Changelog¶

All notable changes to pico-server-auth will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

0.1.0 - 2026-03-28¶

AuthController with /api/v1/auth/jwks, /api/v1/auth/challenge, /api/v1/auth/sign-in, and /api/v1/auth/login endpoints.
ServerAuthSettings configuration with @configured(prefix="server_auth").
TokenIssuer for RS256 JWT access and refresh token issuance.
WalletVerifier with support for ML-DSA-65, Ed25519, and secp256k1 signature verification.
ChallengeStore protocol with InMemoryChallengeStore default implementation.
JWKS endpoint compatible with pico-client-auth token validation.
Password-based admin login with configurable credentials.
Auto-discovery via pico_boot.modules entry point.