lipp/login-with
Login With
Login-with is a centralized authentication gateway designed to decouple identity verification from individual application services. It functions as a stateless microservice that orchestrates user login and logout flows by integrating with external identity providers.
The project distinguishes itself through its ability to manage user sessions across multiple subdomains. By issuing encrypted, domain-wide cookies, it maintains consistent user state and profile information as users navigate between different parts of a distributed web architecture.
The service handles the full lifecycle of user access, including redirecting clients to external providers, validating identity claims, and issuing secure tokens. It manages session persistence and termination without requiring local server-side storage, relying instead on token-based verification to protect resources from unauthorized access.
Features
- Identity Gateways - Provides a lightweight gateway service that handles login flows and session management for applications using external identity providers.
- Authentication Gateways - Acts as a centralized gateway that enforces access policies and integrates with external identity providers to protect downstream services.
- OAuth Provider Integrations - Connects web applications to external OAuth providers to verify user credentials and retrieve profile information securely.
- Cross-Subdomain Session Management - Maintains consistent user login state across multiple subdomains using shared domain-wide authentication cookies.
- Third-Party Identity Integrations - Integrates with third-party identity providers to verify user credentials and retrieve profile information for application sessions.
- Stateless Session Authentication - Implements stateless authentication using cryptographically signed tokens to avoid server-side session storage.
- Identity Providers - Acts as a centralized identity provider that authenticates users via external services and manages cross-subdomain session cookies.
- OIDC Identity Token Issuance - Verifies user identities and issues secure tokens to maintain persistent sessions within distributed web architectures.
- Session Cookie Authentications - Issues secure domain-wide cookies to maintain persistent user sessions across multiple subdomains.
- Cookie-Based Session Management - Manages user sessions by storing and matching encrypted cookies with domain specificity to maintain state across subdomains.
- User Session Termination - Terminates user sessions by clearing authentication cookies to prevent further access to protected resources.
- External Provider Redirections - Orchestrates the redirection of users to third-party identity providers and handles the subsequent callback for identity verification.
- User Access Management - Manages the lifecycle of user sessions through token issuance and cookie invalidation to protect resources.
- Token-Based Identity Verifications - Validates incoming identity provider responses to extract user profile information and generate secure session tokens.
- Stateless Request Processing - Processes authentication requests independently without server-side session storage by relying on external identity provider tokens.
