What is Auth Service?
A multi-tenant OTP authentication service built on Cloudflare Workers with email-based passwordless authentication via Resend API. Features include developer dashboard built with Svelte 5, multi-tenant API key management, OpenAPI 3.1.0 specification with Swagger UI, and audit logging. Single sign-on across all *.idling.app domains with HttpOnly cookies.
Key Features
Passwordless OTP
Email-based one-time password authentication with no password storage. Secure, user-friendly, and reduces attack surface.
JWT Token Management
Industry-standard JWT tokens with HttpOnly cookies for maximum security. Automatic refresh and expiration handling.
API Key Management
Multi-tenant API key system with granular permissions. Create, rotate, and revoke API keys from the developer dashboard.
Analytics Dashboard
Built with Svelte 5, track authentication events, monitor usage, and analyze patterns with real-time analytics.
OpenAPI 3.1.0 Spec
Complete OpenAPI specification with Swagger UI integration. Interactive API documentation for easy integration.
Single Sign-On
SSO across all *.idling.app domains with HttpOnly cookies. Login once on any service, authenticated everywhere.
Developer-First Design
Auth Service provides everything developers need to integrate secure authentication into their applications:
Embeddable UI Components
Drop-in authentication components for React, Svelte, and vanilla JavaScript. No UI work required.
Comprehensive Docs
300+ pages of documentation in PANDA_CORE covering integration guides, API reference, and security best practices.
Full Test Coverage
E2E integration tests with Playwright, unit tests with Vitest, and CI/CD workflows for confidence.