Multi-provider authGitHub, ORCID, Passkeys, Google, Microsoft, and generic OIDC for customer-owned frontends.
OAuth and OIDCAuthorization Code with PKCE, token rotation, UserInfo, introspection, and logout contracts.
API-first platformStable JSON APIs for standalone registration, login, magic links, password reset, MFA, and profile flows.