sts
OfficialTenant-aware STS for plugin authentication.
AuthorArtisanCloud
Version1.0.0
Installs0
System Documentation
What problem does it solve?
PowerX STS provides tenant-scoped authentication through a token-exchange mechanism for plugins. It supports gRPC/HTTP transport, a shared KeyRing, and per-tenant credentials with rotation. It enforces TTL/aud/scope validations and integrates with auditing for secure plugin interactions.
Core Features & Use Cases
- STS Exchange: issues short-lived JWTs from client_id, client_secret, aud, scope, ttl for per-tenant plugins.
- KeyRing & Interceptors: share HS256 keys across STS and gRPC interceptors for consistent validation.
- Auditing & Rotation: per-tenant credential rotation, audit logs, and strict access control for plugin operations.
- Use cases include onboarding new plugins, cross-plugin auth, and secure tenant isolation in multi-tenant deployments.
Quick Start
Deploy the STS service and configure a tenant plugin to perform token exchanges and validate tokens through the gRPC metadata authentication.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: sts Download link: https://github.com/ArtisanCloud/PowerX/archive/main.zip#sts Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.