OmniRoute — аутентификация API и сессий

★ 7.9 · security

omni-auth is a Claude Code skill that manages API key authentication and session tokens for the OmniRoute AI gateway. It covers three access mechanisms — Bearer token, session cookies, and OIDC — and documents four endpoints: `POST /api/auth/login`, `POST /api/auth/logout`, `GET /api/auth/oidc/login`, and `GET /api/auth/oidc/callback`. The OIDC flow builds an authorization URL via the issuer's discovery document, sets a short-lived `oidc_state` cookie, and on successful code exchange mints a 30-day `auth_token` JWT. Local development is supported via `REQUIRE_API_KEY=false` to bypass token enforcement. This skill is the starting point for developers configuring authenticated access to OmniRoute, an OpenAI-compatible REST gateway that spans 327 LLM providers.