Developer docs

Integrate authentication in minutes.

authreads is the identity platform for your products. It owns who a user is; your product owns what they can do. Onboard a tenant, wire up your app, and ship your first login today.

Start onboarding View API reference

curl · password reset request

curl -X POST https://auth.example.com/api/v1/auth/password/forgot \
  -H "X-Tenant-Id: atr_xxxxxxxxxxxx" \
  -H "Authorization: Bearer alcs_xxxxxxxx..." \
  -H "Content-Type: application/json" \
  -d '{"email":"user@acme.com"}'

Onboarding runbook

Step-by-step, from a new tenant to production: credentials, config, users, go-live.

API & credentials

The four credential types, which one each caller needs, and how to rotate a secret.

Authentication examples

Copy-paste requests in curl, JavaScript, and Python for every core flow.

API reference

The complete generated reference, including BFF account-security operations.

The model in one line

Authentication (are you a real user of this tenant?) is handled by authreads. Authorization (which apps you may use) travels in the token your product enforces. Every request identifies its tenant with a Tenant ID in the header — never an app id in the body. The full walkthrough is in the onboarding runbook.

Two ways to integrate

Pick the path that matches who renders the login screen — both authenticate the same tenant users:

Your login page

Build your own form and drive the first-party flow — preflight, verify, exchange, then mint a signed access token. Full control of the UI.

Drop in a hosted OpenID Connect button — authorization code + PKCE with any conformant OIDC client library. authreads hosts the login screen.

Your first request

Every auth call carries your tenant identity in the headers (not the body):

curl · password reset request

curl -X POST https://auth.example.com/api/v1/auth/password/forgot \
  -H "X-Tenant-Id: atr_xxxxxxxxxxxx" \
  -H "Authorization: Bearer alcs_xxxxxxxx..." \
  -H "Content-Type: application/json" \
  -d '{"email":"user@acme.com"}'

More requests — in curl, JavaScript, and Python — live in Examples. Stuck? See the FAQ.