Name: omni-auth
Author: diegosouzapw

Manage API key authentication and session tokens. Start here to authenticate requests via Bearer token, obtain session cookies, and configure login requirements for the OmniRoute API.

<! generated by src/lib/agentSkills/generator.ts; manual edits will be overwritten Overview Manage API key authentication and session tokens. Start here to authenticate requests via Bearer token, obtain session cookies, and configure login requirements for the OmniRoute API. Authentication Remote API requests use a Bearer credential. Dashboard login is different: POST /api/auth/login accepts a management password and returns an auth token session cookie. Endpoints POST /api/auth/login Authenticate user POST /api/auth/logout Log out GET /api/auth/oidc/login Start OIDC login for the dashboard admin gate Builds an authorization URL from the configured OIDC issuer/client (discovered via {issuer}/.well known/openid configuration , falling back to {issuer}/authorize ), sets a short lived oidc state cookie, and redirects the browser. Password login remains available as a fallback while OIDC is enabled. GET /api/auth/oidc/callback Complete OIDC login for the dashboard admin gate Validates the state cookie, exchanges the authorization code for tokens, verifies the ID token against the issuer's JWKS (audience = client id), and checks the token's sub / email against oidcAllowedSubjects , which must hold at least one entry (an empty list ends in not configured ). On success it mints the same 30 day auth token dashboard session JWT used by password login and redirects to /dashboard . GET /api/auth/csrf GET auth › csrf GET /api/auth/status GET auth › status Payloads See the full OpenAPI specification at GET /api/openapi/spec or docs/openapi.yaml for detailed request/response schemas. <! skill:custom start <! Migrated from skills/omniroute/SKILL.md (preserved curated content) OmniRoute Local/remote AI gateway exposing OpenAI compatible REST. One key, 375 providers, auto fallback, RTK token saver, MCP server, A2A agents. Setup All requests: ${OMNIROUTE URL}/v1/... with Authorization: Bearer ${OMNIROUTE KEY} . Verify: curl $OMNIROUTE URL/api/health → {"ok":true} Discover models Use data[].id as model field in requests. Combos appear with owned by:"combo" . Capability skills Capability Raw URL Chat / code gen https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Image generation https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Text to speech https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Speech to text https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Embeddings https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Web search https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md Web fetch https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni inference/SKILL.md MCP server (110 tools) https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni mcp/SKILL.md A2A protocol https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni agents a2a/SKILL.md Routing & combos https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni combos routing/SKILL.md Token compression https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni compression/SKILL.md Monitoring & health https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/omni resilience/SKILL.md CLI skills (omniroute binary) Capability Raw URL CLI entry point https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/cli serve/SKILL.md CLI admin & lifecycle https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/cli serve/SKILL.md CLI providers & keys https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/cli providers/SKILL.md CLI cloud agents ( omniroute cloud … ) https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/cli backup sync/SKILL.md CLI evals & benchmarks https://raw.githubusercontent.com/diegosouzapw/OmniRoute/main/skills/cli eval/SKILL.md Errors 401 → set/refresh OMNIROUTE KEY (Dashboard → API Keys) 400 Invalid model format → check model exists in /v1/models/<kind 503 Provider circuit open → upstream provider down; retry after Retry After seconds 429 → rate limited; honor Retry After Differentiators vs OpenAI direct Auto fallback combos (19 strategies): never stop coding even if a provider rate limits RTK token saver : tool result compressed via 47 specialized filters (git diff, test jest, terraform plan, docker logs…) — 20 40% token reduction Caveman mode : optional terse system prompt injection (LITE/FULL/ULTRA) — 15 25% completion reduction MCP + A2A servers built in (this is the only AI router that exposes both protocols) Memory with FTS5 + Qdrant for persistent agent context Guardrails for PII masking, prompt injection detection, vision policies <! skill:custom end