stack-auth/stack
Stack
Stack is an open-source identity provider that manages user authentication, passkeys, and OAuth tokens. It provides an identity infrastructure that handles user data storage and authentication flows via a centralized administrative dashboard.
The platform differentiates itself by integrating a multi-tenant user management system that organizes users into team workspaces through invitation flows. It includes a secure secret vault for storing encrypted API keys and user tokens using encryption keys that remain hidden from the service provider.
The system covers a broad range of administrative capabilities, including a subscription and billing engine for recurring fees and usage-based metering. It provides role-based access control for managing permissions, user behavior analytics for reporting, and a communication layer for automated email delivery and signed event webhooks.
Features
- User Authentication Flows - Manages user authentication flows including passkeys, OAuth, and CLI authentication.
- Team Workspace Invitations - Organizes users into multi-tenant workspaces through an invitation-based onboarding system.
- Centralized Identity Management - Consolidates multiple authentication methods and user lifecycle management into a single administrative control plane.
- Customer-Keyed Vaults - Vaults sensitive tokens using encryption keys that remain hidden from the service provider.
- Encrypted Secret Management - Provides secure, encrypted storage for API keys and user tokens.
- Secret Vaulting - Vaults user tokens in a server-only storage system using encryption keys hidden from the service provider.
- Multi-Tenant Identity Management - Isolates user accounts and data within a shared environment to support secure multi-tenancy.
- Open-Source Authentication Platforms - Provides an open-source, self-hostable identity platform for authentication and OAuth token management.
- Multi-Tenant Hierarchy Organizers - Structures users into separate team workspaces with organizational access controls.
- Workspace Isolations - Separates user data and access controls into isolated organizational containers for team-based privacy.
- Role-Based Access Control - Governs system permissions using a hierarchical set of roles to define user actions across environments.
- Role-Based Access Control Systems - Enforces nested user roles and feature permissions across both server and client environments.
- User Identity Management - Handles the backend identity infrastructure and user data storage to simplify deployment.
- Billing and Subscription Management - Manages recurring billing cycles and financial transactions for individual and team accounts.
- Subscription Payment Processings - Processes payments for recurring subscriptions, one-time fees, and usage-based meters.
- Usage Metering & Billing - Tracks resource consumption in real-time to automate billing for usage-based meters and subscriptions.
- Exponential Backoff Retries - Implements exponential backoff and retry logic to ensure reliable delivery of event notifications.
- Transactional Email Services - Delivers transactional and marketing messages using themed templates with built-in open and click tracking.
- Standardized Event Webhook Delivery - Provides signed event notifications to HTTP endpoints with automated retry and backoff mechanisms.
- API Key Management - Generates secure API access keys with automatic leak revocation and a limited visibility window for plaintext keys.
- Authentication and Identity - Open-source alternative for user authentication.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
