palmshed/auth

Authentication for Palmshed projects. A framework-agnostic core, server adapters, storage adapters, a browser client, and a hosted service.

What it is

palmshed/auth provides sign-up, sign-in, session management, password recovery, and role-based access control. The core engine is framework-agnostic. Adapters connect it to servers, databases, and browsers.

Two ways to use it:

Hosted service at palmshed-auth.vercel.app. Consume the API with @palmshed/auth-client. No server to run.
Embedded. Use the published packages to run auth inside your own server with your own database.

Documentation

Getting started

Add authentication to a page or a server in a few minutes.

Sessions, rate limits, captcha, and RBAC options.

AuthClient API reference for browsers and Node.

Hono and Express adapters, middleware, and handlers.

The storage contract and its adapters.

Endpoints, requests, responses, and errors.

Moving an existing app onto the client and the v1 API.

Deploying the hosted service and self-hosting.

Troubleshooting

Common problems and their causes.

Packages

Package	Purpose
`@palmshed/auth-core`	Auth engine, config, token crypto, rate limiting, captcha
`@palmshed/auth-client`	Browser and Node.js client with token refresh
`@palmshed/auth-hono`	Hono middleware and route handlers
`@palmshed/auth-express`	Express middleware and router
`@palmshed/auth-storage-postgres`	PostgreSQL storage adapter
`@palmshed/auth-storage-sqlite`	SQLite storage adapter
`@palmshed/auth-storage-redis`	Redis rate limiter adapter