keycrib
About
Open-source authentication infrastructure that works with your database, not instead of it. A self-hostable auth server written in Go that ships as a single binary and can be embedded as a library.
Features
Database-Agnostic
Supports PostgreSQL, MySQL, SQLite, MongoDB, and DynamoDB out of the box with a unified adapter interface.
Multi-Tenant
Full tenant isolation with per-tenant configuration, rate limiting, and role-based access control.
MFA & OAuth2
Built-in TOTP, WebAuthn passkey support, and OAuth2 with Google and GitHub providers.
Single Binary
No runtime dependencies. Ships as a ~15MB Docker image or can be embedded directly as a Go library.
