auth: gate ed25519 exports, resolve CORS changeset, add backend TODO

This commit is contained in:
2026-08-24 00:00:29 +04:00
parent f6a58a9a3e
commit 8a954916e1
5 changed files with 43 additions and 27 deletions

View File

@@ -0,0 +1,7 @@
---
"@marketplaces/auth": minor
---
Remove `ed25519/*` exports from the public API (`index.ts`). The Ed25519 challenge/response admin auth flow has no backend yet (per ADR-0001) and was shipping fully in every consumer's bundle, unused. Source stays in `src/ed25519/` untouched — this only stops it being part of the published package's public surface; re-export it once that backend exists.
Breaking for any consumer importing `Ed25519AuthService`, `AuthFacade`, `AuthApiService`, `SessionService`, `JwtService`, `Ed25519KeypairService`, `PermissionService`, `Ed25519VerificationService`, `NoopEd25519VerificationService`, or related types from `@marketplaces/auth` — none confirmed to exist at the time of this change.