AUTH.GAMES
OAuth provider for sign-in, consent, connected applications, and client management.
FEATURES
Authorization Code with PKCE, refresh rotation, device flow. All RFC-compliant.
WebAuthn, TOTP, recovery codes. Step-up auth per scope risk class.
Proof Key for Code Exchange enforced on all flows. Rate limiting, token blacklisting and CSRF protection built in.
Email, Google and GitHub sign-in out of the box. Passkeys and TOTP two-factor authentication supported.
JWT sessions with refresh-token rotation. Instant revocation via the built-in token blacklist.
Append-only event log for every login, token issue, and error. Filter, search, and export from the dashboard.
DEVELOPER EXPERIENCE
OAuth 2.0 & OIDC. Standard-compliant endpoints.
Full OAuth 2.0 + OIDC endpoint reference — directly integrable, no proprietary SDKs required.
Pricing
Simple, Transparent.
No hidden fees. Scale from zero to enterprise without surprises.
All companies start on the Free tier after registration and can upgrade anytime from their account.