Platform Modules Directory
Alegor modules provide reusable capabilities that can be combined and extended within a custom application.
Identity & Tenancy
Multi-tenant identity boundaries, user lifecycle, and authentication.
Provides unified authentication, user and organization hierarchy, session handling, MFA support, and token management designed for isolated multi-tenant and single-tenant environments.
- ✓ Multi-tenant and organization workspace isolation
- ✓ Passwordless, email magic link, and credential authentication
- ✓ OAuth2 / OIDC and enterprise SSO federation hooks
Permissions & Authorization
Hierarchical RBAC, contextual ABAC, and explicit resource policies.
Fine-grained, audit-ready authorization engine combining role-based access control with attribute-based dynamic policy evaluation across tenants and resources.
- ✓ Role-Based Access Control (RBAC) with customizable tenant roles
- ✓ Attribute-Based Access Control (ABAC) for contextual evaluations
- ✓ Explicit capability matrix for UI components and API endpoints
Documents & Storage
S3-compatible asset pipeline, metadata indexing, and access-controlled streaming.
Comprehensive document processing engine handling secure uploads, chunked streaming, background OCR/conversion, virus scanning pipelines, and signed URL generation.
- ✓ Direct-to-S3 signed URL uploads with checksum validation
- ✓ Tenant-scoped storage drivers and encryption at rest
- ✓ Asynchronous processing pipeline (PDF rendering, resizing, text extraction)
Audit & Compliance Logging
Append-only immutable event streams for compliance and forensic analysis.
Enterprise-grade audit logger recording who changed what, when, and why, complete with before/after state diffs, user agent fingerprints, and tamper-evident signatures.
- ✓ Automatic Eloquent model mutation tracking (before/after diffs)
- ✓ Contextual metadata enrichment (IP, User Agent, Tenant ID, Request ID)
- ✓ Asynchronous high-throughput queue ingestion to avoid request lag
Workflows & State Machines
Deterministic state machine engine with visual transitions and guard conditions.
Declarative state machine and multi-step workflow orchestrator for business processes, approvals, transitions, and automated compensation actions.
- ✓ Declarative state machine configurations with explicit transitions
- ✓ Guards and condition predicates for authorized state changes
- ✓ Multi-approver hierarchies with escalation timeouts
Notifications & Messaging
Omni-channel delivery engine across Email, SMS, Webhooks, Push, and In-App.
Unified notification dispatcher featuring tenant-configurable templates, per-user delivery preferences, batching, rate limiting, and delivery status tracking.
- ✓ Multi-channel routing (Transactional Email, SMS, Webhooks, Push, In-App bell)
- ✓ Tenant and user preference matrix (channels, quiet hours, digest frequency)
- ✓ Template engine supporting Markdown, HTML, and localized variables
Integrations & Webhooks
Bi-directional webhook engine, REST API gateway, and external sync pipeline.
Comprehensive integration gateway supporting signed outbound webhooks, inbound webhook verification, OAuth client credentials, rate limiting, and dead-letter queue recovery.
- ✓ Outbound webhook dispatch with HMAC-SHA256 signature verification
- ✓ Configurable retry backoffs (exponential backoff with jitter)
- ✓ Inbound webhook signature validator and replay attack protection
Reporting & Aggregation
High-performance analytical queries, export queues, and scheduled summaries.
Analytical querying engine optimized for multi-tenant data summaries, large CSV/Excel/PDF export jobs, and recurring executive report generation.
- ✓ Multi-tenant analytical aggregations and metrics queries
- ✓ Streaming large datasets to CSV, XLSX, and formatted PDF without memory spikes
- ✓ Asynchronous export queue with downloadable signed URLs upon completion