OAuth & Identity

Normalize Google and GitHub profiles, resolve identities, and securely link providers.

API: oauth.google, oauth.github, issueTokensFromProfile

security.ts

const auth = await createAuthenik8({
  jwtSecret,
  refreshSecret,
  oauth: {
    google: { clientId, clientSecret, redirectUri },
  },
});

app.get("/auth/google", (req, res) =>
  auth.oauth?.google?.redirect(req, res)
);

Identity resolution

Authenik8 unifies password, Google, and GitHub identities under a single user record. If a user signs in with Google using the same email as an existing password account, the providers are linked automatically rather than creating a duplicate account.