Riligar Auth Elysia Skill

This skill provides a backend workflow for integrating authentication and permissions using the @riligar/auth-elysia SDK.

Core Integration Workflow

1. Installation

Install the backend SDK:

bun add @riligar/auth-elysia

2. Environment Variables

Set up your Secret Key and URLs in your environment files.

[!CAUTION] Backend integration requires the Secret Key (sk_...). Never share this key or include it in client-side code.

# .env.development
AUTH_API_URL=https://manager.myauth.click
AUTH_API_SECRET=sk_test_your_secret_key
AUTH_JWKS_URL=https://manager.myauth.click/.well-known/jwks.json

# .env.production
AUTH_API_URL=https://manager.myauth.click
AUTH_API_SECRET=sk_live_your_secret_key
AUTH_JWKS_URL=https://manager.myauth.click/.well-known/jwks.json

3. Plugin Registration

Add the authPlugin to your Elysia instance.

import { Elysia } from 'elysia'
import { authPlugin } from '@riligar/auth-elysia'

const app = new Elysia()
    .use(
        authPlugin({
            apiUrl: process.env.AUTH_API_URL,
            apiKey: process.env.AUTH_API_SECRET,
            jwksUrl: process.env.AUTH_JWKS_URL,
        })
    )
    .listen(3000)

For more patterns, see server-snippets.js.

Specialized Guides

• Context & User Data: Documentation for ctx.auth and ctx.user. See context-and-user.md.
• Route Protection: How to implement requireAuth middleware and guard route groups. See route-protection.md.
• Manual Verification: Using verifyToken for custom JWT handling. See manual-verification.md.

Common Tasks

Protecting a Route Group

Use onBeforeHandle to secure multiple endpoints efficiently.

app.group('/api/v1', app => app.onBeforeHandle(requireAuth).get('/data', () => ({ ok: true })))

Accessing User Profile

Access the decoded user data directly from the context.

app.get('/profile', ({ user }) => {
    return { id: user.id, email: user.email }
})