The most flexible modern open source authentication server for your cloud.

Aureole is an open-source server for authentication and user management. You can easily integrate it into any project. Aureole has module architecture and a rich built-in set of plugins.

• Pre-Alpha: Development and testing of core and built-in plugins.
• Alpha: Fixing bugs and test coverage
• Beta: Testing the product with a closed set of customers
• Release candidate: Open testing

Watch branch main of this repo to get notified when we are ready for public testing.

• Flexible architecture supported by plugins
• Rich set of authentication plugins
• Works with JWT
• Can be customized for your business cases (has examples of integrations with Hasura and Django)
• Language-agnostic
• Has set of plugins for hashing and cryptographic signing

• Quick start:
  • One-click deployment:
• Architecture
• Business cases
• Plugins
  • Authentication
  • 2-Factor Authentication
  • Authorization
  • Identity manager
  • Storage
  • Key storage
  • Password hashing
  • Signing keys
  • Sender
  • Administrative
• Support and fixing bugs
• Stargazers
• Forkers
• License
• Translations

Privider	Link	Documentation
Heroku		Link
Render		Link

Aureole is a server-side service. It receives authentication requests from clients and issues JWTs with a private key. Then your backend verifies JWT with the public key derived from the private one. Aureole can also work with a custom Identity Manager.

• Registration and authentication of users on a website
• Advanced replacement of default authentication in Django
• Authentication server for Hasura
• Single auth server for multiple domains
• Authentication in Kubernetes with OpenID
• Authentication in Docker Registry
• Authentication for embedded devices

We made many plugins for basic needs. But feel free to contribute to our project by creating any new one.

There are multiple types of plugins:

• Login-Password
• Passwordless by E-mail
• Passwordless by SMS
• Google OAuth 2.0
• Facebook OAuth 2.0
• VK OAuth 2.0
• Apple ID
• GitHub
• Instagram
• Challenge-response authentication

• SMS
• Google Authenticator
• YubiKey

• JWT

• Standard
• Webhook

• Etcd
• InMemory
• Redis

• File
• Url
• HashiCorp Vault

• Argon2
• Pbkdf2 (Django)

• JWK
• Pem

• E-mail (SMTP)
• Twillio

• List of all URLs

If you have an issue and want to contact us feel free to use any channel:

• Issues and bug tracking: GitHub issues
• Support and feedback: Discord
• Text us: Telegram
• Follow us on Twitter: @aureolecloud
• Write an E-mail: hi@aureole.cloud

The core Aureole is available under the GNU Affero General Public License v3 (AGPL-3.0).

Commercial licenses are available on request, if you do not wish to use the Aureole under the AGPL license. Typically, they come bundled with support plans and SLAs. Please feel free to contact us at hi@aureole.cloud.

All other contents (except those in internal and plugins directories) are available under the MIT License. This includes everything in all other directories.

• English 🇬🇧
• Russian 🇷🇺