Skip to content

Zero Auth Lite

Zero Auth Lite is a readable FastAPI reference server for authentication and authorization. It is a small educational identity provider: it owns users, browser sessions, OAuth2 clients, tokens, and OpenID Connect endpoints without trying to become a complete IAM platform.

The documentation has five sections. The first four explain how to use and operate Zero Auth Lite. The last is for contributors working on the repository.

Product Documentation

Getting Started

Install the server, configure the first operator, then register and exercise an OAuth2 client. Follow these pages in order:

  1. Installation
  2. Initial configuration
  3. First OAuth2 client

Guides

Understand and use the authentication features: users and organizations, browser sessions and CSRF, OAuth2 flows, and OpenID Connect.

Operations

Run Zero Auth Lite beyond a local first start. Begin with deployment, then cover the database, migrations, backups, logging, and security.

Reference

Look up the public technical contract without following a tutorial: settings, routes, application errors, and OAuth2 errors.

Contributor Documentation

Development

Work on Zero Auth Lite itself. Start with the development setup and repository structure, then use the internal architecture, testing, migration, routing, and contribution pages in this section.

The supported runtime is one Zero Auth Lite application node. High-availability multi-node operation, SAML, SCIM, LDAP, social login, and enterprise IAM features are outside the project scope.