hotosm/login

Centralized authentication across all HOT tools

What's novel

Centralized authentication across all HOT tools

Code Analysis

23 files read · 6 rounds

Centralized SSO authentication service for HOTOSM applications that integrates Hanko (JWT/passkey auth) with OSM OAuth, providing user mapping, group/organization management, and framework-agnostic auth libraries for FastAPI, Django, and Litestar.

Strengths

Clean separation of core auth logic from framework adapters, well-documented code with proper type hints and docstrings, and a thoughtful multi-service architecture with real business logic for groups, invitations, and RBAC.

Weaknesses

Some architectural concerns like in-memory OAuth state (breaks multi-instance), hardcoded CORS domains, and global SSL state mutation in JWTValidator; the core auth is primarily integration/glue around Hanko and OSM OAuth rather than novel algorithms.

Score Breakdown

Innovation

3 (25%)

Craft

84 (35%)

Traction

4 (15%)

Scope

88 (25%)

Signal breakdown

Innovation

Not Fork+1

Code Novelty+1

Concept Novelty+1

Craft

Ci+5

Tests+8

Polish+2

Releases+4

Has License+5

Code Quality+23

Readme Quality+15

Recent Activity+7

Structure Quality+5

Commit Consistency+5

Has Dependency Mgmt+5

Traction

Forks+0

Stars+0

Hn Points+0

Watchers+0

Early Traction+0

Devto Reactions+0

Community Contribs+4

Scope

Commits+8

Languages+8

Subsystems+13

Bloat Penalty+0

Completeness+7

Contributors+8

Authored Files+15

Readme Code Match+3

Architecture Depth+7

Implementation Depth+8

Evidence

Commits

307

Contributors

Files

191

Active weeks

TestsCI/CDREADMELicenseContributing

Repository

Language

Python

Stars

Forks

License

AGPL-3.0