# authbase

> Self-hosted authentication as a service. One binary, one PostgreSQL, one master key. An app's backend registers and logs in users with an API key and verifies EdDSA access tokens locally against the app's JWKS; authbase is never on the request hot path.

authbase is in development: the source code and packages are not public yet, and these docs describe the first release. Every page below is plain markdown; the API is described by an OpenAPI 3.0 spec.

## Start here

- [Overview](https://authbase.burakmetehan.com.tr/docs.md): What authbase is, how it fits next to your backend, and where to start reading.
- [Quick start](https://authbase.burakmetehan.com.tr/docs/quickstart.md): Run authbase and an example backend on your machine, then move the integration into your own.
- [Concepts](https://authbase.burakmetehan.com.tr/docs/concepts.md): Accounts, apps, API keys, access and refresh tokens, signing keys and email, in two pages.

## Integrate

- [Integrating authbase](https://authbase.burakmetehan.com.tr/docs/integration.md): The API calls and token checks for any language, with Node, Go and Python code and the error codes.
- [@authbase/node](https://authbase.burakmetehan.com.tr/docs/sdk/node.md): @authbase/node: a typed client, offline token verification and Express, Hono and Next.js helpers.
- [Kotlin and JVM SDK](https://authbase.burakmetehan.com.tr/docs/sdk/kotlin.md): The Kotlin/JVM client and verifier, a Ktor authentication provider and a Spring Boot starter.
- [Example backends](https://authbase.burakmetehan.com.tr/docs/examples.md): Working Express, Ktor, Spring Boot and Go backends with the same routes, and the smoke test CI runs.

## Operate

- [Self-hosting](https://authbase.burakmetehan.com.tr/docs/self-hosting.md): Production: HTTPS and the reverse proxy, email, health and metrics, backups, upgrades and key runbooks.
- [Security model](https://authbase.burakmetehan.com.tr/docs/security-model.md): Trust boundaries, how each secret is stored, token and abuse controls, and what is left to you.

## AI agents

- [Docs for agents](https://authbase.burakmetehan.com.tr/docs/agents.md): llms.txt, markdown copies of every page, the OpenAPI spec and a prompt for coding agents.
- [Claude skills](https://authbase.burakmetehan.com.tr/docs/skills.md): Two Agent Skills that teach Claude to integrate authbase into an app and to run it on a server.

## API

- [OpenAPI spec](https://authbase.burakmetehan.com.tr/openapi.yaml): every endpoint, request, response and error code
- [API reference](https://authbase.burakmetehan.com.tr/api/): the same spec rendered for people

## Optional

- [Full documentation](https://authbase.burakmetehan.com.tr/llms-full.txt): every page above in one file