Keslr Connect Brings Verified Humans To Apps
Keslr Connect gives TypeScript applications OpenID Connect authentication, Express guards, verification claims, and network-based identity lookups for Keslr’s invite-only verified-human network. Its security-focused defaults include mandatory PKCE with S256, hard-coded RS256, constant-time comparisons, and fail-closed verification handling.
Keslr Connect’s compelling idea is treating proof-of-human as an application primitive rather than another signup checkbox, though its invite-only trust graph and private-network model limit the audience to communities willing to adopt the whole ecosystem.
- –`@keslr/auth`, `@keslr/express`, and `@keslr/network` cover login, authorization middleware, and device-to-member lookups.
- –Network identity can eliminate accounts for private services, but it identifies the device owner—not necessarily the person currently using the device.
- –Mandatory PKCE, RS256-only validation, single-use token exchanges, and fail-closed unknown statuses show unusually opinionated security engineering.
- –The repository is MIT-licensed and test-heavy, but remains pre-release and is not yet published to npm.
- –The model could be especially useful for anti-spam guestbooks, member-only tools, and AI applications that need to distinguish people from automated agents.
DISCOVERED
1h ago
2026-09-06
PUBLISHED
1h ago
2026-09-06
RELEVANCE
AUTHOR
Github Awesome