Hellmade.Auth.Abstractions

Provider-agnostic contracts for authentication and token handling.

Purpose

• decouple services from any specific identity provider (Clerk today, others later)
• standardize auth models (AuthUser, WebhookEvent, PAT contracts)
• keep service code stable when provider adapters change

Key interfaces

• IAuthProvider
  • user CRUD/list
  • webhook verification (ValidateWebhookAsync)
• IAuthTokenValidator
  • token-to-principal normalization
• IPersonalAccessTokenService
  • local PAT lifecycle (CreateAsync, ValidateAsync, RevokeAsync)

Adoption in another service

1. Add project/package reference.
2. Depend on these interfaces in middleware/endpoints.
3. Register one concrete provider adapter (example: Hellmade.Auth.Provider.Clerk).
4. Do not reference provider-specific types outside DI wiring.

Swap identity provider later

Implement a new adapter package that fulfills these interfaces. Service/business code remains unchanged.