What It Does
The CLI scaffolds the application. authenik8-core supplies the token, identity, OAuth, and security engine used by the generated code.
Generated capabilities
| Capability | Description |
|---|---|
| Express + TypeScript | Generates a structured Express API with TypeScript and development scripts. |
| Full-stack App Kit | Generates a connected React/Vite frontend, Express API, shared contracts, typed client, account/admin UI, and owned Project module. |
| Stateful JWT | Issues access and refresh tokens through authenik8-core. |
| Replay Protection | Rotates refresh tokens and rejects reused or concurrently refreshed tokens. |
| Redis Sessions | Stores refresh-token state, locks, OAuth state, and rate-limit data in Redis. |
| Identity Resolution | Unifies password, Google, and GitHub identities while preventing duplicate accounts. |
| Production Guidance | Generates a threat model, security middleware, PM2 options, and deployment notes. |
Feature list
The following capabilities are available in generated projects and through authenik8-core directly:
- JWT access tokens
- Refresh token rotation
- Redis-backed token storage
- Role-based access control
- Rate limiting
- IP whitelist support
- Helmet security headers
- Guest / anonymous tokens
- Google + GitHub OAuth
- CLI scaffolding (Express + TS)
- Connected React + Express npm workspace
- Shared Zod contracts and typed browser API client
- Account, session, administration, and Project interfaces
- Optional Prisma integration
- Password authentication