AuthKit: Streamlined Authentication with WorkOS and Radix
This repository profile is provided by osrepos.com, an open source repository discovery platform.
Summary
AuthKit is an open-source login box solution developed by WorkOS, designed to simplify authentication for applications. It offers both a fully themeable hosted UI and headless APIs for custom frontends, powered by WorkOS User Management and Radix UI. This TypeScript project supports various authentication flows, including OAuth2, passwordless, and SSO.
Repository Information
Topics
Click on any tag to explore related repositories
Use at your own risk
OSRepos shares public repositories for knowledge and discovery only. Any installation, execution, configuration, or use of code from these repositories is the user's own responsibility. Always review the repository, source code, dependencies, licenses, and security implications before running or installing anything. OSRepos is not responsible for issues, damages, or losses resulting from third-party repositories.
Introduction
AuthKit, developed by WorkOS, provides a robust and flexible solution for implementing authentication in your applications. Described as "the world's best login box," it leverages WorkOS User Management and Radix UI to offer a seamless and secure user experience. Whether you prefer a quick-to-deploy hosted UI or a custom frontend integration, AuthKit simplifies complex authentication flows.
Installation
To get started with AuthKit, you'll need a WorkOS account. Once you have an account, follow these steps to run the examples:
- Install Dependencies: Run
npm installoryarn installin the repository. - Set up Environment Variables:
- Sign into your WorkOS dashboard.
- Navigate to API Keys and copy your Client ID and Secret Key (API Key).
- Rename
.env.local.exampleto.env.localand populate it with your keys:WORKOS_CLIENT_ID="<your Client ID>" WORKOS_API_KEY="<your Secret Key>"
- Configure Redirects: In your WorkOS dashboard, navigate to Redirects and add the following URLs:
http://localhost:3000/using-your-own-ui/sign-in/google-oauth/callbackhttp://localhost:3000/using-your-own-ui/sign-in/microsoft-oauth/callbackhttp://localhost:3000/using-your-own-ui/sign-in/github-oauth/callbackhttp://localhost:3000/using-your-own-ui/sign-in/sso/callbackhttp://localhost:3000/using-hosted-authkit/basic/callbackhttp://localhost:3000/using-hosted-authkit/with-session/callbackhttp://localhost:3000/using-hosted-authkit/with-nextjs/callback
- Run the Example: Execute
npm run devoryarn devand openhttp://localhost:3000in your browser.
Examples
AuthKit offers two primary methods for integration, both with examples provided in the repository:
- Using AuthKit's hosted UI: This is the quickest way to add authentication. It provides a fully themeable hosted UI that manages all authentication flows. For production, you can use a custom domain.
- Using your own custom UI: For full control over the user interface, you can build your own frontend by integrating directly with the headless WorkOS User Management APIs. Your authentication UI will be self-hosted.
Why use AuthKit
AuthKit simplifies the complex task of user authentication, offering a comprehensive suite of features out-of-the-box. Its flexibility allows developers to choose between a ready-to-use hosted solution or a customizable headless API approach. With support for various authentication methods like OAuth2, passwordless, and SSO, and built on reliable technologies like WorkOS and Radix UI, AuthKit provides a secure, scalable, and developer-friendly way to manage user logins.
Links
Related repositories
Similar repositories that may be relevant next.

Logto: Open-Source Auth Infrastructure for SaaS and AI Apps
March 21, 2026
Logto is a modern, open-source authentication and authorization infrastructure designed for SaaS and AI applications. Built on OIDC and OAuth 2.1, it offers robust features like multi-tenancy, enterprise SSO, and RBAC. This platform simplifies secure identity management, providing pre-built sign-in flows and SDKs for various frameworks.

Defguard: Zero-Trust Access Management with WireGuard 2FA/MFA
March 18, 2026
Defguard is an open-source, enterprise-grade VPN solution built with Rust, offering zero-trust access management. It uniquely provides multi-factor authentication for WireGuard VPN connections, integrating with various SSO providers or its built-in SSO. This platform aims to simplify the secure management of complex VPN networks with advanced features like ACLs, YubiKey provisioning, and real-time client synchronization.

Authelia: Single Sign-On and Multi-Factor Authentication for Web Apps
February 9, 2026
Authelia is a robust, open-source authentication and authorization server designed to enhance the security of your web applications. It provides comprehensive two-factor authentication (2FA) and single sign-on (SSO) capabilities through an intuitive web portal. Seamlessly integrating with various reverse proxies, Authelia acts as a crucial companion for managing access control and securing your digital infrastructure.

SaaS-Boilerplate: Next.js, Tailwind CSS, Shadcn UI for Modern SaaS Apps
December 26, 2025
The SaaS-Boilerplate is a powerful, open-source template designed to accelerate the development of SaaS applications. Built with Next.js, Tailwind CSS, Shadcn UI, and TypeScript, it offers a comprehensive suite of features including robust authentication, multi-tenancy, and role-based access control. This boilerplate provides a production-ready foundation, enabling developers to quickly launch scalable and feature-rich SaaS products.
Source repository
Open the original repository on GitHub.