klyrek-auth 0.1.0

Authentication flow mapping for the Klyrek ecosystem

klyrek-auth

Authentication flow mapping. Three independent pieces:

• forms — classifies discovered form endpoints (typically klyrek-crawler's source="crawler-form" entries) as login, register, password-reset, or logout based on the endpoint's URL and field names — no extra requests needed.
• session — inspects a response's cookies, Authorization header, and redirect chain (including response.history, since klyrek-http follows redirects) to identify session mechanisms: known session-cookie names, JWTs (validated by decoding the header segment, not just counting dots), and OAuth redirects to known providers.
• gating — probes a list of URLs and tags each as auth-gated (Endpoint.requires_auth) based on a 401/403 response or a redirect that lands on a login-shaped path.

from klyrek_auth.forms import find_auth_forms
from klyrek_auth.gating import probe_auth_gating
from klyrek_auth.session import detect_session_mechanisms

auth_forms = find_auth_forms(crawl_result.endpoints)
mechanisms = detect_session_mechanisms(client.get("https://target.com/"))
gated = probe_auth_gating(client, ["https://target.com/account", "https://target.com/about"])