Authentication & tokens

Authentication and sessions, self-hosted.

Warden issues and verifies session tokens for your apps over a small API, so you keep auth in-house instead of renting it.

Read the documentation →$ warden serve
Warden Authentication·Token issuance·Session verification·Revocation·REST API

Capabilities

Issue & verify

Mint signed session tokens and verify them in one round trip, with short-lived access and refresh tokens.

Revocation

Kill a session or a whole user's sessions instantly — verification checks the live revocation list.

Simple integration

Two endpoints cover most apps: one to sign in, one to verify. No SDK required.

Sign in, verify, done.

Exchange credentials for a token, then verify it on each request.

  1. 1Start Warden on any host.
  2. 2Exchange credentials for a token.
  3. 3Verify the token on incoming requests.
# start the server $ warden serve --data ./auth # sign in $ curl -X POST /v1/tokens \ -d '{"user":"stas"}' → token eyJ... # verify a token $ curl /v1/verify -H 'authorization: Bearer eyJ...'