The open-source identity provider built specifically for SaaS.

import { createAuthVital } from '@authvital/sdk/server';

const authvital = createAuthVital({
  authVitalHost: process.env.AUTHVITAL_HOST,
  clientId: process.env.AUTHVITAL_CLIENT_ID,
  clientSecret: process.env.AUTHVITAL_CLIENT_SECRET,
});

// In getServerSideProps or API route
export async function getServerSideProps({ req }) {
  const { authenticated, user } = await authvital.getCurrentUser(req);

  if (!authenticated) {
    return { redirect: { destination: '/login' } };
  }

  return { props: { user } };
}

import { createAuthVital } from '@authvital/sdk/server';

const authvital = createAuthVital({
  authVitalHost: process.env.AUTHVITAL_HOST,
  clientId: process.env.AUTHVITAL_CLIENT_ID,
  clientSecret: process.env.AUTHVITAL_CLIENT_SECRET,
});

// Auth middleware
app.use('/api', async (req, res, next) => {
  const { authenticated, user } = await authvital.getCurrentUser(req);

  if (!authenticated) {
    return res.status(401).json({ error: 'Unauthorized' });
  }

  req.user = user;
  next();
});

// Check permissions
app.delete('/api/users/:id', async (req, res) => {
  if (!await authvital.hasTenantPermission(req, 'users:delete')) {
    return res.status(403).json({ error: 'Forbidden' });
  }
  // Delete user...
});

import { WebhookRouter, AuthVitalEventHandler } from '@authvital/sdk/server';

class MyEventHandler extends AuthVitalEventHandler {
  async onSubjectCreated(event) {
    await sendWelcomeEmail(event.data.email);
  }

  async onMemberJoined(event) {
    await notifyTeam(event.data.tenant_id,
      `${event.data.email} joined!`
    );
  }

  async onLicenseAssigned(event) {
    await provisionResources(event.data.sub);
  }
}

const router = new WebhookRouter({
  authVitalHost: process.env.AUTHVITAL_HOST,
  handler: new MyEventHandler(),
});

app.post('/webhooks/authvital', router.expressHandler());