github.com/Authula/authula @v1.15.0

Become a Sponsor!

Overview

Authula is an open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack. It simplifies adding robust authentication to backend services, empowering developers to build secure applications faster.

All functionality is delivered through a powerful plugin system, allowing you to compose exactly the authentication stack you need — no more, no less, all built with clean architecture. Authula is flexible enough to integrate with any technology stack. It streamlines the implementation of essential security features through a clean, modular architecture, allowing developers to concentrate on building their applications without the overhead of managing authentication complexities.

Plugins & Capabilities

Authula is architected around a powerful plugin and capability system.

Plugins are modular packages that encapsulate related authentication features.
Capabilities represent individual, fine-grained functionalities exposed by these plugins.

Each plugin can offer multiple capabilities, and every route in your application explicitly declares which capabilities it leverages. This approach ensures that authentication logic is:

• Explicit – No hidden behaviors; every capability is clearly declared.
• Composable – Mix and match only the features you need.
• Auditable – Easily track which routes use which authentication features.
• Understandable – The authentication flow is transparent and easy to reason about.

This design empowers you to build secure, maintainable, and highly customizable authentication flows tailored to your application's needs.

Features

Authula comes with a variety of plugins that provide essential authentication features out of the box:

• Email & Password: Email-based flows for registration, login, email verification, password reset & email change.
• OAuth providers
• TOTP: Authenticator app support, backup codes, trusted devices for two-factor authentication
• Multiple database backends (SQLite, PostgreSQL, MySQL)
• Secondary storage (In-memory, DB, Redis)
• Rate limiting
• CSRF protection
• Hooks system
• Event bus
• Custom routes and logic

Hooks System

Authula includes a powerful, lifecycle-based hooks system that lets you intercept and customize request handling at every stage of the HTTP request/response cycle.

Hooks allow you to implement:

• custom authentication logic
• request validation
• logging & tracing
• metrics
• access control
• A/B testing
• feature flags
• audit trails
• custom headers
• dynamic routing

All without modifying core code.

Build your own plugins for:

• business logic
• custom routes
• custom auth flows
• external integrations
• internal tooling

Design Principles

• Plugin-first architecture
• Clean architecture
• Minimal dependencies
• Standard library first
• Secure by default
• Framework agnostic
• Self-hosted
• Extensible

Quick Start

Get Started with Authula

Docs

For more info and a full guide on how to use this library, check out the Docs.

SDKs

We provide the following SDKs to facilitate easy integration with Authula:

• Node.js SDK

Contributing

Your contributions are welcome! Here's how you can get involved:

• If you find a bug, please submit an issue.
• Set up your development environment by following our Contribution Guide.
• Contribute code by making a pull request to enhance features, improve user experience, or fix issues.

Support & Community

Join our growing community for support, discussions, and updates:

• Discord Server

If you'd like to support the ongoing development of this project, consider subscribing on Polar!

GitHub Stars

Our Sponsors

🏢 Corporate Sponsors

🥇 Gold Sponsors

🥈 Silver Sponsors

🥉 Bronze Sponsors