Authenik8
Generate a secure Express API or connected React and Express application with ES256 access tokens, stateful refresh rotation, Redis, Prisma, password authentication, and optional Google or GitHub OAuth.
npx create-authenik8-app my-app
Authenik8 has two independently versioned parts:
create-authenik8-appscaffolds and maintains generated projects.authenik8-coresupplies the identity, token, session, OAuth, and agent engine used by generated code.
Choose one of four presets, then use the generated authenik8.json contract with Doctor, guarded recipes, and the read-only upgrade planner to keep the authentication boundary healthy.
Quick links
| Section | Description |
|---|---|
| Getting started | Generate and run an API or fullstack application |
| Non-interactive generation | Generate deterministically in scripts and CI |
| Project diagnostics | Validate configuration without exposing secrets |
| Recipes | Preview and apply guarded post-generation changes |
| Upgrades and CI | Plan version changes and enforce policy in GitHub Actions |
| Presets | Compare JWT-only, password, OAuth, and fullstack outputs |
| Configuration | Configure JWKs, Redis, agents, and OAuth callbacks |
| Core API | Use the v2 authenik8-core contract |
| Production checklist | Review secrets, HTTPS, migrations, and authorization |
| Report a vulnerability | Submit suspected security issues through a private channel |
| Troubleshooting | Resolve common generation and runtime failures |