Repolode
Submit
supertokens

supertokens/supertokens-core

Self-hosted core service for SuperTokens, an open-source authentication and session management backend that is an alternative to Auth0, Firebase Auth and AWS Cognito.

Open-source alternative to:Auth0Firebase AuthenticationAWS Cognito

View on GitHubWebsite
Stars
15,333
Forks
786
Open issues
151
Last commit
6 hours ago

What is it?

SuperTokens Core is the HTTP service that handles core authentication logic and database operations for the SuperTokens system. It is used by SuperTokens backend SDKs for Node.js, Go and Python, while the frontend SDKs manage session tokens and login UI. Together they provide sign-up, sign-in, sign-out and session refresh APIs.

The project is aimed at teams that want to add login without building it from scratch or depending on a hosted identity provider. The core runs on your own infrastructure and stores user data in your own database, so user records are not held by a third party. Features listed include passwordless login, social login, email and phone password login, multi-factor authentication, multi-tenancy with enterprise SSO, and user roles.

The core is written in Java and distributed as a binary or Docker image with the JDK bundled, so it runs like any other HTTP microservice. Most session verification happens inside the backend SDKs rather than calling the core, and customizations to auth APIs are generally made at the SDK level.

Key features

  • 01Passwordless, social, email-password and phone-password login
  • 02Session management with token refresh
  • 03Multi-factor authentication
  • 04Multi-tenancy and enterprise SSO support
  • 05User roles and a user management dashboard
  • 06Self-hosted deployment with your own database

Use cases

  • Adding login and sessions to a web or mobile app without a hosted auth provider
  • Keeping user data on your own infrastructure for compliance reasons
  • Migrating away from Auth0, Firebase Auth or AWS Cognito without forcing users to re-register
  • Providing enterprise SSO for multi-tenant SaaS products

Quick start

  1. 1

    Follow the official getting started guides on the SuperTokens docs site

  2. 2

    To build from source, follow the instructions in the project wiki

Things to know

  • The license is not clearly identified in the metadata, so check the repository license before use.
  • SuperTokens is described as open-core, and some features are listed on a pricing page rather than being fully open source.

Topics

#authentication#session-management#oauth#passwordless#social-login#multi-tenant#sso#java#auth0#aws-cognito

FAQ

What is supertokens-core?
Self-hosted core service for SuperTokens, an open-source authentication and session management backend that is an alternative to Auth0, Firebase Auth and AWS Cognito. SuperTokens Core is the HTTP service that handles core authentication logic and database operations for the SuperTokens system. It is used by SuperTokens backend SDKs for Node.js, Go and Python, while the frontend SDKs manage session tokens and login UI. Together they provide sign-up, sign-in, sign-out and session refresh APIs.
Is supertokens-core free to use? What license does it have?
supertokens-core is open source under the Other license. Check the license terms before using it in commercial products.
Is supertokens-core still maintained?
Actively maintained. The last commit to supertokens-core was on Oct 22, 2026.
What can I use supertokens-core for?
Adding login and sessions to a web or mobile app without a hosted auth provider Keeping user data on your own infrastructure for compliance reasons Migrating away from Auth0, Firebase Auth or AWS Cognito without forcing users to re-register Providing enterprise SSO for multi-tenant SaaS products
How do I install supertokens-core?
Follow the official getting started guides on the SuperTokens docs site To build from source, follow the instructions in the project wiki
Where can I get supertokens-core?
The source code and installation instructions are on GitHub: https://github.com/supertokens/supertokens-core

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects