Platform Capabilities

Simple Configuration

Get up and running in minutes.

• Configuration is handled entirely through environment variables and a simple `wrangler.toml` file (plus secrets).
• No complex database migrations or proprietary config languages to learn.
• No Click-ops! Can be entirely deployed with command line and managed with config files.

Client Libraries

Accelerate your development with our official libraries.

• @idpflare/client: TypeScript client for frontend apps.
• @idpflare/management: Typed SDK for the Management API.
• React Hooks & Providers included.
• Works with standard OIDC libraries.

Documentation First

Extensive documentation with examples.

• OpenAPI (Swagger) Specification.
• Comprehensive READMEs.
• Detailed Integration Guides.

Community & Support

You're not alone. Join a growing community of developers.

• Discord Server for real-time help.
• GitHub Issues & Discussions for tracking.
• Direct support from the maintainers.

OAuth 2.0 & OIDC

Fully compliant implementation of modern authentication standards.

• Authorization Code Flow + PKCE
• Client Credentials Flow (M2M)
• Refresh Tokens with Rotation
• OpenID Connect Discovery (.well-known)
• JWKS Endpoint for Key Rotation

Session Management

Secure, server-side session handling distributed via Cloudflare KV.

• Configurable Session Duration
• Cookie-based Session IDs (HttpOnly, Secure)
• Global Session Revocation
• Concurrent Session Control

Social Identity

Zero-code integration with major identity providers.

• Google, GitHub, Facebook, Microsoft
• Automatic Account Linking
• Just-in-Time (JIT) Provisioning
• Normalized User Profiles

Multi-Factor Auth (MFA)

Flexible MFA policies to secure user accounts.

• TOTP (Google Authenticator, Authy)
• Email One-Time Passwords
• Security Questions (configurable count)
• Emergency Backup Codes
• Enforcement Policies (Required/Optional)

Defense Mechanisms

Proactive security measures baked in.

• Rate Limiting (Login Attempts)
• Brute Force Protection
• Security Headers (CSP, HSTS, X-Frame)
• CSRF Protection on all Forms
• 100k Iterations PBKDF2-HMAC-SHA256 Password Hashing

Audit & Compliance

Full visibility into your authentication events.

• Detailed Audit Logs (Login, Failed Auth, etc.)
• User Activity Tracking
• Admin Action Logging
• Data Export Capabilities (via API)

Event Hooks

Inject custom logic at critical points in the auth lifecycle via webhooks.

• Pre/Post Registration
• Pre/Post Login
• Token Claims Customization
• Scope Validation Handlers

Theming & Branding

Complete control over the look and feel via simple configuration.

• Custom Logo & Favicon
• Brand Colors (Primary, Secondary, Accent)
• Custom Fonts (Google Fonts Integration)
• Border Radius & Spacing Control

Email Infrastructure

Driver-based email system supporting major providers.

• Resend, SendGrid, Mailgun, Postmark, AWS SES
• HTML Email Templates
• Verification Emails
• Password Reset Flows

Edge Computing

Your authentication logic runs on Cloudflare Workers, distributed across 300+ cities worldwide. This guarantees the lowest possible latency for every user, regardless of their location.

Unbeatable Cost

Run entirely on the Cloudflare Workers Free Tier (100k requests/day) or their affordable Paid Plan ($5/mo for 10M requests). No expensive servers or per-user licensing fees.

Infinite Scalability

Handle traffic spikes automatically without configuring auto-scaling groups or load balancers. Cloudflare's infrastructure absorbs the load instantly.

Global Security

Benefit from Cloudflare's massive global network protection including DDoS mitigation, Web Application Firewall (WAF), and secure global distribution.