Authentication
AuthOwl
Sign-in, sessions, and everything around them.
A hosted authentication service. Every project is its own isolated tenant with its own users, sessions, sign-in methods and signing keys. The isolation is enforced by Postgres row-level security rather than by application code, so a query that forgets its tenant filter returns nothing instead of somebody else’s rows.
- Passkeys and WebAuthn
- Magic links and email one-time codes
- Social sign-in
- TOTP two-factor with backup codes
- JWT issuer with key rotation and published JWKS
- Append-only audit log
- React, Next.js and Convex SDKs