stack-auth/stack
Stack
Stack es un proveedor de identidad open-source que gestiona la autenticación de usuarios, passkeys y tokens OAuth. Proporciona una infraestructura de identidad que maneja el almacenamiento de datos de usuario y los flujos de autenticación a través de un panel administrativo centralizado.
La plataforma se diferencia al integrar un sistema de gestión de usuarios multi-tenant que organiza a los usuarios en espacios de trabajo de equipo mediante flujos de invitación. Incluye un almacén de secretos seguro para guardar claves API cifradas y tokens de usuario utilizando claves de cifrado que permanecen ocultas para el proveedor del servicio.
El sistema cubre una amplia gama de capacidades administrativas, incluyendo un motor de suscripción y facturación para tarifas recurrentes y medición basada en el uso. Proporciona control de acceso basado en roles para gestionar permisos, análisis de comportamiento de usuario para informes y una capa de comunicación para el envío automatizado de correos electrónicos y webhooks de eventos firmados.
Features
- User Authentication Flows - Manages user authentication flows including passkeys, OAuth, and CLI authentication.
- Team Workspace Invitations - Organizes users into multi-tenant workspaces through an invitation-based onboarding system.
- Centralized Identity Management - Consolidates multiple authentication methods and user lifecycle management into a single administrative control plane.
- Customer-Keyed Vaults - Vaults sensitive tokens using encryption keys that remain hidden from the service provider.
- Encrypted Secret Management - Provides secure, encrypted storage for API keys and user tokens.
- Secret Vaulting - Vaults user tokens in a server-only storage system using encryption keys hidden from the service provider.
- Multi-Tenant Identity Management - Isolates user accounts and data within a shared environment to support secure multi-tenancy.
- Open-Source Authentication Platforms - Provides an open-source, self-hostable identity platform for authentication and OAuth token management.
- Multi-Tenant Hierarchy Organizers - Structures users into separate team workspaces with organizational access controls.
- Workspace Isolations - Separates user data and access controls into isolated organizational containers for team-based privacy.
- Role-Based Access Control - Governs system permissions using a hierarchical set of roles to define user actions across environments.
- Role-Based Access Control Systems - Enforces nested user roles and feature permissions across both server and client environments.
- User Identity Management - Handles the backend identity infrastructure and user data storage to simplify deployment.
- Billing and Subscription Management - Manages recurring billing cycles and financial transactions for individual and team accounts.
- Subscription Payment Processings - Processes payments for recurring subscriptions, one-time fees, and usage-based meters.
- Usage Metering & Billing - Tracks resource consumption in real-time to automate billing for usage-based meters and subscriptions.
- Exponential Backoff Retries - Implements exponential backoff and retry logic to ensure reliable delivery of event notifications.
- Transactional Email Services - Delivers transactional and marketing messages using themed templates with built-in open and click tracking.
- Standardized Event Webhook Delivery - Provides signed event notifications to HTTP endpoints with automated retry and backoff mechanisms.
- API Key Management - Generates secure API access keys with automatic leak revocation and a limited visibility window for plaintext keys.
- Authentication and Identity - Open-source alternative for user authentication.
