changelog
Shipped.
- · API live in production — /api/v1/nexauth on api.in.odento.app
- · OTP send/verify, sessions, per-tenant RS256 JWT + JWKS
- · Google, password (argon2id), magic link, full WebAuthn passkeys
- · RBAC authorization API — free tier
- · Webhook delivery engine — HMAC-signed, exponential retry
- · User import — bcrypt/argon2/scrypt/pbkdf2/firebase-scrypt adapters + lazy migration
- · Self-contained channels — Meta WABA, 2Factor, ZeptoMail direct + BYO creds
- · Credit ledger — debit-on-send, hash-chained
- · RLS on every nx_ table — Postgres-enforced tenant isolation
- · Spec freeze — 10 spec docs in apps/nexauth/specs
- · Service scaffold — port 4125, sovereign deploy wiring