stack-auth/stack

Features

• User Authentication Flows - Manages user authentication flows including passkeys, OAuth, and CLI authentication.
• Team Workspace Invitations - Organizes users into multi-tenant workspaces through an invitation-based onboarding system.
• Centralized Identity Management - Consolidates multiple authentication methods and user lifecycle management into a single administrative control plane.
• Customer-Keyed Vaults - Vaults sensitive tokens using encryption keys that remain hidden from the service provider.
• Encrypted Secret Management - Provides secure, encrypted storage for API keys and user tokens.
• Secret Vaulting - Vaults user tokens in a server-only storage system using encryption keys hidden from the service provider.
• Multi-Tenant Identity Management - Isolates user accounts and data within a shared environment to support secure multi-tenancy.
• Open-Source Authentication Platforms - Provides an open-source, self-hostable identity platform for authentication and OAuth token management.
• Multi-Tenant Hierarchy Organizers - Structures users into separate team workspaces with organizational access controls.
• Workspace Isolations - Separates user data and access controls into isolated organizational containers for team-based privacy.
• Role-Based Access Control - Governs system permissions using a hierarchical set of roles to define user actions across environments.
• Role-Based Access Control Systems - Enforces nested user roles and feature permissions across both server and client environments.
• User Identity Management - Handles the backend identity infrastructure and user data storage to simplify deployment.
• Billing and Subscription Management - Manages recurring billing cycles and financial transactions for individual and team accounts.
• Subscription Payment Processings - Processes payments for recurring subscriptions, one-time fees, and usage-based meters.
• Usage Metering & Billing - Tracks resource consumption in real-time to automate billing for usage-based meters and subscriptions.
• Exponential Backoff Retries - Implements exponential backoff and retry logic to ensure reliable delivery of event notifications.
• Transactional Email Services - Delivers transactional and marketing messages using themed templates with built-in open and click tracking.
• Standardized Event Webhook Delivery - Provides signed event notifications to HTTP endpoints with automated retry and backoff mechanisms.
• API Key Management - Generates secure API access keys with automatic leak revocation and a limited visibility window for plaintext keys.
• Authentication and Identity - Open-source alternative for user authentication.

Istoric stele