DocsOverview
Documentation
Concepts, guides, and the products. Sidebar has the rest when you need it.
Start here
Ship sign-in in five minutes
Pick your framework, create an environment, and run the callback. One quickstart, end to end.
Products
Agentic Identity, Access Control, Observability, and Console.
Concepts
How Authdog models identity, access, and tenancy.
Authentication
How sign-in, identity providers, and Authdog sessions fit together.
Authorization
RBAC, ABAC, and FGA models enforced per environment.
Sessions & tokens
Session cookies, JWTs, and token lifecycle.
Multi-tenancy
Tenants, projects, and environment isolation.
Organizations
B2B organizations, membership, and org-scoped access.
Provisioning
SCIM and inbound user provisioning.
Application starters
A runnable app for each framework. Open one for the integration that stack ships. Clone the same folder from authdog/samples.
Frontend
Team dashboardNext.jsProject status for the signed-in member. Billing, Mobile, and Docs render only after userinfo accepts the session.
Customer navbarReact ElementsShop catalog under a navbar that opens hosted sign-in. Orders stay on a server app that holds the session.
Support inboxRemixCustomer tickets on /inbox. The loader redirects anonymous agents before the list renders.Field companionReact Native / ExpoToday's site visits after a deep-link return. The job list renders only after userinfo accepts the token in secure storage.
Member siteSvelteKitPublic home, member library on /library. getUser redirects anonymous readers before the guides load.
Ops consoleTanStack StartOpen incidents for the on-call operator. Anonymous visitors see the sign-in link and no incident rows.
Workspace settingsVueWorkspace name, timezone, and join notification after hosted sign-in. The fields stay hidden until userinfo returns a user.
Admin consoleAngularTeam directory on /directory. The route guard keeps the list off screen until fetchUser returns a user.
HandbookAstroPublic chapters on the home page. Member chapters on /handbook load only after getUser accepts the session.
Resource libraryGatsbyTitles on the public page. GET /api/files returns the board pack and runbook only after requireAuth.
Job boardRedwoodJSListings stay public. The applications function returns candidates only after requireAuth.Backend
Orders APIExpressGET /orders returns open orders for the signed-in clerk and 401 for everyone else.
Inventory APIFastifyGET /skus returns on-hand stock for the signed-in clerk and 401 for everyone else.
Booking APIFastAPIGET /bookings returns room reservations. Routes without a session return 401.
Clinic portalDjangoGET /appointments returns today's clinic slots. Anonymous callers are rejected.
Status boardFlaskGET / publishes component state. GET /notes returns the internal timeline only with a session.
Intake serviceStarletteGET /intakes returns the waiting queue. Anonymous callers are rejected.
Event ingestaiohttpGET /events returns recent door and check-in events. Handlers without a session are rejected.
Billing serviceGoGET /invoices returns open and paid invoices. Gin returns 401 unless Authdog authenticates the caller.
Policy serviceRustGET /policies returns shipping and refund rules. The Axum gate returns 401 without a session.Connectors
Every identity provider a user can sign in with. Enable each one per environment.
