authorizer

Authorizer is a self-hosted auth server that replaces Auth0, Firebase Auth, or Supabase Auth. Bring your own database (Postgres, MySQL, SQLite, MongoDB, and 7 more), deploy it, and own every byte of user data. Email/password, social logins (Google, GitHub, Apple, Facebook, LinkedIn), magic links, MFA, and full OAuth2/OIDC compliance.

One-click deploy buttons for Railway, Heroku, and Render lower the barrier. For production you need to manage TLS, database backups, Redis for sessions, and an SMTP server for email verification. The Go binary runs in Docker with non-root containers. SDKs cover JavaScript, React, Vue, Svelte, and Go.

Privacy-conscious teams or anyone in a regulated industry who cannot send user data to a third party: this is built for you. Solo developers who already run Postgres can colocate auth with their data and skip the monthly Auth0 bill entirely.

The catch: you are your own auth provider now. Auth is high-stakes surface area, and any misconfiguration is on you. The project has a small maintainer team, so security patches may lag behind commercial providers. The v1-to-v2 migration is a breaking change. Some SDKs (React Native, Flutter, Python) are still on the roadmap.