Hexclave
When a product needs sign-in, teams, permissions, and user analytics, Hexclave (formerly Stack Auth) delivers all of it from one admin dashboard, so nobody on your team hand-rolls another password reset flow. Sign-in methods are switches, each flipped on or off without a redeploy: email and password with secure reset, magic links, passkeys, TOTP two-factor, any of 12 OAuth providers including Google, GitHub, Microsoft, Apple, and Discord, or your own OpenID Connect provider. Sign-up rules allow, reject, or hold accounts by email domain, country, auth method, or fraud risk score. The user directory searches, filters, edits, and exports every profile, custom metadata included. Teams bring workspaces, email invites, and nested roles checked the same way on server and client. API keys belong to users or teams, auto-revoke when leaked, and reveal their secret only once. Themed templates send transactional and marketing email with open and click tracking. Analytics show live active users and session replays and store the SQL queries you write, and every user event can fire a signed webhook with automatic retries. Standard JWTs verify locally against a JWKS endpoint, and SDKs cover Next.js, React, and plain JavaScript. Self-host the dashboard and API on your own server and export your users whenever you like, with no lock-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT and AGPLv3 licensed.
Deploy