📄️ Sign-in, Security, and Settings
End-user guide to AuthProxy sign-in methods, local PIN unlock, sessions, keys, and connected applications.
📄️ Session Management
AuthProxy implements a robust session management system that provides secure, scalable, and flexible user session handling across web applications and APIs.
📄️ FIDO2/WebAuthn
AuthProxy provides FIDO2/WebAuthn support for hardware security key authentication. This is based on the actual FIDO2 implementation found in the codebase.
📄️ Multi-Factor Authentication
AuthProxy supports multiple authentication methods that can work together to provide layered security. The full catalogue is exposed at /auth/v1/get_info so PWA frontends know which login forms to render.
📄️ Magic Links
Magic links provide a passwordless login experience via email. Instead of entering an OTP code, the user clicks a link in their email to authenticate instantly.
📄️ OAuth Providers
AuthProxy supports authentication via seven OAuth/social login providers (Google, Telegram, Discord, Apple, Facebook, GitHub, VKontakte). Each provider requires separate configuration with API credentials. Some providers support account linking (?link=true) — attaching a social account to an existing user session.
📄️ Federation v2 — Browser Login
How a verified ItBuild project lets users sign in via another federated project (providers catalogue, /auth/v1/federated/start with redirectUrl, /federated-return.html callback, POST /auth/v1/federated/login).
📄️ Verified Contacts
How AuthProxy and CRM track verified vs operator-added phone, email, and OAuth identities through user_exid_flags.