netlify/gotrue
Gotrue
GoTrue is a JWT identity provider and user management API. It functions as an OAuth 2.0 compliant server that handles user registration and authentication while issuing signed JSON Web Tokens to control access to protected API resources.
The service integrates external identity providers to allow users to sign in using third-party accounts. It also includes an SMTP notification service for delivering password resets, signup confirmations, and account recovery emails.
The system covers broader capabilities for user account management, including the ability to update user profiles and manage custom metadata. It provides API access control via token generation and validation, and supports request execution tracing for performance monitoring.
Features
- OAuth 2.0 Authorization Servers - Functions as a full OAuth 2.0 authorization server that manages client registrations and issues access tokens.
- JWT Authentications - Provides a complete identity provider system using signed JWTs to authenticate users and protect API resources.
- JWT Format Tokens - Issues signed JWTs to verify user identity and permissions for subsequent API requests.
- API Access Control - Implements granular API access control by validating signed tokens for protected resources.
- User Profile Management - Provides functionality for retrieving and updating user account attributes and custom profile metadata.
- Identity Authentication - Provides identity authentication via external providers to grant access without local credentials.
- JWT Identity Servers - Functions as an OAuth 2.0 compliant identity provider that manages users and issues signed JWTs.
- Stateless Session Management - Utilizes signed JWTs to maintain stateless user sessions without server-side session storage.
- Third-Party Identity Integrations - Integrates third-party identity providers to enable users to sign in with existing external accounts.
- Token Authentication - Generates secure authentication tokens using various grant types to control API access.
- User Account Management - Manages user account registration, profile updates, and metadata for web applications.
- User Account Registrations - Handles the creation of new user accounts through email and password registration flows.
- User Identity Management - Provides a backend API for managing user profiles, account registration, and identity-related data lifecycles.
- Stateless Architectures - Employs a stateless architecture that verifies identity using self-contained tokens instead of server-side state.
- Identity Provider Integration - Integrates external identity providers to enable third-party sign-in via authorization code exchange.
- Account Verification Workflows - Automates the sending of confirmation and recovery emails to secure and verify new user accounts.
- User Notifications - Provides an SMTP notification service for delivering password resets, signup confirmations, and account recovery emails.
- Account Lifecycle Notifications - Sends automated lifecycle notifications for signup confirmations and password recovery.
- SMTP Integrations - Provides SMTP integrations to dispatch automated account verification and password reset emails.
- OAuth Token Exchanges - Implements OAuth 2.0 token exchange flows to generate signed JWTs based on various grant types.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
