v0.1.1 · Open source · Self-hosted

Auth infrastructure
you actually own.

Drop-in authentication for any app. Multi-tenant, TypeScript-first, with OAuth, webhooks, and session management built in.

middleware.ts
// Protect all routes in one line
import { authkitMiddleware } from "@paribeshn/authkit/nextjs"

export default authkitMiddleware({
  secretKey: process.env.AUTH_SECRET_KEY,
  signInUrl: "/sign-in",
})

export const config = { matcher: ["/((?!_next).*)"  ] }

Everything you need

No vendor lock-in. No per-MAU pricing. Just your server.

Email + Password Auth

Secure sign-up, sign-in, and password reset with bcrypt hashing and JWT sessions.

OAuth — Google & GitHub

Social login configured from the dashboard. No redirect logic to write.

Signed Webhooks

HMAC-SHA256 events fired on every user lifecycle action. Verify in one call.

TypeScript SDK

React hooks, pre-built UI, Next.js middleware, and a server SDK. ESM + CJS.

Multi-Tenant

One service, unlimited apps. Each gets isolated keys, users, and configuration.

Session Management

List sessions per device, revoke one or sign out everywhere.

Install

npm install @paribeshn/authkit

Entrypoints

authkit/reactauthkit/nextjsauthkit/server

Up and running in minutes

Three steps from zero to production auth.

01

Create an app

Register on the dashboard and create an application. Get your publishable and secret keys instantly.

02

Install the SDK

Wrap your app in AuthProvider, add authkitMiddleware to protect routes, use useAuth() for state.

03

Ship

Your users sign up, sign in, reset passwords, manage sessions — you manage them from the dashboard.

Ready to ship?

Create your account, make an app, copy your keys. That's it.

Create free account →