rba - Risk-Based Authentication

Architecture

Signal Collectors -> Feature Builder -> Risk Engine -> Policy Engine
Storage Adapters:
- EventStore
- SessionStore
- ProfileStore
- PolicyStore

Package structure

rba/ # Core types + Assessor orchestrator
rba/signals/ # Signal collectors (IP, UA, device, geo)
rba/feature/ # Feature builder (signal -> feature)
rba/risk/ # Risk engine (feature -> score + level)
rba/policy/ # Policy engine (assessment -> decision)
rba/storage/ # Storage adapter interfaces
rba/oidc/ # OIDC claims mapper + step-up helper
rba/telemetry/ # Observability hooks & interfaces

Quick start

package main
import (
 "context"
 "log"
 "time"
 "github.com/robby031/rba/rba"
 "github.com/robby031/rba/rba/feature"
 "github.com/robby031/rba/rba/policy"
 "github.com/robby031/rba/rba/risk"
 "github.com/robby031/rba/rba/signals"
)
func main() {
 collectors := []rba.SignalCollector{
 signals.NewIPCollector(),
 signals.NewUserAgentCollector(),
 signals.NewDeviceCollector("X-Device-ID"),
 }
 assessor := rba.NewAssessor(
 collectors,
 feature.NewDefaultBuilder(),
 risk.NewRuleBasedEngine(),
 policy.NewRuleBasedEngine(nil),
 )
 input := rba.AssessmentInput{
 SubjectID: "user-123",
 TenantID: "tenant-a",
 RequestID: "req-789",
 OccurredAt: time.Now().UTC(),
 Action: "login",
 IPAddress: "203.0.113.10",
 UserAgent: "Mozilla/5.0",
 }
 assessment, decision, err := assessor.Evaluate(context.Background(), input)
 if err != nil {
 log.Fatal(err)
 }
 log.Printf("risk=%s score=%.2f decision=%s",
 assessment.Level, assessment.Score, decision.Action)
}

Design principles