Skip to main content
Authlete is an API-first service where every aspect of the platform is configurable via API. This documentation provides comprehensive guides and API references to help you build secure OAuth 2.0 and OpenID Connect functionality in your service.

​
What is Authlete?

Authlete provides a set of web APIs that enable developers to implement full-featured OAuth 2.0 and OpenID Connect (OIDC) authorization servers. Instead of building a complex authorization mechanism from scratch, you can leverage Authlete to handle:
  • OAuth/OIDC Protocol Processing: Support for various flows, profiles, and extensions, including Authorization Code, Client Credentials, Device Flow, FAPI, and OID4VCI.
  • Token Management: Full control over token issuance, validation, and revocation for all artifacts (such as access/refresh tokens, authorization codes, and request URIs).
  • Client Management: Secure registration of OAuth clients and OIDC Relying Parties (RPs), including client credentials, redirect URIs, and JWKS.
  • Service Management: Custom configuration of authorization servers, including grant types, scopes, and claims.

​
Start Here 🚀

First API Call

Set up your first Authlete service and make your first API call

API Basics

Understand how to implement OAuth 2.0 authorization flows with Authlete APIs

API Reference

Browse our comprehensive API documentation

API Access Token

Get Service and Organization access tokens to authenticate your services to Authlete APIs

​
SDKs and Tools

OpenAPI

The OAS documentation for Authlete APIs

Java

Authlete Common Library for Java

TypeScript

Authlete TypeScript SDK

Ruby

Authlete Ruby SDK

Terraform

Terraform provider for Authlete

GitHub

Other SDKs, reference implementations, and more

​
Need Help?