Warning: This is a playground — kiddie code, full of bugs, written purely for messing around.
Auth-ooo is a dummy project for:
- Experimenting with ACL (Access Control Lists) — “who’s allowed to do what”.
- Playing with RBAC (Role-Based Access Control) — assigning roles (admin, user, bovinator).
- Protecting APIs with multiple schemes: JWT, cookie-based ACL, weird PolicySchemes, and more.
- Running silly experiments like “shared session between authenticated and anonymous users”, mock token issuers, and simulating everything until it breaks.
Serious(ish) note: Don’t use this code directly in production.
If something works too well, it’s either luck or a bug. Audit first.