Tinyauth
OpenID Connect and authentication server that puts a login screen and access controls in front of self-hosted apps through reverse proxies such as Traefik.
Tinyauth puts a login screen in front of self-hosted applications and is an OpenID Connect certified server. It is written in Go and runs as one server process, started from a binary, a Docker container or a Helm chart on Kubernetes. Users are set in configuration as bcrypt-hashed passwords with optional TOTP secrets, and sign-in can go through OAuth providers or an LDAP directory. The getting-started guide places it behind Traefik by default, and per-application labels restrict an app to chosen users or groups.
Worth knowing
The about page says the project is not designed for production environments that need role-based access control and finer permissions, and recommends Authentik for advanced user management. The README says the project is maintained by a single person.
Identity
- Status
- Active
- Maintainer
- tinyauthapp2
- Maintained by
- Individual4
- First release
- 20258
Rendering and deploy
Releases
Adoption
Sources
- 2026-11-03: name, links, Categories, Runtime
tinyauth.app - 2026-11-03: links, Maintainer, Written in, License, GitHub stars, Contributors
github.com/tinyauthapp/tinyauth - 2026-11-03: links, Install with
tinyauth.app/docs/getting-started/ - 2026-11-03: Maintained by, Multilingual
raw.githubusercontent.com/tinyauthapp/tinyauth/main/README.md - 2026-11-03: Install with, Runs as
tinyauth.app/docs/guides/using-the-binary/ - 2026-11-03: Install with
tinyauth.app/docs/guides/kubernetes/ - 2026-11-03: Current major version, Last release
github.com/tinyauthapp/tinyauth/releases/tag/v5.2.0 - 2026-11-03: First release
github.com/tinyauthapp/tinyauth/releases/tag/v0.1.0-beta.1 - 2026-11-03: Databases
tinyauth.app/docs/reference/configuration/ - 2026-11-03: Admin interface
tinyauth.app/docs/about/