v0.1.0: Identity Developer Preview
SaaSKit v0.1.0 — Identity Developer Preview
We are proud to announce the v0.1.0 "Identity Developer Preview" release of SaaSKit — the open-source SaaS foundation. This release focuses on delivering a production-grade, secure, and standardized authentication and OIDC provider engine.
🚀 Key Features
- OIDC Provider & Federation: Standardized OpenID Connect provider endpoints (
/.well-known/openid-configuration,/.well-known/jwks.json,/oauth/v2/authorize,/oauth/v2/token,/oauth/v2/userinfo) powered byzitadel/oidc/v3. Includes social login support for Google and GitHub. - Hardened Security: Automated failed login lockout (locks user status after 5 incorrect password attempts), thread-safe token bucket rate limiter, security headers middleware (HSTS, CSP, X-Frame-Options), and password hashing using Argon2id.
- Envelope Encryption: Highly secure database column protection using AES-256-GCM and HKDF key derivation to protect sensitive external credentials and client secrets at rest.
- Complete Session Management: Full support for secure session tracking, refresh token rotation, and invalidation upon logout.
- Docker & CI/CD: Hardened multi-stage Docker build, development Docker Compose configuration, and automated GitHub Actions CI pipeline running linters, tests, and security scans (
govulncheck).
📖 Technical Documentation
This release introduces comprehensive guides to get you started:
- Installation Guide — Step-by-step instructions for running locally and deploying to production.
- Configuration Guide — Env variable schema reference and YAML configuration.
- Authentication Guide — In-depth breakdown of login, registration, lockout, and session workflows.
- OIDC Integration Guide — Connecting your frontends and client apps via OAuth/OIDC.
- API Reference — Complete schemas for auth and system endpoints.