arrow-left

All pages
gitbookPowered by GitBook
1 of 1

Loading...

Introduction

Production-ready OAuth 2.0 Server and OpenID Connect 1.0 Provider

Authority is a complete authentication infrastructure built with Crystal, featuring enterprise-grade security and a modern admin dashboard.

hashtag
Quick Start

Get Authority running in 5 minutes:

See Quick Start Tutorial for a complete walkthrough.

hashtag
Key Features

Category
Features

hashtag
Documentation Overview

This documentation is organized using the :

hashtag

Step-by-step guides for learning Authority:

  • - Get running in 5 minutes

  • - Build your first OAuth app

  • - Secure your endpoints

hashtag

Task-oriented guides for specific goals:

  • - Docker, source, Kubernetes

  • - Environment setup

  • - MFA, lockout, passwords

hashtag

Technical specifications and API documentation:

  • - Grant type specifications

  • - OIDC endpoints

  • - Complete API reference

hashtag

Understanding concepts and architecture:

  • - System design

  • - Protocol fundamentals

  • - Security architecture

hashtag
Standards Compliance

Authority implements these specifications:

  • - OAuth 2.0 Authorization Framework

  • - Bearer Token Usage

  • - JSON Web Token (JWT)

hashtag
Technology Stack

Component
Technology

hashtag
Screenshots

# Clone the repository
git clone https://github.com/azutoolkit/authority.git
cd authority

# Start with Docker
docker-compose up -d

# Visit http://localhost:4000
- Implement login flows
- Client management
- All settings
- Decision guide
- Proof Key for Code Exchange (PKCE)
  • - Token Introspection

  • - Token Revocation

  • - Device Authorization Grant

  • OAuth 2.0

    Authorization Code, PKCE, Client Credentials, Device Flow, Refresh Tokens

    OpenID Connect

    ID Tokens, UserInfo, Discovery, JWKS

    Security

    MFA/TOTP, Account Lockout, Password Policies, Audit Logging

    Admin

    Client Management, User Management, Scope Configuration, Settings

    Language

    Crystal

    Web Framework

    Azu

    Database

    PostgreSQL

    Templating

    Crinja (Jinja2-compatible)

    Caching

    Redis (optional)

    Diataxis frameworkarrow-up-right
    Tutorials
    Quick Start
    First OAuth Integration
    Protect Your API
    How-To Guides
    Installation
    Configuration
    Security
    Reference
    OAuth 2.0 Flows
    OpenID Connect
    API Endpoints
    Explanation
    Architecture
    OAuth 2.0 Concepts
    Security Model
    RFC 6749arrow-up-right
    RFC 6750arrow-up-right
    RFC 7519arrow-up-right
    Landing Page
    Admin Dashboard
    Add User Authentication
    OAuth Clients
    Configuration
    Choosing Grant Types
    RFC 7636arrow-up-right
    RFC 7662arrow-up-right
    RFC 7009arrow-up-right
    RFC 8628arrow-up-right
    OpenID Connect Core 1.0arrow-up-right