• Stars
    star
    9,867
  • Rank 3,157 (Top 0.07 %)
  • Language
    Java
  • License
    Other
  • Created almost 4 years ago
  • Updated 3 months ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

SuperTokens banner

Open-Source auth provider

chat on Discord Docker pull stats

Add secure login and session management to your apps. SDKs available for popular languages and front-end frameworks e.g. Node.js, Go, Python, React.js, React Native, Vanilla JS, etc.

Architecture Diagram Supertokens architecture is optimized to add secure authentication for your users without compromising on user and developer experience

Three building blocks of SuperTokens architecture

  1. Frontend SDK: Manages session tokens and renders login UI widgets
  2. Backend SDK: Provides APIs for sign-up, sign-in, signout, session refreshing, etc. Your Frontend will talk to these APIs
  3. SuperTokens Core: The HTTP service for the core auth logic and database operations. This service is used by the Backend SDK

Features

Click here to get started

  • Passwordless Login
  • Social Login
  • Email Password Login
  • Phone Password Login
  • Session Management
  • Multi-Factor Authentication
  • Multi Tenancy / Organization Support (Enterprise SSO)
  • User Roles
  • Microservice Authentication

Learn more

If you like our project, please ๐ŸŒŸ this repository! For feedback, feel free to join our Discord, or create an issue on this repo

๐Ÿš€ What is SuperTokens?

SuperTokens is an open-core alternative to proprietary login providers like Auth0 or AWS Cognito. We are different because we offer:

  • Open source: SuperTokens can be used for free, forever, with no limits on the number of users.
  • An on-premises deployment so that you control 100% of your user data, using your own database.
  • An end-to-end solution with login, sign-ups, user and session management, without all the complexities of OAuth protocols.
  • Ease of implementation and higher security.
  • Extensibility: Anyone can contribute and make SuperTokens better!

Philosophy

Authentication directly affects the UX, dev experience, and security of any app. We believe that current solutions cannot optimize for all three "pillars", leading to many applications hand-rolling their own auth. This not only leads to security issues but is also a massive time drain.

We want to change that - we believe the only way is to provide a solution that has the right level of abstraction gives you maximum control, is secure, and is simple to use - just like if you build it yourself, from scratch (minus the time to learn, build, and maintain).

We also believe in the principle of least vendor lock-in. Your having full control of your user's data means that you can switch away from SuperTokens without forcing your existing users to logout, reset their passwords, or in the worst case, sign up again.

Click here to see the demo app.

  • Please visit our website to see the list of features.
  • We want to make features as decoupled as possible. This means you can use SuperTokens for just login, or just session management, or both. In fact, we also offer session management integrations with other login providers like Auth0.

Documentation

The docs can be seen on our website.

There is more information about SuperTokens on the GitHub wiki section.

๐Ÿ—๏ธ Architecture

Please find an architecture diagram here

For more information, please visit our GitHub wiki section.

โ˜• Why Java?

  • โœ… Whilst running Java can seem difficult, we provide the JDK along with the binary/docker image when distributing it. This makes running SuperTokens just like running any other HTTP microservice.
  • โœ… Java has a very mature ecosystem. This implies that third-party libraries have been battle-tested.
  • โœ… Java's strong type system ensures fewer bugs and easier maintainability. This is especially important when many people are expected to work on the same project.
  • โœ… Our team is most comfortable with Java and hiring great Java developers is relatively easy as well.
  • โœ… One of the biggest criticisms of Java is memory usage. We have three solutions to this:
    • The most frequent auth-related operation is session verification - this happens within the backend SDK (node, python, Go) without contacting the Java core. Therefore, a single instance of the core can handle several 10s of thousands of users fairly easily.
    • We have carefully chosen our dependencies. For eg: we use an embedded tomcat server instead of a higher-level web framework.
    • We also plan on using GraalVM in the future and this can reduce memory usage by 95%!
  • โœ… If you require any modifications to the auth APIs, those would need to be done on the backend SDK level (for example Node, Golang, Python..). So youโ€™d rarely need to directly modify/work with the Java code in this repo.

โŒจ๏ธ User Management Dashboard

Oversee your users with the SuperTokens User Management Dashboard

List users

List all the users who have signed up to your application.

List SuperTokens users

Manage users

Manage users by modifying or deleting their sessions, metadata, roles and account info.

Manage users

๐Ÿ”ฅ SuperTokens vs others

Please find a detailed comparison chart on our website

๐Ÿ› ๏ธ Building from source

Please see our wiki for instructions.

๐Ÿ‘ฅ Community

If you think this is a project you could use in the future, please ๐ŸŒŸ this repository!

Contributors (across all SuperTokens repositories)

Melvyn Hills

Rishabh Poddar

Advait Ruia

Bhumil Sarvaiya

Joel Coutinho

Rakesh UP

Mufassir Kazi

Nemi Shah

Rohit Bhatia

Madhu Mahadevan

Aidar Nugmanoff

Arnav Dewan

NkxxkN

LordChadiwala

Luiz Soares

Sudipto Ghosh

Fabricio20

metallicmonkey

Vidhyanshu Jain

Domenico Luciani

Enzo Batrov

Eloรฏse Isautier

รkos Resch

Chotu Chaudhary

Tomรกลก Horรกฤek

Sam Bauch

Alexey Tylindus

Gus Fune

chenkaiC4

Marek Dulowski

Piyushh Bhutoria

Eric Dobbertin

Kyle Dodson

Ralph Lawrence

Christopher Kapic

Hanzyusuf

Mihรกly Lengyel

Cerino O. Ligutom III

nadilas

Vasile Catana

Jay Mistry

Jacob Marshall

miketromba

Oleg Vdovenko

Siddharth

xuatz

Yoway Buorn

Ronit Panda

Anugrah Singhal

Jeremy Eastham

Assaf Yacobi

Sattvik Chakravarthy

Olivier Pichon

Siddhant Varma

renyijiu

Isaiah Thomason

Utsav Barnwal

Saurabh Ghatnekar

Alisher Aituarov

Simon Kihlberg Wallstrom

Areeb Khan

Nicholas Dudfield

Qdea

Lukas Knuth

Melvyn Hills

Matt Murray

Clรฉo Rebert

Daniil Borovoy

๐Ÿ‘ฉโ€๐Ÿ’ป Contributing

Please see the CONTRIBUTING.md file for instructions.

๐Ÿ“ License

ยฉ 2020-2023 SuperTokens Inc and its contributors. All rights reserved.

Portions of this software are licensed as follows:

  • All content that resides under the "ee/" directory of this repository, if that directory exists, is licensed under the license defined in "ee/LICENSE.md".
  • All third-party components incorporated into the SuperTokens Software are licensed under the original license provided by the owner of the applicable component.
  • Content outside of the above-mentioned directories or restrictions above is available under the "Apache 2.0" license as defined in the level "LICENSE.md" file

More Repositories

1

supertokens-node

Node SDK for SuperTokens core
JavaScript
241
star
2

supertokens-auth-react

ReactJS authentication module for SuperTokens
TypeScript
226
star
3

supertokens-python

Python SDK for SuperTokens
HTML
95
star
4

supertokens-golang

GoLang SDK for SuperTokens
Go
80
star
5

supertokens-website

Frontend SDK for SuperTokens - for session management + automatically refreshing sessions
JavaScript
48
star
6

supertokens-web-js

SuperTokens SDK for vanilla JS for all recipes
TypeScript
38
star
7

supertokens-docker-postgresql

Docker image for SuperTokens and PostgreSQL
Shell
37
star
8

browser-tabs-lock

Using this package, you can synchronise your code logic across browser tabs.
JavaScript
34
star
9

docs

SuperTokens documentation
MDX
32
star
10

supertokens-react-native

React Native SDK for SuperTokens
JavaScript
25
star
11

dashboard

User management dashboard
TypeScript
18
star
12

supertokens-docker-mysql

Dockerfile for SuperTokens with MySQL
Shell
14
star
13

supertokens-ai

Question / answer AI bot for SuperTokens
Python
12
star
14

supertokens-docker-mongodb

Docker image for SuperTokens Community and MongoDB
Shell
9
star
15

supertokens-ios

iOS SDK for SuperTokens
Swift
9
star
16

supertokens-flutter

Flutter SDK for SuperTokens
Dart
8
star
17

blog

Adding a blog to supertokens.com
JavaScript
8
star
18

supertokens-android

Android SDK for SuperTokens
Java
7
star
19

create-supertokens-app

CLI to create supertokens demo app easily
TypeScript
7
star
20

supertokens-docker-extension

Code for docker extension for SuperTokens
TypeScript
5
star
21

supertokens-plugin-interface

Plugin interface for communication between the core and plugins
Java
5
star
22

supertokens-nextjs-demo

4
star
23

supertokens-laravel

laravel driver for supertokens
PHP
4
star
24

frontend-driver-interface

Spec for frontend-driver-interface versions
4
star
25

supertokens-root

Repository used for development purposes of the core, plugins and plugin-interface
Shell
4
star
26

supertokens-mongodb-plugin

MongoDB plugin for SuperTokens
Java
3
star
27

supertokens-postgresql-plugin

Plugin for the core to interface with a postgresql database.
Java
3
star
28

supertokens-mysql-plugin

MySQL plugin for the core
Java
3
star
29

.github

2
star
30

supertokens-go

Golang SDK for SuperTokens
Go
2
star
31

supertokens-flask

Flask SDK for SuperTokens
Python
2
star
32

jwt-decoder

TypeScript
2
star
33

core-driver-interface

This is the API Spec for the APIs exposed by the supertokens-core http service
2
star
34

auth-jwt

JWT decoder / learner guide
TypeScript
2
star
35

supertokens-js-override

Helper functions for JS overriding
JavaScript
2
star
36

supertokens-sql-plugin

Generic SQL database plugin for SuperTokens
JavaScript
1
star
37

supertokens-logo

Contains the images and logos used in SuperToken repos
1
star