# @platform-modules/auth

## 0.2.2

### Patch Changes

- Updated dependencies [7d474ec]
  - @platform-modules/util@0.2.0
  - @platform-modules/db@0.2.1

## 0.2.1

### Patch Changes

- 5fd0d27: Add the `./api-keys` subpath for issuing and verifying scoped hashed API keys.
- e718a57: Add the `oauth-provider` subpath with PKCE S256 authorization-code helpers, client registration, and module-owned OAuth tables.

## 0.2.0

### Minor Changes

- 235a365: Add `UserAdminEngine` (`listUsers`, `setUserRoles`, `disableUser`), `auth_users.status` column with migration DDL, and live-role resolution in `verifySession` (roles read from DB, not JWT claims).

## 0.1.0

### Minor Changes

- 5373160: Add opaque service-token (PAT) capability to `engine-custom` for non-interactive callers (AI agent / MCP / CI). DB-backed, hash-only storage, fail-closed resolve, live roles, per-token revocation that is intentionally NOT coupled to `sessionVersion`.

  New exports: `issueServiceToken`, `resolveServiceToken`, `revokeServiceToken`, `revokeServiceTokensForUser`, and the `serviceTokens` table (also added to `customAuthSchema`). Additive only — no existing signature changes.

### Patch Changes

- Updated dependencies [f895518]
- Updated dependencies [c80eaad]
- Updated dependencies [324de71]
  - @platform-modules/db@0.2.0
  - @platform-modules/util@0.1.0

## 0.0.2

### Patch Changes

- Updated dependencies [0170476]
  - @platform-modules/mail@0.1.0

## 0.0.1

### Patch Changes

- d72b1ba: Initial publish — first versioned release.
- Updated dependencies [d72b1ba]
  - @platform-modules/db@0.0.1
  - @platform-modules/mail@0.0.1
  - @platform-modules/util@0.0.1