The most flexible modern open source authentication server for your cloud.

🔥 Aureole

Aureole is an open-source server for authentication and user management. You can easily integrate it into any project. Aureole has module architecture and a rich built-in set of plugins.

📍Status

• Pre-Alpha: Development and testing of core and built-in plugins.
• Alpha: Fixing bugs and test coverage
• Beta: Testing the product with a closed set of customers
• Release candidate: Open testing

Watch branch main of this repo to get notified when we are ready for public testing.

⚡Features

• Flexible architecture supported by plugins
• Rich set of authentication plugins
• Works with JWT
• Can be customized for your business cases (has examples of integrations with Hasura and Django)
• Language-agnostic
• Has set of plugins for hashing and cryptographic signing

📖 Table of Contents

• Quick start:
  • One-click deployment:
• Architecture
• Business cases
• Plugins
  • Authentication
  • 2-Factor Authentication
  • Authorization
  • Identity manager
  • Storage
  • Key storage
  • Password hashing
  • Signing keys
  • Sender
  • Administrative
• Support and fixing bugs
• Stargazers
• Forkers
• License
• Translations

🚀 Quick start:

One-click deployment:

Privider	Link	Documentation
Heroku		Link
Render		Link

⚙ Architecture

Aureole is a server-side service. It receives authentication requests from clients and issues JWTs with a private key. Then your backend verifies JWT with the public key derived from the private one. Aureole can also work with a custom Identity Manager.

👾Business cases

• Registration and authentication of users on a website
• Advanced replacement of default authentication in Django
• Authentication server for Hasura
• Single auth server for multiple domains
• Authentication in Kubernetes with OpenID
• Authentication in Docker Registry
• Authentication for embedded devices

🖇️ Plugins

We made many plugins for basic needs. But feel free to contribute to our project by creating any new one.

There are multiple types of plugins:

Authentication

• Login-Password
• Passwordless by E-mail
• Passwordless by SMS
• Google OAuth 2.0
• Facebook OAuth 2.0
• VK OAuth 2.0
• Apple ID
• GitHub
• Instagram
• Challenge-response authentication

2-Factor Authentication

• SMS
• Google Authenticator
• YubiKey

Authorization

• JWT

Identity manager

• Standard
• Webhook

Storage

• Etcd
• InMemory
• Redis

Key storage

• File
• Url
• HashiCorp Vault

Password hashing

• Argon2
• Pbkdf2 (Django)

Signing keys

• JWK
• Pem

Sender

• E-mail (SMTP)
• Twillio

Administrative

• List of all URLs

💬 Support and fixing bugs

If you have an issue and want to contact us feel free to use any channel:

• Issues and bug tracking: GitHub issues
• Support and feedback: Discord
• Text us: Telegram
• Follow us on Twitter: @aureolecloud
• Write an E-mail: hi@aureole.cloud

⭐ Stargazers

🛠️ Forkers

📝 License

The core Aureole is available under the GNU Affero General Public License v3 (AGPL-3.0).

Commercial licenses are available on request, if you do not wish to use the Aureole under the AGPL license. Typically, they come bundled with support plans and SLAs. Please feel free to contact us at hi@aureole.cloud.

All other contents (except those in internal and plugins directories) are available under the MIT License. This includes everything in all other directories.

🈂️ Translations

• English 🇬🇧
• Russian 🇷🇺