- Every auth method — Password, Google/GitHub/Apple/Microsoft OAuth, magic
links, passkeys, TOTP, anonymous, phone, device flow (RFC 8628)
- Group SSO — OIDC, SAML 2.0, SCIM 2.0 via
sso() with conditional
TypeScript gating
- API keys — Scoped permissions, per-key rate limiting, rotation, SHA-256
hashing
- Groups and memberships — Hierarchical groups, roles, invites, cascade
operations
- SSR — Cookie-based auth for SvelteKit, TanStack Start, Next.js
- Multi-access —
auth.ctx(), auth.context(ctx), and
auth.http.context(ctx, request) cover app, imperative, and raw HTTP auth
- Convex component — Isolated tables, typed helpers, zero-config defaults
convex-auth.pages.dev
| Section |
Description |
| Getting Started |
Installation, providers, environment variables |
| API Reference |
auth.user, auth.session, auth.group, auth.key, and more |
| Group SSO |
OIDC, SAML, SCIM, audit, webhooks |
| SSR Integration |
SvelteKit, TanStack Start, Next.js |
| Guides |
Multi-access, device flow, authorization, production |
| Reference |
Config options, error codes, CLI, architecture |
pnpm install
vp run check
vp test --run --project convex
| Directory |
Description |
packages/auth |
Auth component, server helpers, providers, CLI |
packages/samlify |
Edge-compatible SAML runtime (local fork) |
tests/ |
Vitest test suite (convex + node projects) |
docs/ |
Starlight documentation site |
Apache-2.0