Identity, authorization, and traffic policies — centralized, self-hosted, and built for developers who'd rather ship features than debug auth flows.
# Register your app. Get tokens. Ship it.
$ curl -X POST https://authdev.cloud-monitor.com/admin/apps \
-d '{"name": "My App", "registration_policy": "open"}'
{
"id": "a1b2c3d4-...",
"client_secret": "sk_live_...",
"status": "active"
}
# That's it. Your app has auth now.Identity Broker
Centralized authentication for all your apps. One integration gives you Google, Microsoft, Apple, email, invite codes — whatever your users need. JWT tokens, refresh rotation, per-app roles. Your apps never touch a password.
Auth Middleware
Drop-in middleware that sits between your users and your API. Validates tokens, enforces roles, gates routes — so your application code stays clean and your endpoints stay locked.
Traffic Control
Identity-aware traffic policies. Rate limiting that knows who's asking, not just which IP. Abuse detection, geo-fencing, device trust — security decisions made at the identity layer, where they actually matter.
Get an app ID and client secret. Choose which auth methods your users see. Set roles, branding, registration policy.
Send users to your branded login page on Cloud Monitor. They authenticate with whatever provider you've enabled.
Cloud Monitor redirects back with a signed JWT. Verify locally with our public key. No ongoing API calls needed.
Add providers, manage users, rotate keys, view audit logs — all from the dashboard. Your app code doesn't change.
Runs on your infrastructure. Docker Compose up and you're live. No vendor lock-in, no per-MAU billing surprises.
Register once with each OAuth provider. Every app gets auth for free. Add a new app? It already has Google login.
Built-in support for Capacitor and native apps. Biometric unlock, secure token storage, silent refresh.
Cell-based architecture. Each tenant gets isolated containers. Clean teardown, no noisy neighbors, compliance-ready.
OAuth 2.0, OIDC, RS256 JWT, JWKS. Not a proprietary protocol — just the standards, implemented correctly.
Login pages branded per app. Your colors, your logo. Users see your product, not ours.
Cloud Monitor is in active development. Keymaster is live. Gatekeeper and Zuul are on the way.