Repolode
Submit
ValueMelody

ValueMelody/melody-auth

A self-hostable OAuth 2.0 and OIDC authentication server with login, MFA, social sign-in and an admin panel, running on Cloudflare Workers or Node.js.

Open-source alternative to:Auth0Okta

View on GitHubWebsite
Stars
651
Forks
70
Open issues
3
Last commit
11 days ago

What is it?

Melody Auth is an authentication and OAuth server you can deploy and host yourself. It runs on Cloudflare Workers with D1 and KV, or on Node.js with Redis and PostgreSQL, so teams can choose between minimal infrastructure and full control over their data.

The server covers the core identity flows: OAuth 2.0 authorization and token exchange, OpenID configuration, sign-up and sign-in (including passwordless), email verification, password reset, and account linking. It also supports social sign-in with Google, GitHub, Apple and others, plus OIDC and SAML SSO providers on Node.js. Multi-factor options include email, OTP, SMS, passkeys and recovery codes.

The project ships with a server-to-server REST API, an admin panel for managing users, apps, scopes, roles and organizations, and React, Angular, Vue and web SDKs that implement PKCE-based login in the browser.

Key features

  • 01OAuth 2.0 authorization, token exchange and OpenID configuration
  • 02Social sign-in with Google, GitHub, Apple, Facebook and Discord
  • 03Multi-factor authentication with email, OTP, SMS and passkeys
  • 04Role-based access control, organizations and user attributes
  • 05Admin panel and server-to-server REST API for management
  • 06Mailer integrations for SendGrid, Mailgun, Resend, Postmark and SMTP

Use cases

  • Adding a centralized login and OAuth provider to multiple internal apps
  • Self-hosting an identity provider to keep user data under your own control
  • Giving a React, Angular or Vue frontend PKCE-based login without building auth from scratch

Things to know

  • SAML SSO and SMTP mail are supported only in the Node.js environment, not on Cloudflare Workers.
  • The README gives no install commands, so setup depends on the linked external documentation.

In collections

Login, SSO & identity servers

Topics

#authentication#oauth2#oidc#identity-provider#cloudflare-workers#mfa#passkey#self-hosting#authentication-system#cloudflare

FAQ

What is melody-auth?
A self-hostable OAuth 2.0 and OIDC authentication server with login, MFA, social sign-in and an admin panel, running on Cloudflare Workers or Node.js. Melody Auth is an authentication and OAuth server you can deploy and host yourself. It runs on Cloudflare Workers with D1 and KV, or on Node.js with Redis and PostgreSQL, so teams can choose between minimal infrastructure and full control over their data.
Is melody-auth free to use? What license does it have?
melody-auth is open source under the MIT license. Check the license terms before using it in commercial products.
Is melody-auth still maintained?
Actively maintained. The last commit to melody-auth was on Oct 27, 2026.
What can I use melody-auth for?
Adding a centralized login and OAuth provider to multiple internal apps Self-hosting an identity provider to keep user data under your own control Giving a React, Angular or Vue frontend PKCE-based login without building auth from scratch
Where can I get melody-auth?
The source code and installation instructions are on GitHub: https://github.com/ValueMelody/melody-auth

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects