https://github.com/ValueMelody/melody-auth

A turnkey OAuth & authentication system, designed for both Cloudflare Workers and Node.js
https://github.com/ValueMelody/melody-auth

authentication cloudflare cloudflare-d1 cloudflare-kv cloudflare-workers facebook-login github-login google-login hono identity-provider mfa-authenticator oauth2 oauth2-client oauth2-server

Last synced: about 7 hours ago
JSON representation

A turnkey OAuth & authentication system, designed for both Cloudflare Workers and Node.js

• Host: GitHub
• URL: https://github.com/ValueMelody/melody-auth
• Owner: ValueMelody
• License: mit
• Created: 2024-07-09T19:38:12.000Z (7 months ago)
• Default Branch: main
• Last Pushed: 2025-02-05T03:53:47.000Z (6 days ago)
• Last Synced: 2025-02-05T07:08:03.096Z (6 days ago)
• Topics: authentication, cloudflare, cloudflare-d1, cloudflare-kv, cloudflare-workers, facebook-login, github-login, google-login, hono, identity-provider, mfa-authenticator, oauth2, oauth2-client, oauth2-server
• Language: TypeScript
• Homepage: https://auth.valuemelody.com/
• Size: 3.8 MB
• Stars: 85
• Watchers: 0
• Forks: 4
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • Contributing: .github/CONTRIBUTING.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-cloudflare - melody-auth

README

        
# Melody Auth

**Melody Auth** is a user-friendly, robust solution for implementing and hosting your own OAuth and authentication system.

- Deploy to **Cloudflare** using **Workers, D1, and KV** in just minutes — minimizing infrastructure and DevOps overhead.

- **Self-Host** with **Node.js, Redis, and PostgreSQL** — giving you full control over your data and infrastructure.

## What's included?

- Complete **OAuth & Authentication Server**

  - [Auth Server Setup Doc](https://auth.valuemelody.com/auth-server-setup.html)

  - [Auth Server Configuration Doc](https://auth.valuemelody.com/auth-server-configuration.html)

- **Server-to-Server REST API** for backend integrations

  - [Swagger API Doc](https://auth-server.valuemelody.com/api/v1/swagger)

  - [S2S API Doc](https://auth.valuemelody.com/s2s-api.html)

- **React SDK** to seamlessly integrate authentication into your frontend

  - [NPM Package](https://www.npmjs.com/package/@melody-auth/react)

  - [React SDK Doc](https://auth.valuemelody.com/react-sdk.html)

- **Admin Panel** for managing resources (also serves as a full-stack implementation example)

  - [Admin Panel Setup Doc](https://auth.valuemelody.com/admin-panel-setup.html)

## Server Features Supported

- OAuth 2.0:

  - Authorize

  - Token Exchange

  - Refresh Token Revoke

  - App Consent

  - App Scopes

  - User Info Retrieval

  - OpenID Configuration

- Authorization:

  - Sign-In

  - Sign-Up

  - Sign-Out

  - Email Verification

  - Password Reset

  - Role-Based Access Control

  - Account Linking

  - Localization [How to support a new locale](https://auth.valuemelody.com/q_a.html#how-to-support-a-new-locale)

- Social Sign-In:

  - Google Sign-In

  - Facebook Sign-In

  - GitHub Sign-In

- Organization:

  - Branding config override

- Multi-Factor Authentication [How to setup MFA](https://auth.valuemelody.com/q_a.html#how-to-setup-mfa)

  - Email MFA

  - OTP MFA

  - SMS MFA

  - MFA Enrollment

  - Passkey Enrollment

- Policy [How to trigger a different policy](https://auth.valuemelody.com/q_a.html#how-to-trigger-a-different-policy)

  - sign_in_or_sign_up

  - change_password

  - change_email

  - reset_mfa

  - manage_passkey

- Mailer Option [Email Provider Setup Doc](https://auth.valuemelody.com/email-provider-setup.html)

  - SendGrid

  - Mailgun

  - Brevo

  - STMP (Node.js environment only)

- SMS Option [SMS Provider Setup Doc](https://auth.valuemelody.com/sms-provider-setup.html)

  - Twilio

- JWT Authentication

  - RSA256 based JWT Authentication [How to verify a SPA access token](https://auth.valuemelody.com/q_a.html#how-to-verify-a-spa-access-token)

  - JWT Secret Rotate [How to rotate JWT secret](https://auth.valuemelody.com/q_a.html#how-to-rotate-jwt-secret)

- Brute-force Protection:

  - Log in attempts

  - Password reset attempts

  - OTP MFA attempts

  - SMS MFA attempts

  - Email MFA attempts

  - Change Email attempts

- Logging:

  - Email Logs

  - SMS Logs

  - Sign-in Logs

## Admin Panel & S2S REST API Features Supported

- View Configurations

- Manage Users

- Manage Apps

- Manage Scopes

- Manage Roles

- Manage Organizations

- View Logs

## Screenshots

[Authorization Screenshots](https://auth.valuemelody.com/screenshots.html#identity-pages-and-emails)  

[Admin Panel Screenshots](https://auth.valuemelody.com/screenshots.html#admin-panel-pages)  

## License

This project is licensed under the MIT License. See the LICENSE file for details.