access rights across devices.
Core Features & Use Cases
- Provider registry & MFA-ready auth: consolidates providers (Google, GitHub, Microsoft, Apple, etc.) into a single, auditable flow.
- Session lifecycle management: issues, refreshes, and revokes access and refresh tokens with phi-based TTLs and device-tracking.
- RBAC mesh with CSL gates: enforces permissions based on vector embeddings and thresholded affinity for scalable access control.
- WebAuthn passwordless support: enables registration and authentication using passkeys.
- Middleware and health endpoints: easy integration into Express stacks with observability hooks and health checks.
- Security integrations: token blacklisting, PQ-security interfaces, and threat-detection telemetry.
Quick Start
Deploy heady-auth-fortress in your Node service and wire it into your login flow to issue and manage token pairs for users.
