Templates

Start from working code

Copy-paste templates for identity, UI components, authorization, fine-grained access, and observability. Pick your language and framework — every section follows.

Your stack

Language

Framework

Identity

Sign-in, sessions, and the current user. Hosted sign-in up front, a guarded route on the back.

Sign-in and session on the App Router

123456789101112131415// app/layout.tsx — wrap the app once
import { AuthdogProvider } from "@authdog/nextjs-app/client"

<AuthdogProvider>{children}</AuthdogProvider>

// middleware.ts — exchange the hosted sign-in callback
import { useAuthMiddleware } from "@authdog/nextjs-app/server"
export default useAuthMiddleware(process.env.PK_AUTHDOG!)

// any client component — read the current user
"use client"
import { useUser } from "@authdog/nextjs-app"

const { user, isLoading } = useUser()
if (!isLoading && !user) redirectToSignIn()

Read the docs

UI components

Prebuilt, themeable components from @authdog/react-elements that drop into your own layout.

Drop-in profile UI

12345678910111213141516import { AuthdogProvider, useUser } from "@authdog/nextjs-app"
import { UserProfile } from "@authdog/react-elements"

function Account() {
  const { user } = useUser()
  // Themed per environment: logo, colors, and copy follow the console
  return user ? <UserProfile user={user} /> : null
}

export default function App() {
  return (
    <AuthdogProvider>
      <Account />
    </AuthdogProvider>
  )
}

Read the docs

Authorization

Roles and permission checks. One decision API no matter which model the environment enforces.

Check a permission

1234567891011121314import { Authdog } from "@authdog/sdk"

const authdog = new Authdog({ apiKey: process.env.AUTHDOG_API_KEY })

// Check if the user can edit this resource
const { allowed } = await authdog.access.check({
  subject:  { type: "user", id: "user_01H8" },
  action:   "edit",
  resource: { type: "document", id: "doc_93K" },
})

if (!allowed) {
  throw new Error("Not authorized")
}

Read the docs

Fine-grained authorization

Zanzibar-style relationship tuples for per-object rules like “Alice can edit document 42”.

Write and check a relationship

123456789101112131415161718192021222324252627const headers = {
  Authorization: `Bearer ${process.env.AUTHDOG_ENV_API_SECRET}`,
  "Content-Type": "application/json",
}

// Grant: Alice is an editor of document 42
await fetch("https://api.authdog.com/fga/v1/write", {
  method: "POST",
  headers,
  body: JSON.stringify({
    writes: [
      { object: "document:42", relation: "editor", subject: "user:alice" },
    ],
  }),
})

// Check: can Alice view document 42? (editors imply viewers)
const res = await fetch("https://api.authdog.com/fga/v1/check", {
  method: "POST",
  headers,
  body: JSON.stringify({
    object: "document:42",
    relation: "viewer",
    subject: "user:alice",
  }),
})
const { allowed } = await res.json()

Read the docs

Observability

Ship traces, logs, and metrics to Authdog over OpenTelemetry OTLP/HTTP JSON.

Ship traces with OpenTelemetry

123456789101112131415// instrumentation.ts — OTLP/HTTP JSON straight to Authdog
import { NodeSDK } from "@opentelemetry/sdk-node"
import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http"

const sdk = new NodeSDK({
  traceExporter: new OTLPTraceExporter({
    url: "https://api.authdog.com/v1/traces",
    headers: {
      Authorization: `Bearer ${process.env.AUTHDOG_ENV_API_SECRET}`,
    },
  }),
})

sdk.start()
// Traces land in Console -> Observability -> Traces

Read the docs

Missing a stack? The API is plain HTTPS — every template translates.

Wire it into a real environment

Create a tenant, a project, and an environment — the templates pick up your keys and policies as-is.

Start building

// app/layout.tsx — wrap the app once import { AuthdogProvider } from "@authdog/nextjs-app/client" <AuthdogProvider>{children}</AuthdogProvider> // middleware.ts — exchange the hosted sign-in callback import { useAuthMiddleware } from "@authdog/nextjs-app/server" export default useAuthMiddleware(process.env.PK_AUTHDOG!) // any client component — read the current user "use client" import { useUser } from "@authdog/nextjs-app" const { user, isLoading } = useUser() if (!isLoading && !user) redirectToSignIn()

import { AuthdogProvider, useUser } from "@authdog/nextjs-app" import { UserProfile } from "@authdog/react-elements" function Account() { const { user } = useUser() // Themed per environment: logo, colors, and copy follow the console return user ? <UserProfile user={user} /> : null } export default function App() { return ( <AuthdogProvider> <Account /> </AuthdogProvider> ) }

import { Authdog } from "@authdog/sdk" const authdog = new Authdog({ apiKey: process.env.AUTHDOG_API_KEY }) // Check if the user can edit this resource const { allowed } = await authdog.access.check({ subject: { type: "user", id: "user_01H8" }, action: "edit", resource: { type: "document", id: "doc_93K" }, }) if (!allowed) { throw new Error("Not authorized") }

const headers = { Authorization: `Bearer ${process.env.AUTHDOG_ENV_API_SECRET}`, "Content-Type": "application/json", } // Grant: Alice is an editor of document 42 await fetch("https://api.authdog.com/fga/v1/write", { method: "POST", headers, body: JSON.stringify({ writes: [ { object: "document:42", relation: "editor", subject: "user:alice" }, ], }), }) // Check: can Alice view document 42? (editors imply viewers) const res = await fetch("https://api.authdog.com/fga/v1/check", { method: "POST", headers, body: JSON.stringify({ object: "document:42", relation: "viewer", subject: "user:alice", }), }) const { allowed } = await res.json()

// instrumentation.ts — OTLP/HTTP JSON straight to Authdog import { NodeSDK } from "@opentelemetry/sdk-node" import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http" const sdk = new NodeSDK({ traceExporter: new OTLPTraceExporter({ url: "https://api.authdog.com/v1/traces", headers: { Authorization: `Bearer ${process.env.AUTHDOG_ENV_API_SECRET}`, }, }), }) sdk.start() // Traces land in Console -> Observability -> Traces