Guides

Own Auth with SolidStart

Mount the Own Auth HTTP handler in a SolidStart API route, use the browser client, and protect server routes with verified sessions.

Run Own Auth with Docker and Postgres

Build an Own Auth backend image, run its migrations once, and start the application after Postgres is ready.

Own Auth with Express

Mount the Own Auth HTTP handler before Express body middleware and protect application routes with verified sessions.

Own Auth with Fastify

Mount the Own Auth HTTP handler in Fastify, preserve raw request bodies, and protect application routes with verified sessions.

Own Auth with Astro

Run Own Auth in Astro SSR routes, verify sessions in middleware, and protect pages with `Astro.locals`.

Add Own Auth to a Flutter app

Connect Flutter to an Own Auth backend with password login, secure bearer sessions, and mobile magic links.

Own Auth with Hono

Mount the Own Auth HTTP handler in Hono, add the browser client, and protect application routes with verified sessions.

Add Own Auth to an iOS app

Connect Swift to an Own Auth backend with URLSession, Keychain sessions, Universal Links, and Sign in with Apple.

Own Auth with Nuxt

Run Own Auth in Nitro routes, verify sessions in server middleware, and protect Nuxt pages with an HttpOnly cookie.

Own Auth with Remix

Run Own Auth in Remix actions, verify sessions in loaders, and protect routes with an HttpOnly cookie.

Own Auth with SvelteKit

Run Own Auth in SvelteKit form actions, verify sessions in a server hook, and protect server loads.

Own Auth with AdonisJS

Add Own Auth to AdonisJS with VineJS validation, encrypted session cookies, controllers, and route middleware.

Add Own Auth to an Ionic and Capacitor app

Connect Ionic and Capacitor to an Own Auth backend with password login, secure bearer sessions, and mobile magic links.

Own Auth with Next.js App Router

Mount the Own Auth HTTP handler in Next.js, add the React client, and verify database sessions in Server Components and Server Actions.

Migrate from Auth0 to Own Auth

Export Auth0 profiles, map each Auth0 user ID to its Own Auth user ID, and replace Auth0 sessions after verification.

Migrate from Better Auth to Own Auth

Create Own Auth users from Better Auth records, preserve the user ID mapping, and replace Better Auth sessions.

Migrate from Clerk to Own Auth

Export Clerk users, map each Clerk user ID to its Own Auth user ID, and replace Clerk sessions after magic-link verification.

Migrate from Firebase Authentication to Own Auth

Export Firebase users, map each Firebase UID to its Own Auth user ID, replace Firebase-backed authorization, and create new Own Auth sessions.

Account recovery without account enumeration

Build password reset with generic request responses, single-use expiring tokens, password-policy enforcement, and session revocation.

Secure API keys for users and organisations

Issue scoped API keys once, verify bearer credentials on the server, and support expiry, auditability, and immediate revocation.

Organisations, roles, and invitations

Model B2B workspaces with organisation memberships, server-side permission checks, and single-use email invitations.

Phone login with SMS codes

Implement SMS code login with expiring hashed codes, attempt limits, generic responses, and revocable database sessions.

Authentication email delivery with Own Auth

Send magic links, verification, password resets, and invitations through an authenticated, rate-limited delivery path.

Database-backed sessions: expiry, revocation, and secure cookies

Create opaque sessions with protected token hashes, absolute expiry, idle expiry, and immediate revocation.

Magic-link authentication: secure passwordless sign-in

Build single-use, expiring magic-link authentication without account enumeration, reusable URL tokens, or client-side token verification.

Postgres authentication: keep users and sessions in your database

Store Own Auth users, credentials, sessions, organisations, API keys, and audit events in application-owned Postgres tables.

Self-hosted authentication without building auth from scratch

Compare hosted identity, a self-hosted auth server, and Own Auth's embedded-library model for keeping authentication inside the application backend.