Contributing to ATAuth #

Development Setup #

cd gateway
npm install
cp .env.example .env   # Fill in required secrets
npm run dev            # Hot reload with tsx watch

Verify Your Changes #

npm run typecheck      # Type checking
npm run lint           # ESLint
npm run test:run       # 394 tests across 22 files

Client Libraries #

Rust (src/) and TypeScript (ts/) client libraries for token verification:

cargo test             # Rust library
cd ts && npm test      # TypeScript library

Code Style #

• TypeScript strict mode, ESLint rules enforced
• Express 5 async error handling (throw pattern, no try/catch wrappers)
• Tests live alongside source: foo.ts -> foo.test.ts
• In-memory SQLite for test isolation

Pull Requests #

1. One feature or fix per PR
2. Add tests for new functionality
3. All CI checks must pass (typecheck, lint, vitest)

Security #

Report vulnerabilities privately -- see SECURITY.md.

License #

Contributions are licensed under MIT.