Quillstack and Punk ecosystems provide authentication frameworks

Technical documentation and guides have been released regarding authentication implementations within the Quillstack and Punk ecosystems.

Quillstack/auth provides a framework for API authentication, focusing on centralized enforcement where routes define requirements and middleware handles the validation. The system emphasizes security best practices such as constant-time secret comparison and secure token hashing. It allows developers to define identity providers and manage user roles and attributes through integrated middleware.

The Punk ecosystem offers a comprehensive approach to building fully authenticated applications. Using various plugins, including Punk::Auth, Punk::Plugin::Mailer, Punk::Plugin::TOTP, and Punk::Plugin::OAuth2, developers can implement multiple entry points such as password forms, email verification, TOTP-based second-factor authentication, and OAuth2 providers like GitHub and Google.