routed_auth_cloudflare library

Cloudflare D1 persistence for package:server_auth.

This library provides a host-neutral CloudflareD1AuthStore and its typed migration schema. It uses the D1 binding from package:routed_node so the same adapter contract can be exercised by Cloudflare Workers and compatible SQL-backed hosts.

Classes

CloudflareD1AuthApiKeyStore
Bounded, digest-only API-key persistence backed by Cloudflare D1.
CloudflareD1AuthMigration
Describes one Cloudflare D1 auth schema migration.
CloudflareD1AuthSchema
Typed schema configuration for the D1 auth store.
CloudflareD1AuthStore
A durable AuthStore backed by a Cloudflare D1 binding.
CloudflareD1OAuthAccessTokenStore
Digest-only OAuth access and refresh-token persistence backed by D1.
CloudflareD1OAuthAuthorizationCodeExchangeStore
Authoritative D1 transaction boundary for OAuth authorization-code grants.
CloudflareD1OAuthAuthorizationCodeStore
Digest-only OAuth authorization-code persistence backed by Cloudflare D1.
CloudflareD1OAuthClientStore
Prefix-isolated OAuth client registry backed by Cloudflare D1.
CloudflareD1PhoneNumberStore
Durable, digest-only phone authentication commands owned by the D1 domain.
CloudflareD1ScimConnectionStore
Durable managed-SCIM connection and bearer-credential persistence.
CloudflareD1UserDeletionCoordinator
D1-owned coordinator for atomic core and plugin user deletion.
CloudflareD1UserDeletionDomain
Exact D1 database and schema identity accepted by a deletion coordinator.
CloudflareD1UserDeletionPlan
Immutable plugin-owned D1 deletion plan.
CloudflareD1UserDeletionStatement
One immutable D1 mutation containing a mandatory coordinator guard.
CloudflareD1WebAuthnAuthenticatorStore
Bounded passkey persistence with exact counter and removal mutations.
CloudflareD1WebAuthnChallengeStore
Bounded, digest-only one-time WebAuthn challenge persistence in D1.