go-make-bytes · GitHub
Skip to content
@go-make-bytes

go-make-bytes

Reusable open-source platform services in Go — identity, audit trails, EU trust lists, eID cards, document rendering. Product-grade, not product-specific.
README.md

go-make-bytes

Reusable open-source platform services, in Go. Identity and tokens, EU trust lists, eID cards, document rendering, audit trails — each service runs on its own, ships as a container image, and knows nothing about the product that calls it. Products compose these instead of rebuilding them.

The services

Repository What it is
authbyte The fleet's OAuth 2.0 authorization server — brokers eID logins to one stable person subject and mints DPoP-bound access tokens
trust-anchor EU trust-list ingester — fetches the LOTL and national Trusted Lists, verifies their XML signatures and serves versioned trust bundles
web-eid Web eID engine service — validates eID card authentication tokens and runs card-based signing operations behind service authentication
previewbyte Security-hardened document preview — renders untrusted bytes to inert page images plus text, PDFium in WebAssembly behind hard isolation
eidas-audit Append-only, hash-chained signing-evidence sink — consumes signing events from a broker and appends each one tamper-evidently, forever
access-audit GDPR personal-data-access audit sink — every service posts one record per data touch; per-row HMAC seals and purge-safe period checkpoints

The libraries these services are built from live in gmb-lib, and the open-source qualified electronic signature platform that composes them is signbyte.

Run it

Every service publishes a container image at ghcr.io/go-make-bytes/<name> — a tag per release and a tag per commit. Pin a version tag or a digest, never a moving branch tag. Each service's README documents its configuration, its HTTP surface and where it sits in a deployment.

Licence, contributing, security

MIT, with one deliberate exception: authbyte is AGPL-3.0, because it is the identity product itself rather than glue around one. Copyright SIA "Go Make Bytes" throughout. Issues are welcome on every repository; each carries a CONTRIBUTING.md describing how it is built and tested. Anything exploitable goes through the reporting route in that repository's SECURITY.md, never a public issue.

Popular repositories Loading

  1. trust-anchor trust-anchor Public

    EU trust-list ingester — fetches the LOTL and national Trusted Lists, verifies their XML signatures and serves versioned trust bundles

    Go

  2. previewbyte previewbyte Public

    Security-hardened document preview — renders untrusted bytes to inert page images plus text, PDFium in WebAssembly behind hard isolation

    Go

  3. authbyte authbyte Public

    The fleet's OAuth 2.0 authorization server — brokers eID logins to one stable person subject and mints DPoP-bound access tokens

    Go

  4. web-eid web-eid Public

    Web eID engine service — validates eID card authentication tokens and runs card-based signing operations behind service authentication

    Go

  5. eidas-audit eidas-audit Public

    Append-only, hash-chained signing-evidence sink — consumes signing events from a broker and appends each one tamper-evidently, forever

    Go

  6. access-audit access-audit Public

    GDPR personal-data-access audit sink — every service posts one record per data touch; per-row HMAC seals and purge-safe period checkpoints

    Go

Repositories

Showing 7 of 7 repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…