authenticator

Authenticator

A stand-alone gRPC based authentication API. Easily integrate authentication into any custom project. Authenticator takes care of user credential storage and checking. It generates JSON Web tokens for users, which easily can be verified by other servers in your ecosystem using performant and secure EdDSA public key cryptography.

Benefits:

• Added security, the user credentials live in a seperate database schema as you application's one. Creating a strict seperation in database access;
• No more password checking logic in you application. Just send a API call to authenticator and check the generated token on each subseqeuent request;

Fautures

• gRPC based, simply implement a client in your own preferred language by compiling protobuffer files;
• Support for master/slave database setups using our own MultiDB library;
• Admin panel for user management;
• A basic HTTP based login server, based on redirects;
• Argon2 hashed password storage;
• User groups and "audiences" for fine grained authorization checking;
• Comes with the verify Go library, which has ready to use token verification methods to integration even easier;

Status

This project is still under heavy development. We've recently deployed a beta version of the gRPC and admin server.

Future plans

• Two factor authentication
• OAuth2 provider support