Repolode
authgear

authgear/authgear-server

Self-hostable authentication server covering passwordless login, passkeys, MFA, SSO and social login, with a pre-built login UI and admin portal.

Open-source alternative to:Auth0ClerkFirebase Auth

Stars
2,116
Forks
130
Open issues
358
Last commit
24 hours ago

What is it?

Authgear is an open-source authentication and identity service, positioned as a self-hosted alternative to hosted identity platforms. It handles sign-up and login for consumer applications, including passwords, email and SMS one-time codes, magic links, passkeys, and biometric login on iOS and Android.

The server ships with a pre-built signup and login page, a user account settings page, and a web-based Portal for managing users, sessions, logs and authentication configuration. Multi-factor options include TOTP apps, SMS and email OTP. On the federation side it supports OIDC, OAuth 2.0 and SAML, plus social providers such as Google, Facebook, Apple and WeChat, and enterprise connections like ADFS and LDAP.

Developers can extend flows with webhooks and TypeScript hooks, manage resources through a GraphQL Admin API, and use RBAC with roles and groups. The repository contains the core server, the AuthUI, the Portal and the Admin API; client SDKs for web, React Native, iOS, Android, Flutter and Xamarin live in separate repositories. A Helm chart is provided for Kubernetes deployment.

Key features

  • 01Passwordless login via magic link, email or SMS OTP, and passkeys
  • 02Pre-built, customizable signup/login and account settings pages
  • 03MFA with TOTP authenticator apps, SMS and email codes
  • 04OIDC, OAuth 2.0 and SAML single sign-on, with social and enterprise connections
  • 05Webhooks, TypeScript hooks and a GraphQL Admin API
  • 06Role-based access control with roles and groups

Use cases

  • Adding login and signup to a SaaS product without building auth from scratch
  • Running a self-hosted identity provider to keep user data in your own infrastructure
  • Providing SSO to business customers via SAML, ADFS or LDAP
  • Adding biometric or passkey login to mobile apps

Topics

FAQ

What is authgear-server?
Self-hostable authentication server covering passwordless login, passkeys, MFA, SSO and social login, with a pre-built login UI and admin portal. Authgear is an open-source authentication and identity service, positioned as a self-hosted alternative to hosted identity platforms. It handles sign-up and login for consumer applications, including passwords, email and SMS one-time codes, magic links, passkeys, and biometric login on iOS and Android.
Is authgear-server free to use? What license does it have?
authgear-server is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is authgear-server still maintained?
Actively maintained. The last commit to authgear-server was on Oct 18, 2026.
What can I use authgear-server for?
Adding login and signup to a SaaS product without building auth from scratch Running a self-hosted identity provider to keep user data in your own infrastructure Providing SSO to business customers via SAML, ADFS or LDAP Adding biometric or passkey login to mobile apps
Where can I get authgear-server?
The source code and installation instructions are on GitHub: https://github.com/authgear/authgear-server

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects