rauthy

Secrets & Credentials

A lightweight, secure Identity Provider supporting OpenID Connect, OAuth 2, PAM, with strong emphasis on passkeys and minimal resource usage

Rust Latest v0.36.1 · 2d ago Security brief →

Features

OpenID Connect & OAuth 2 Identity Provider with PAM support
Strong security defaults (ed25519 signing, PKCE) and optional passkey‑only accounts
Low‑footprint Rust implementation running on virtually any hardware including Raspberry Pi

View all 9 releases →

Upgrade now

v0.36.1 Breaking risk 2d

Auth

Favicons, MFA upgrade, Token Exchange, Metadata, Grant‑ignore, Regex, Username

Open

Review required

v0.36.0 Breaking risk 20d

Auth Breaking upgrade

Config validation, group admins, token claims, resource indicators, secrets

Open

Upgrade now

v0.35.2 Mixed 2mo

Dependencies

preferred_username, MCP AS, device_code nonce, UI client ID

Open

v0.35.1 New feature 3mo

Notable features

Postgres Unix Domain Socket connections with custom root CA and TLS mode configuration
Russian (ru) and French (fr) i18n translations
Optional redirect from /auth/v1/ to /auth/v1/account

v0.35.0 Breaking risk 4mo

Breaking changes