Aetoskia Auth Server

The Aetoskia Auth Server is the central identity service of the Aetos Platform ecosystem. It issues, validates, and introspects short-lived JWT access tokens against a single shared user store backed by MongoDB, so every service can trust one issuer instead of shipping its own auth logic.

Why centralize authentication?

• Single source of identity — one user database, one issuer, one secret.
• Uniform token contract — every service verifies the same HS256 JWT.
• No auth code duplication — services delegate with jwtlib or a generated OpenAPI dependency.
• Instant revocation surface — introspection gives services a live active check rather than trusting expiry alone.

Sections

Section	What you'll find
Centralized Auth	The identity model and how the ecosystem trusts the server
How to Use	Register, login, and call endpoints with tokens
Platform Integration	How services authenticate requests
Deployment	Environment, Docker, and CI/CD
Development	Local setup, tests, and regenerating the spec

Endpoints at a glance

Method	Path	Purpose
POST	/register	Create a user account
POST	/login	Authenticate and issue a JWT
GET	/me	Current user (Bearer)
POST	/logout	Stateless logout (Bearer)
POST	/introspect	Service-to-service token verification
GET	/health	Health check

Service identity

• Title: Aetoskia Auth Server
• Version: 0.0.5
• API spec: docs/api/openapi.json (rendered in the API reference site)

---