Tribork

Authentication & tokens

Authentication and sessions, self-hosted.

Tribork issues and verifies session tokens for your apps over a small API, so you keep auth in-house instead of renting it.

Read the documentation →$ tribork serve
tribork — shell
# start the server
$ tribork serve --data ./auth

# sign in
$ curl -X POST /v1/tokens \
    -d '{"user":"alice"}'
→ token eyJ...

# verify a token
$ curl /v1/verify -H 'authorization: Bearer eyJ...'
Tribork Authentication·Token issuance·Session verification·Revocation·REST API

Capabilities

01

Issue & verify

Mint signed session tokens and verify them in one round trip, with short-lived access and refresh tokens.

02

Revocation

Kill a session or a whole user's sessions instantly — verification checks the live revocation list.

03

Simple integration

Two endpoints cover most apps: one to sign in, one to verify. No SDK required.

Sign in, verify, done.

Exchange credentials for a token, then verify it on each request.

  1. 1Start Tribork on any host.
  2. 2Exchange credentials for a token.
  3. 3Verify the token on incoming requests.
# start the server $ tribork serve --data ./auth # sign in $ curl -X POST /v1/tokens \ -d '{"user":"alice"}' → token eyJ... # verify a token $ curl /v1/verify -H 'authorization: Bearer eyJ...'