tinyauthapp/tinyauth

Health v2 · maintenance only

Adoption not part of the score

8174 stars · 264 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Tinyauth is a lightweight, OpenID Certified™ authentication and authorization server written in Go, shipped as a single static binary. It works as an auth middleware for apps behind reverse proxies (Traefik, Nginx, Caddy) or as a standalone OIDC provider, with OAuth, LDAP, and TOTP 2FA support configured via environment variables.

Use cases

• add login to self-hosted apps behind traefik
• self-hosted single sign-on for homelab
• lightweight openid connect provider
• protect apps with 2fa totp
• authenticate apps with ldap
• forward auth middleware for nginx and caddy

When to choose

• you want dead-simple SSO for self-hosted services with minimal configuration
• you need a tiny, resource-light OIDC provider instead of Keycloak
• you use Traefik, Nginx, or Caddy and want forward-auth protection

When to avoid

• you need extensive enterprise identity features, user management dashboards, or fine-grained RBAC
• you require long-term config stability, as configuration changes frequently between releases
• you need a full-featured identity platform with social login federation beyond basic OAuth/LDAP

Facets

service · maturity active

auth authorization middleware http-server security security self-hosted web-development backend self-hosted go cross-platform oidc sso totp 2fa ldap oauth reverse-proxy traefik nginx caddy openid-certified single-binary docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tinyauthapp/tinyauth")