Skip to content

v0.2.0 Alpha - Universal Handler, Sessions, React Provider & Security Suite

Choose a tag to compare

@MRJonam91 MRJonam91 released this 25 Sep 22:23
· 6 commits to main since this release

🌟 ZeroAuth v0.2.0 Alpha Release

We are proud to release ZeroAuth v0.2.0 Alpha, bringing the self-hosted Passkeys & WebAuthn engine to full framework readiness with sessions, universal HTTP routing, and complete React state management!


🚀 What's New in Alpha

  1. 🌐 Universal Web Standard Handler (\createZeroAuthHandler):

    • Zero-boilerplate integration with Next.js App Router, Hono, SvelteKit, Astro, Bun, and Node.js.
    • Built on standard Fetch API \Request\ -> \Response\ with automatic cookie handling.
  2. 🔐 Cryptographic Session Manager (\SessionManager):

    • Secure opaque session tokens with sliding expiration and persistent storage across SQLite and In-Memory adapters.
    • Automatic revocation on logout and automated session pruning.
  3. ⚛️ Full React Authentication Provider (<ZeroAuthProvider>\ & \useZeroAuth()):

    • Centralized authentication context in @zeroauth/react\ providing global reactive \user, \isAuthenticated, \login(),
      egister(), and \logout().
  4. 🛡️ Standardized Client Errors (\ZeroAuthClientError):

    • Normalized browser DOMExceptions to friendly error codes (\USER_CANCELLED, \TIMEOUT, \NOT_SUPPORTED, \INVALID_STATE).
  5. 🧪 Comprehensive Security & Edge Case Test Suite:

    • 20 unit and integration tests passing with 100% success rate:
      • Anti-Phishing origin validation
      • Anti-Replay challenge binding
      • Cloned authenticator detection via counter validation
      • CBOR decoding boundary and truncation resilience
  6. 🪶 Ultra-compact Core:

    • Maintained under the strict < 1,500 LOC rule (@zeroauth/core\ at only 738 LOC) with zero external dependencies.

💖 Support Ongoing Development

ZeroAuth is built for indie hackers, developers, and open-source advocates.
Support the project:


💼 Commercial Licensing & IP Acquisition

Dual-licensed under GNU AGPLv3 and Commercial Proprietary License. For proprietary SaaS, enterprise licensing, or full IP acquisition inquiries: https://github.com/MRJonam91