OpenSigner Auth Service API

The authentication service is built on Better Auth and provides user registration, session management, JWT issuance, and origin validation.

All /api/auth/* endpoints are handled by Better Auth. The service also exposes a JWKS endpoint, an origin-validation endpoint consumed by the iframe nginx proxy, and a health check.

Reading the constraints in this document

String bounds marked as documented bounds describe the range this API is designed to accept; they are not all enforced by server-side validation today. Treat them as the contract a client should keep to, not as a promise that a longer value is rejected.