AI-native identity

Build it. Secure it.

Your coding agent can do all of it: create the app, wire sign-in, mint roles, grant access — Authfu is built to be driven by the tools you vibe-code with. Underneath: Google, Microsoft, and GitHub sign-in in every app, magic links and passkeys, two-factor checked before anything is sent, standards-based OpenID Connect.

npm install -g @authfu/cli

Start with Next.js →Every door, zero config Give your agent llms.txt

you, to your coding agentadd sign-in with admin and editor roles, protect /admin, and make me an admin

your agent, replyingdone in one pass

$ authfu apps create my-app --link
$ authfu roles add Editor && authfu roles assign you@app.dev admin
✓ sign-in wired · /admin protected by the admin role · you hold it

Every command runs on your person-scoped key, and every action is audited: person → key → action.

Quickstarts

Choose your stack.

Each guide starts at app registration and ends at a working callback—without hiding the security-sensitive parts.

Available

Next.js

Auth.js v5 + NextAuth v4

Open guide →Available

WordPress

Plugin · OpenID Connect

Open guide →Available

Python / Streamlit

Native OIDC · st.login()

Open guide →

60-second setup

Auth.js v5, end to end.

Install the SDK, configure the provider, and expose the Auth.js route handler. Credentials are read from your environment.

Read the annotated guide →

auth.ts + route.ts

typescript

// auth.ts — no Authfu package required
import NextAuth from "next-auth"

export const { handlers, auth, signIn, signOut } = NextAuth({
  providers: [
    {
      id: "authfu",
      name: "Authfu",
      type: "oidc",
      issuer: process.env.AUTHFU_ISSUER,
      clientId: process.env.AUTHFU_CLIENT_ID,
      clientSecret: process.env.AUTHFU_CLIENT_SECRET,
      authorization: { params: { scope: "openid profile email" } },
      checks: ["pkce", "state"],
    },
  ],
})

// app/api/auth/[...nextauth]/route.ts
export const { GET, POST } = handlers

Building with an AI coding agent?

Point it at the canonical integration guide. Exact endpoints, claims, and security constraints included.

authfu.dev/llms.txt →