{"id":51083541,"url":"https://github.com/blendsdk/porta-identity","last_synced_at":"2026-06-23T20:32:19.681Z","repository":{"id":352734080,"uuid":"1216313405","full_name":"blendsdk/porta-identity","owner":"blendsdk","description":"Porta Identity — Multi-tenant OIDC Provider built on node-oidc-provider. Organization-scoped authentication, user management, RBAC, custom claims, 2FA, and admin CLI. TypeScript + Koa + PostgreSQL + Redis.","archived":false,"fork":false,"pushed_at":"2026-06-12T15:56:11.000Z","size":14295,"stargazers_count":1,"open_issues_count":3,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-12T17:28:59.161Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://blendsdk.github.io/porta-identity/","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/blendsdk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-20T19:29:30.000Z","updated_at":"2026-06-12T15:46:56.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/blendsdk/porta-identity","commit_stats":null,"previous_names":["blendsdk/porta-identity"],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/blendsdk/porta-identity","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blendsdk%2Fporta-identity","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blendsdk%2Fporta-identity/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blendsdk%2Fporta-identity/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blendsdk%2Fporta-identity/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/blendsdk","download_url":"https://codeload.github.com/blendsdk/porta-identity/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/blendsdk%2Fporta-identity/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34706579,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-23T02:00:07.161Z","response_time":65,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-06-23T20:32:18.673Z","updated_at":"2026-06-23T20:32:19.671Z","avatar_url":"https://github.com/blendsdk.png","language":"TypeScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003e ⚠️ **Pre-release**\n\u003e\n\u003e Porta has undergone production hardening, including rate limiting, account lockout protection, GDPR-focused privacy controls, audit retention, and a defence-in-depth security review.\n\u003e\n\u003e However, it has not yet been extensively battle-tested in production. APIs, configuration options, and database schemas may still change before a stable release.\n\u003e\n\u003e Use with caution, especially in production environments.\n\n\u003e ⚠️ **Coming soon: Porta Administration GUI**\n\u003e\n\u003e Porta already provides a powerful CLI for managing the Identity Provider and helping system administrators configure and operate their Porta installation.\n\u003e\n\u003e To make administration even easier, we are working on a comprehensive web-based Administration GUI. This new interface will simplify common administrative tasks, improve visibility, and make Porta easier to manage in real-world environments.\n\u003e\n\u003e Stay tuned for updates.\n\n[![CI](https://github.com/blendsdk/porta-identity/actions/workflows/ci.yml/badge.svg)](https://github.com/blendsdk/porta-identity/actions/workflows/ci.yml)\n[![Docker](https://img.shields.io/docker/v/blendsdk/porta?sort=semver\u0026label=Docker%20Hub)](https://hub.docker.com/r/blendsdk/porta)\n[![License](https://img.shields.io/github/license/blendsdk/porta-identity)](LICENSE)\n[![Node](https://img.shields.io/badge/node-%E2%89%A522-brightgreen)](https://nodejs.org/)\n\n# Porta\n\nMulti-tenant OIDC provider built on [node-oidc-provider](https://github.com/panva/node-oidc-provider) + Koa + TypeScript + PostgreSQL + Redis. Provides organization-scoped authentication, user management, RBAC, custom claims, two-factor authentication, and a comprehensive admin CLI.\n\n## 🔗 Quick Links\n\n| | |\n|---|---|\n| 📖 [Documentation](https://blendsdk.github.io/porta-identity/) | Full guides, API reference, CLI docs |\n| 🐳 [Docker Hub](https://hub.docker.com/r/blendsdk/porta) | Pull the production Docker image |\n| 🚀 [Quick Start](https://blendsdk.github.io/porta-identity/guide/quickstart) | Get running in under 5 minutes |\n| 📋 [Admin API](https://blendsdk.github.io/porta-identity/api/overview) | REST API reference for admin operations |\n| 💻 [CLI Reference](https://blendsdk.github.io/porta-identity/cli/overview) | Command-line administration tool |\n\n## 🚀 Quick Start\n\nThe fastest way to try Porta — no git clone required. Just create two files and run:\n\n**1. Create a `docker-compose.yml`** ([full file in the Quick Start guide](https://blendsdk.github.io/porta-identity/guide/quickstart)):\n\n```yaml\nservices:\n  porta:\n    image: blendsdk/porta:latest\n    ports: [\"3000:3000\"]\n    env_file: [.env]\n    environment:\n      DATABASE_URL: postgresql://porta:porta_secret@postgres:5432/porta\n      REDIS_URL: redis://redis:6379\n    depends_on:\n      postgres: { condition: service_healthy }\n      redis: { condition: service_healthy }\n  postgres:\n    image: postgres:16-alpine\n    environment: { POSTGRES_DB: porta, POSTGRES_USER: porta, POSTGRES_PASSWORD: porta_secret }\n    volumes: [pgdata:/var/lib/postgresql/data]\n    healthcheck: { test: [\"CMD-SHELL\", \"pg_isready -U porta\"], interval: 5s, retries: 5 }\n  redis:\n    image: redis:7-alpine\n    healthcheck: { test: [\"CMD\", \"redis-cli\", \"ping\"], interval: 5s, retries: 5 }\nvolumes:\n  pgdata:\n```\n\n**2. Create a `.env`** file with `ISSUER_BASE_URL=http://localhost:3000`, `COOKIE_KEYS=...`, `PORTA_AUTO_MIGRATE=true` ([full template](https://blendsdk.github.io/porta-identity/guide/quickstart#docker-hub))\n\n**3. Run:**\n\n```bash\ndocker compose up -d                                          # Start Porta + Postgres + Redis\ndocker exec -it porta-app porta init                          # Bootstrap admin system\n```\n\nThen open [http://localhost:3000/health](http://localhost:3000/health) to verify.\n\nFor source development setup, see the [Quick Start guide](https://blendsdk.github.io/porta-identity/guide/quickstart#source).\n\n## ✨ Features\n\n- **Multi-Tenant OIDC** — Path-based tenancy with per-org OIDC endpoints\n- **User Management** — CRUD, status lifecycle, password policies (NIST SP 800-63B)\n- **RBAC** — Roles, permissions, and user-role mappings per application\n- **Custom Claims** — Type-validated custom claim definitions and user values\n- **Two-Factor Auth** — Email OTP, TOTP (authenticator apps), recovery codes\n- **Login Methods** — Per-org and per-client configurable (password, magic link)\n- **Admin CLI** — 14+ commands for managing orgs, apps, clients, users, roles, and more\n- **Admin API** — JWT-authenticated REST API for all admin operations\n- **ES256 Signing** — ECDSA P-256 keys, auto-bootstrapped, stored in database\n- **Hybrid OIDC Adapters** — Redis for sessions, PostgreSQL for tokens/grants\n- **Audit Logging** — Comprehensive event logging for security and compliance\n\n## 📖 Documentation\n\nVisit the **[Porta Documentation](https://blendsdk.github.io/porta-identity/)** for:\n\n- Architecture overview and design decisions\n- Environment variable reference\n- Database schema and migrations\n- Deployment and production guidance\n\n## 🤝 Contributing\n\nPorta is currently in early development. Contributions are welcome — please open an issue to discuss before submitting a pull request.\n\n```bash\n# Development setup\ngit clone https://github.com/blendsdk/porta-identity.git \u0026\u0026 cd porta-identity\nyarn install\ncp .env.example .env\nyarn docker:up        # Start PostgreSQL, Redis, MailHog\nyarn build \u0026\u0026 node dist/cli/index.js migrate up \u0026\u0026 node dist/cli/index.js init\nyarn dev              # Start dev server with hot-reload\nyarn verify           # Run lint + build + tests before committing\n```\n\n## 📄 License\n\nMIT — © TrueSoftware B.V.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblendsdk%2Fporta-identity","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fblendsdk%2Fporta-identity","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fblendsdk%2Fporta-identity/lists"}