Docsv1.0.2
Overview
Documentation
Concepts, guides, and the products. Sidebar has the rest when you need it.
Products
Agentic Identity, Access Control, Observability, and Console.
Concepts
How Authdog models identity, access, and tenancy.
Authentication
How sign-in, identity providers, and Authdog sessions fit together.
Authorization
RBAC, ABAC, and FGA models enforced per environment.
Sessions & tokens
Session cookies, JWTs, and token lifecycle.
Multi-tenancy
Tenants, projects, and environment isolation.
Organizations
B2B organizations, membership, and org-scoped access.
Provisioning
SCIM and inbound user provisioning.
Application starters
A real app in each framework, with the Authdog integration that stack actually ships. Open one to wire sign-in. Prototypes live in authdog/samples under starters/.
Frontend
Team dashboardNext.jsApp Router exchanges the callback, then shows the signed-in email on a gated page.
Customer navbarReact ElementsReact elements open hosted sign-in for the environment. Session cookies live in a server framework.
Support inboxRemixA loader validates the return token and sets an HttpOnly session cookie before the page renders.Field companionReact Native / ExpoHosted sign-in returns through a deep link. The session token stays in secure storage.
Member siteSvelteKitA handle hook reads the session cookie and blocks anonymous requests before the page loads.
Ops consoleTanStack StartA callback loader sets an HttpOnly cookie. Server code reads that session before it loads data.
Workspace settingsVueA root provider and composables expose the signed-in user to every Vue 3 view.
Admin consoleAngularA route guard blocks screens without a session. An interceptor attaches the bearer token to API calls.
HandbookAstroMiddleware lets public pages through and checks the session cookie on member routes.
Resource libraryGatsbyThe browser handles the callback. Gatsby Functions use requireAuth on the routes that serve files.
Job boardRedwoodJSThe web side handles the callback. API services call requireAuth before they read data.Backend
Orders APIExpressMiddleware rejects anonymous callers on GET /me and returns the Authdog user when the session is valid.
Inventory APIFastifyA plugin decorates the request with session context and exposes a guard for private routes.
Booking APIFastAPIA dependency injects the session. Routes without one return 401.
Clinic portalDjangoMiddleware loads the session. A decorator keeps private views behind it.
Status boardFlaskA decorator puts the session on flask.g and rejects routes that run without one.
Intake serviceStarletteASGI middleware reads the session. An async require_auth wrapper guards the private routes.
Event ingestaiohttpMiddleware plus a require_auth wrapper rejects handlers that run without a session.
Billing serviceGoGin middleware returns 401 on GET /me unless Authdog authenticates the caller.
Policy serviceRustAxum, Actix Web, Rocket, Warp, and Poem adapters share one session core.Connectors
Every identity provider a user can sign in with. Enable each one per environment.
