💡 VigiloAuth is under active development and already supports core OAuth2 and OIDC flows, with more on the way!
⚖️ Apache 2.0 License: This server is free and open source, developed for community use and OIDF certification.
💬 Join the Conversation: We're gathering feedback and ideas in the discussion threads. Come share your thoughts!
💻 The Admin UI can be found here
VigiloAuth is designed to simplify the implementation of OAuth 2.0 and OpenID Connect (OIDC) authentication servers. Whether you need a full-fledged authentication server, an identity server, or both, VigiloAuth provides compliant endpoints that you can easily integrate into your application without writing any complex code.
With VigiloAuth, you can quickly set up secure authentication and identity management solutions for your application, allowing users to authenticate and easily manage their identities. VigiloAuth comes pre-configured with common authentication flows and identity management endpoints, saving you time and effort while making sure that your system complies with industry standards.
Whether you are building a simple app or a complex enterprise system, VigiloAuth provides a solid foundation for handling authentication and identity management with minimal effort.
- ✅ User Registration
- ✅ User Email Verification
- ✅ Basic User Authentication
- ✅ OAuth User Authentication
- ✅ Authorization Code Flow
- ✅ Authorization Code Flow With PKCE
- ✅ Resource Owner Password Credentials Flow
- ✅ Client Credentials Flow
- ✅ Dynamic Client Registration
- ✅ Audit Logging
- ✅ Docker Server Instance
- ✅ Token Refresh
- ✅ Token Introspection
- ✅ Token Revocation
- ✅ OIDC UserInfo Endpoint
- ✅ OIDC Discovery Endpoint
- ✅ OIDC JSON Web Key Set Endpoint
- ✅ In Memory Storage
- 🛠️ Realm Support
- 🛠️ Phone Number Verification
- 🛠️ Password Recovery
- 🛠️ User Profile Management
- 🛠️ Role-Based Access Control (RBAC)
- 🛠️ Scope-Based Access Control
- 🛠️ User Consent Management
- 🛠️ Time-Based OTP Authentication
- 🛠️ Backup Recovery Codes
- 🛠️ Implicit Grant Flow
- 🛠️ OIDC Hybrid Flow
- 🛠️ Device Authorization Grant
- 🛠️ Back Channel Authentication Flow
- 🛠️ Social Login Integration Hooks
- 🛠️ Dynamic Database Configuration
- 🛠️ UI for User Authentication
You can find the list of our currently passing conformance tests here.
Comprehensive documentation is available in the User Guide.
We welcome contributions to improve VigiloAuth! Follow the steps below to ensure a smooth contribution process.
If you're a first-time contributor, check out our Good First Issues.
- Fork the Repository: Create your own fork on GitHub.
- Clone Your Fork: Clone it to your local development environment.
- Create a Branch: Create a new branch from
master(e.g.,feature/my-feature). - Make Your Changes: Implement your changes in alignment with project goals.
- Write Tests: Add or update tests to cover your changes.
- Commit Your Changes: Use Conventional Commits (see below).
- Push Your Changes: Push your branch to your GitHub fork.
- Open a Pull Request: Submit a PR to the main repository and clearly describe your changes.
We follow the Conventional Commit standards to ensure clear and meaningful commit messages. Use the format:
<type>[optional scope]: <description>
[optional body]
[optional footer(s)]
breaking: Introduce a breaking change that may require users to modify their code or dependencies.feat: Add a new feature that enhances the functionality of the project.fix: Apply a bug fix that resolves an issue without affecting functionality.task: Add or modify internal functionality that supports the codebase but doesn't introduce a new feature or fix a bug (e.g., utility methods, service logic, or internal improvements).docs: Update documentation, such as fixing typos or adding new information.style: Changes that don’t affect the code’s behavior, like formatting or code style adjustments.refactor: Refactor code without adding features or fixing bugs.test: Add or modify tests.chore: Miscellaneous changes like updates to build tools or dependencies.
For more information about contributing, please read our contribution guide
Copyright 2024 Olivier Pimparé-Charbonneau
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.