stack-auth/stack-auth

Features

• Authentication-as-a-Service - Provides pre-built authentication flows with OAuth, passkeys, and session management for web apps.
• Team Member Management - Organizes users into teams with role-based access control, invitations, and member management.
• Team Member Invitations - Sends email invitations to join teams with role-based access control and a team switcher.
• Webhook Delivery - Sends real-time backend notifications via POST requests with signed JSON payloads to configurable endpoints.
• Webhook Event Receivers - Receives POST requests with JSON payloads at configured server URLs for user and team events.
• Team Management - Creates teams, manages members, assigns role-based permissions, and stores team-specific profiles.
• Team Creators - Creates new teams and optionally adds the creator with default permissions from the dashboard.
• Team Deleters - Deletes teams, requiring the delete team permission on the client side.
• Team-Scoped Access Control - Groups users into teams with granular permissions for membership management and resource access control.
• Webhook Configuration - Ships interfaces for defining and managing webhook endpoints and routing parameters.
• Signed Webhook Deliveries - Sends signed, tamper-proof webhooks with automatic retries and dashboard-based endpoint management.
• Webhook Event Consumers - Processes incoming webhook payloads to drive system integrations.
• API Key Authentication - Validates incoming API calls by checking the provided API key against stored user or team credentials.
• API Key Management - Generates and manages scoped API keys for programmatic access to user and team resources.
• Key Lifecycle Dashboards - Ships a dashboard for generating and rotating scoped API keys programmatically.
• Pre-built Authentication Components - Ships ready-made sign-in, sign-up, and user management components that drop into any page.
• Server-Side Session Stores - Creates and maintains authenticated sessions using server-side storage and cookie-based token exchange.
• Open-Source Authentication Platforms - An open-source authentication and authorization platform with pre-built UI components and team management.
• OAuth Token Exchanges - Provides an API to retrieve current OAuth access tokens for authorized external API calls.
• OAuth Provider Integrations - Integrates with Google, GitHub, and Apple so users can sign in with existing accounts.
• Passkey Authentication - Lets users sign in using device-based biometric or PIN authentication without a password.
• Unified Passkey and OAuth Sign-in Flows - Handles sign-in flows including passkeys, OAuth providers, and CLI authentication with a single drop-in component.
• Embedded Authentication Forms - Renders pre-built forms for user authentication, including credential and magic link sign-in options.
• Team Action Permission Checks - Verifies a user has the required permission before performing an action on a team.
• Role-Based Access Control - Defines and enforces granular access permissions for users and teams based on assigned roles.
• Route Protection - Redirects unauthenticated visitors to the sign-in page using client hooks, server calls, or middleware.
• Session Authentication - Creates, maintains, and terminates authenticated sessions across client and server components.
• Full Lifecycle Managers - Creates, maintains, and terminates authenticated sessions across the application for each user.
• Sign-Up Form Customizations - Builds a custom sign-up form by replacing the default component with a tailored implementation.
• Webhook Integrations - Fires HTTP callbacks on user events so external systems react to sign-ups, logins, and other actions.
• Authentication UI Components - Renders pre-built authentication forms and management interfaces as replaceable React components with customizable styling.
• Sign-In Page Customizations - Builds a custom sign-in page by replacing the default component with a tailored implementation.
• Email and Notifications - Sends transactional and marketing emails with customizable themes, templates, and user preference management.
• Customizable Email Notification Platforms - Provides an email system with customizable templates, SMTP integration, and user-controlled preferences.
• User Activity Dashboards with Session Replays - Provides live active-user counts, session replays, and dashboard building with plain-English or SQL queries.
• Billing and Usage - Handles subscriptions, one-time charges, and usage metering with credits for users or teams.
• Usage Metering & Billing - Handles subscriptions, one-time charges, and usage-based billing for individuals or teams.
• Transactional Emailing - Sends automated emails for user verification, password resets, and other account-related events.
• Unified Email Dispatch Services - Delivers both transactional and marketing emails from one API with AI template editing and tracking.
• Prebuilt Management Interfaces - Provides ready-made UI components for users and teams to manage their own API keys.
• CLI-Based Authentication - Opens a browser-based login flow from a terminal so users can authenticate with their existing accounts.
• Callback Domain Validators - Restricts authentication callbacks to the project's registered domain to block token interception.
• API Key Authentication - Generates and manages scoped API keys that authenticate programmatic access to user and team resources.
• User Profile Management - Modifies a user's display name, email, or other profile fields through a direct update call.
• Account Merging - Links a new OAuth sign-in to an existing account when the provider identity matches.
• Custom Provider Configurations - Lets projects use their own OAuth app credentials so the consent screen shows their brand.
• Scope Requests - Specifies the permissions an application needs from an external provider during sign-in.
• Forgot Password Flows - Provides a customizable forgot password page with a tailored implementation.
• User Session Termination - Ends the user's session and redirects them to a configured post-logout page.
• Two-Factor Authentication - Requires users to provide a second verification factor during sign-in to strengthen account security.
• Account Approval Workflows - Marks new accounts as restricted until an administrator reviews and approves them.
• Password Resets - Provides a customizable password reset flow with a tailored implementation.
• User Profile Retrieval - Returns the signed-in user's data in a client component, or null when no user is authenticated.
• Server-Side Retrievals - Fetches the signed-in user's data once during server-side rendering, without reactive updates.
• Sign-up Rule Evaluators - Evaluates sign-up attempts against customizable rules based on email domain or auth method.
• Webhook Security - Validates cryptographic signatures on incoming webhook payloads to confirm origin and prevent replay attacks.
• Dashboard Builders - Provides live active user counts, session replays, and natural-language querying for building dashboards.
• Session Replays - Plays back recorded user sessions with filtering by user, team, duration, and click count.
• Analytics - Provides live active-user counts, session replays, and natural-language querying for building dashboards.
• Client-Side - Captures client-side events and records user sessions for debugging and usage analysis.
• Analytics Tracking - Ships a built-in analytics dashboard that collects and displays usage metrics and user activity data.
• Client-Side Analytics Instrumentation - Automatically records browser interactions and session data through an initialized SDK for later query and replay.
• Usage Analytics - Collects and displays metrics on user activity, sign-ups, and feature adoption through a dashboard.
• User Avatar Dropdowns - Displays the user's avatar and opens a dropdown menu for accessing account settings and preferences.
• User Profiles - Shows the currently authenticated user's account information and settings within the application UI.

Star-Verlauf