FerriskeyKey capabilities
Flow Recording
Each authentication request opens a CompassFlow, a complete record from the first request to the token or the failure.
Step-Level Detail
Nine step types tracked individually: authorize, credential validation, MFA, token exchange, IdP redirect and callback, the two SAML steps, and finalize.
Per-Step Timings
Every step records its duration in milliseconds. Spot slow Argon2 rounds, external IdP latency, or database bottlenecks.
Rich Error Context
Failures carry a machine-readable error code and a human-readable message, instead of a bare 401.
Zero Overhead Off
Disabled, the FlowRecorder short-circuits on entry: no channels, no writes, no allocations.
Queryable
Query flows by user, client, grant type, status, or time range through the admin API.
How it works
Flow created
Authentication request arrives. Compass creates a flow with realm, client, grant type, IP, and user agent.
Steps recorded
Every phase of authentication (authorize, credential check, MFA, token exchange) is recorded with its timing and outcome.
User identified
After successful credential validation, the user ID is attached to the flow, linking it for future queries.
Flow completed
Authentication finishes. The flow is marked success, failure, or expired with total duration in milliseconds.
Ready to use Compass?
Full reference, configuration options, and examples in the documentation.