A standalone JWT login microservice with pluggable backends including OAuth2, htpasswd, and OSIAM.
loginsrv is a minimalistic login server that provides JWT-based authentication for various login backends. It enables secure user authentication as a standalone service, Docker container, Go library, or Caddy plugin, simplifying integration across different environments.
Developers and DevOps engineers building microservices or web applications that need a lightweight, standalone authentication layer without heavy dependencies. It's particularly useful for teams using Caddy server or containerized deployments.
Developers choose loginsrv for its simplicity, modularity, and flexibility in deployment options, including direct integration as a Caddy plugin. It supports multiple authentication backends (OAuth2, htpasswd, simple user/password) and provides JWT token management with configurable security controls.
JWT login microservice with plugable backends such as OAuth2, Google, Github, htpasswd, osiam, ..
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports multiple providers including OAuth2 (GitHub, Google, etc.), htpasswd, and simple user/password, allowing integration with various systems as listed in the Supported Provider Backends section.
Can be run as a standalone microservice, Docker container, Go library, or Caddy plugin, offering flexibility for different environments, as highlighted in the Abstract and Startup Examples.
Provides extensive JWT options like expiry duration, signing algorithms (e.g., HS512, ES256), and refresh mechanisms via config parameters such as -jwt-expiry and -jwt-refreshes, detailed in the Config Options.
Allows custom HTML templates for the login form and user info pages using the -template parameter, enabling branding and layout changes, as explained in the Templating section.
Since v1.3.0, pure HTTP is not supported by default, requiring the -cookie-secure=false flag for development and testing, which adds an extra step and potential misconfiguration risk.
Lacks built-in support for multi-factor authentication, user management, or protocols like SAML and LDAP, restricting it to basic authentication flows without additional tooling.
With numerous config options and environment variables, setting up loginsrv correctly can be complex and error-prone, especially for intricate multi-provider or custom claim setups.