https://github.com/dahkenangnon/clav.run
The OAuth Identity Server You Own Powered by OAuth & OIDC — written in Node + TypeScript (Node.ts).
https://github.com/dahkenangnon/clav.run
iam jwks mfa node-oidc-provider oauth oauth2 openid openid-connect security user-management
Last synced: 6 months ago
JSON representation
The OAuth Identity Server You Own Powered by OAuth & OIDC — written in Node + TypeScript (Node.ts).
- Host: GitHub
- URL: https://github.com/dahkenangnon/clav.run
- Owner: Dahkenangnon
- License: mit
- Created: 2025-10-08T15:23:14.000Z (9 months ago)
- Default Branch: master
- Last Pushed: 2026-01-11T17:12:40.000Z (6 months ago)
- Last Synced: 2026-01-11T20:16:10.964Z (6 months ago)
- Topics: iam, jwks, mfa, node-oidc-provider, oauth, oauth2, openid, openid-connect, security, user-management
- Language: TypeScript
- Homepage: https://clav.run
- Size: 7.72 MB
- Stars: 1
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: changelog.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
🌐 Website •
📚 Documentation •
💻 GitHub •
🇫🇷 Français
# Clav.run
Own Your Users • Zero Per-User Costs • Deploy in 3 Minutes • Secure Everything
---
**Stop paying per user!** Clav.run is the **self-hosted identity server** that puts you in control. Deploy in **1-2-3 minutes** on any VPS or cloud, scale infinitely, and authenticate users with **any method** - passwords, biometrics, WebAuthn, MFA, or passwordless. Works in low-bandwidth zones, supports multiple accounts, and costs **zero per user**. 🚀
Built on the OpenID Certified™ [node-oidc-provider](https://github.com/panva/node-oidc-provider) library, delivering full OAuth 2.0 [(RFC 6749)](https://www.rfc-editor.org/rfc/rfc6749.html) and [OIDC](https://openid.net/connect/) compliance with advanced standards support.
> ⚠️ **Note**: While using the certified library, Clav.run itself has not undergone OpenID Foundation certification.
---
## ✨ Key Features
- **👥 Multi-Account Sessions** – Seamlessly switch between identities
- **🎯 Native `select_account` Prompt** – Simplifies account chooser UX
- **🌐 Federation Support** – Connect with external identity providers
- **⚡ Scalable & Performant** – Cluster-ready for high-load use cases
- **📱 Clean UI** – Accessible, responsive login and consent flows
- **🔒 MFA Support** – TOTP + email-based 2FA out-of-the-box
- **📊 Audit Logging** – Track activity and session lifecycle
📄 See the full [changelog](./changelog.md) • 🗺️ Check out our [roadmap](./ROADMAP.md)
---
## 🎯 Use Cases
| Persona | Benefits |
| ---------------------- | --------------------------------------------------------------- |
| **🚀 Startups** | Fast to deploy, minimal complexity |
| **👨💼 Solopreneurs** | Zero recurring costs, full control over identity stack |
| **🏢 SMBs** | Centralized login across internal or client-facing apps |
| **🔧 Developers** | Flexible API, prebuilt flows, modern CLI |
| **📱 Multi-App Teams** | Full SSO and account linking across multiple tools and projects |
---
## 🆚 Why Choose Clav.run?
| Feature | Clav.run | Enterprise Solutions | Raw Library |
| -------------------- | --------------- | -------------------- | --------------- |
| **Setup Time** | 🚀 Minutes | ⏱️ Weeks | 🛠️ Manual Setup |
| **UI Included** | ✅ Complete | ✅ Enterprise UI | ❌ No |
| **Self-Hosted** | ✅ Fully | ❌ Cloud/Hybrid | ✅ Yes |
| **Cost** | 💰 Free | 💸 Expensive | 💰 Free |
| **OpenID Certified** | ⚠️ Library Only | ✅ Full | ✅ Full |
Enhanced library with complete UI and streamlined setup.
---
## 🚀 Quick Start
### 🔒 Option 1: Use Production Release (Recommended)
```bash
# Download the latest release
wget https://github.com/Dahkenangnon/clav.run/releases/latest/download/clav-run-v*.tar.gz
tar -xzf clav-run-v*.tar.gz && cd clav-run-release
# System check & setup
yarn clav requirements
yarn clav setup
# Stay up-to-date
yarn update latest
```
### 🛠️ Option 2: Run from Source
```bash
git clone https://github.com/Dahkenangnon/clav.run.git
cd clav.run
yarn install
yarn clav requirements
yarn clav setup
yarn jwks generate
yarn dev
```
📍 Visit [`http://localhost:9007`](http://localhost:9007) to get started.
---
## 🛠️ CLI Overview
```bash
# General
yarn clav requirements # Check prerequisites
yarn clav setup # Interactive setup
yarn clav config validate # Validate current config
yarn clav config set # Set a config key
# OIDC Clients
yarn clav client add # Add a new client
yarn clav client list # List registered clients
# Keys
yarn jwks generate # Generate new JWKS
yarn jwks quick # Quick key generation
# Updates
yarn update latest # Update to latest version
yarn update list # View all available versions
yarn update --target 1.0.0 # Update to specific version
yarn update --interactive # Interactive mode
# Server
yarn start # Start dev server
yarn restart # Restart via PM2
```
---
## 📦 Deployment
### Using PM2
```bash
# Start in production mode
pm2 start ecosystem.config.cjs --env production
# Or in development mode
pm2 start ecosystem.config.cjs --env development
```
---
## 🆘 Support & License
- 🛡 **Security Issues**: [justin@claviscore.com](mailto:justin@claviscore.com)
- 📚 **Documentation**: [https://clav.run/docs](https://clav.run/docs)
- 📄 **License**: MIT License - see [LICENSE](./LICENSE)
---
Clav.run – Identity in Motion
---
