WSO2 Thunder ⚡

Identity Management Suite

Thunder is a modern, open-source identity management service designed for teams building secure, customizable authentication experiences across applications, services, and AI agents. It enables developers to design and orchestrate login, registration, and recovery flows using a flexible identity flow designer.

Designed for extensibility, scalability, and seamless containerized deployment, Thunder integrates naturally with microservices and DevOps environments—serving as the core identity layer for your cloud platform.

Full Changelog: v31.0.0...v32.0.0

⚡ Quickstart

This Quickstart guide will help you get started with WSO2 Thunder quickly. It walks you through downloading and running the product, trying out the sample app, and exploring registering a user, logging in, and using the Client Credentials flow.

Download and Run WSO2 Thunder

You can run WSO2 Thunder either by downloading the release artifact or using the official Docker image.

Option 1: Run from Release Artifact

Follow these steps to download the 32.0.0 release of WSO2 Thunder and run it locally.

Download the distribution from the 32.0.0 release

OS	Architecture	Download Link
macOS	ARM64 (Apple Silicon)	thunder-32.0.0-macos-arm64.zip
macOS	x64 (Intel)	thunder-32.0.0-macos-x64.zip
Linux	x64	thunder-32.0.0-linux-x64.zip
Linux	ARM64	thunder-32.0.0-linux-arm64.zip
Windows	x64	thunder-32.0.0-win-x64.zip

Unzip the product

Unzip the downloaded file using the following command:
```
unzip thunder-32.0.0-<os>-<arch>.zip
```
Navigate to the unzipped directory:
```
cd thunder-32.0.0-<os>-<arch>/
```
Setup the product

You need to setup the server with the initial configurations and data before starting the server for the first time.

If you are using a Linux or macOS machine:
```
./setup.sh
```
If you are using a Windows machine:
```
.\setup.ps1
```
Note the id of the sample app indicated with the log line [INFO] Sample App ID: <id>. You'll need it for the sample app configuration.
Start the product

If you are using a Linux or macOS machine:
```
./start.sh
```
If you are using a Windows machine:
```
.\start.ps1
```
The product will start on https://localhost:8090.

Option 2: Run with Docker Compose

Follow these steps to run WSO2 Thunder using Docker Compose.

Download the Docker Compose file

Download the docker-compose.yml file using the following command:

curl -o docker-compose.yml https://raw.githubusercontent.com/asgardeo/thunder/v0.15.0/install/quick-start/docker-compose.yml

Start Thunder

Run the following command in the directory where you downloaded the docker-compose.yml file:
```
docker compose up
```
This will automatically:
- Initialize the database
- Run the setup process
- Start the Thunder server
Note the id of the sample app indicated with the log line [INFO] Sample App ID: <id> in the setup logs. You'll need it for the sample app configuration.

The product will start on https://localhost:8090.

Try Out the Product

Try out the Developer Console

Follow these steps to access the Developer Console:

Open your browser and navigate to https://localhost:8090/develop.
Log in using the admin credentials created during the initial data setup (admin / admin).

Try Out with the Sample App

Thunder provides two sample applications to help you get started quickly:

React Vanilla Sample — Sample React application demonstrating direct API integration without external SDKs. Supports Native Flow API or Standard OAuth/OIDC.
React SDK Sample — Sample React application demonstrating SDK-based integration using @asgardeo/react for OAuth 2.0/OIDC authentication.

React Vanilla Sample

Download the sample

OS	Architecture	Download Link
macOS	ARM64 (Apple Silicon)	sample-app-react-vanilla-32.0.0-macos-arm64.zip
macOS	x64 (Intel)	sample-app-react-vanilla-32.0.0-macos-x64.zip
Linux	x64	sample-app-react-vanilla-32.0.0-linux-x64.zip
Linux	ARM64	sample-app-react-vanilla-32.0.0-linux-arm64.zip
Windows	x64	sample-app-react-vanilla-32.0.0-win-x64.zip

Unzip and navigate to the sample app directory

unzip sample-app-react-vanilla-32.0.0-<os>-<arch>.zip
cd sample-app-react-vanilla-32.0.0-<os>-<arch>/

Configure the sample

Open app/runtime.json and set the applicationID to the sample app ID generated during "Setup the product":
```
{
    "applicationID": "{your-application-id}"
}
```
Start the sample
```
./start.sh
```
Open your browser and navigate to https://localhost:3000 to access the sample app.

📖 Refer to the README.md inside the extracted sample app for detailed configuration options including OAuth redirect-based login.

React SDK Sample

Download the sample

OS	Architecture	Download Link
macOS	ARM64 (Apple Silicon)	sample-app-react-sdk-32.0.0-macos-arm64.zip
macOS	x64 (Intel)	sample-app-react-sdk-32.0.0-macos-x64.zip
Linux	x64	sample-app-react-sdk-32.0.0-linux-x64.zip
Linux	ARM64	sample-app-react-sdk-32.0.0-linux-arm64.zip
Windows	x64	sample-app-react-sdk-32.0.0-win-x64.zip

Unzip and navigate to the sample app directory

unzip sample-app-react-sdk-32.0.0-<os>-<arch>.zip
cd sample-app-react-sdk-32.0.0-<os>-<arch>/

Start the sample
```
./start.sh
```
Open your browser and navigate to https://localhost:3000 to access the sample app.

📖 Refer to the README.md inside the extracted sample app for detailed configuration and troubleshooting.

Self Register and Login (React Vanilla Sample)

The React Vanilla sample supports user self-registration and login:

Open https://localhost:3000 and click "Sign up" to register a new user.
After registration, use the same credentials to "Sign In".
Upon successful login, you'll see the home page with your access token.

Try Out Client Credentials Flow

To try out the Client Credentials flow, you first need to obtain a token to access the System APIs of Thunder. Follow these steps:

Replace <application_id> with the sample app ID generated during "Setup the product."

curl -k -X POST 'https://localhost:8090/flow/execute' \
  -d '{"applicationId":"<application_id>","flowType":"AUTHENTICATION", "inputs":{"username":"admin","password":"admin", "requested_permissions":"system"}}'

The response will contain an assertion field.

{"flowId":"<flow_id>","flowStatus":"COMPLETE","data":{},"assertion":"<assertion>"}

The Client Credentials flow is used to obtain an access token for machine-to-machine communication. This flow does not require user interaction and is typically used for server-to-server communication.

To try out the Client Credentials flow, follow these steps:

Create a Client Application

Create a client application in the system to use for the Client Credentials flow. You can use the following cURL command to create a new application. Replace <assertion> with the assertion value obtained from the previous step.

curl -kL -X POST -H 'Content-Type: application/json' -H 'Accept: application/json' https://localhost:8090/applications \
-H 'Authorization: Bearer <assertion>' \
-d '{
    "name": "Test Sample App",
    "description": "Initial testing App",
    "auth_flow_graph_id": "auth_flow_config_basic",
    "inbound_auth_config": [
        {
            "type": "oauth2",
            "config": {
                "client_id": "<client_id>",
                "client_secret": "<client_secret>",
                "redirect_uris": [
                    "https://localhost:3000"
                ],
                "grant_types": [
                    "client_credentials"
                ],
                "token_endpoint_auth_method": "client_secret_basic",
                "pkce_required": false,
                "public_client": false,
                "scopes": ["api:read", "api:write"]
            }
        }
    ]
}'

Obtain an Access Token

Use the following cURL command to obtain an access token using the Client Credentials flow. Make sure to replace the <client_id> and <client_secret> with the values you used when creating the client application.
```
curl -k -X POST https://localhost:8090/oauth2/token \
  -d 'grant_type=client_credentials' \
  -u '<client_id>:<client_secret>'
```

License

Licenses this source under the Apache License, Version 2.0 (LICENSE), You may not use this file except in compliance with the License.

Navigation Menu

Thunder v32.0.0

Choose a tag to compare

Sorry, something went wrong.