Auth and email
@cogs/auth
Canonical JWKS token verification + RBAC role resolution (env role-map + injected DB) for the workloom and fleetworks families
Role resolution reads from Role providers and falls back to the Role floor (org:viewer by default). It also mints hashed Service tokens for machine principals and checks Impersonation tokens.
More packages
All packages →- 01
@cogs/auth-events
Shared device-cookie + salted-hash new-device-login detection and login-completion handling for the workloom family of sites
- 02
@cogs/emails
Shared transactional email templates (MJML/EJS) and render core for the workloom family of sites
- 03
@cogs/send-service
Central signed transactional-email send service for the workloom family of sites (keeps SES creds out of the apps; not an open relay)