leopoldsw/cloudflare-auth

Cloudflare Auth is an open-source toolkit that lets developers add user login and account management to their own apps running on Cloudflare Workers, Cloudflare's serverless platform for running code at the network edge. The key selling point is that you own everything: the code, the database, the user data, and the configuration all live in your own Cloudflare account. The toolkit supports several ways for users to sign in: email and password, username login, and magic links (a passwordless method where a one-time login link is emailed to the user). It also includes email verification, password reset, and secure session management using Cloudflare's built-in database service called D1. Getting started takes about five minutes using a command-line setup tool. You run a single setup command, install the package, run a local database migration, and start a development server. During development, any emails with login links are printed to your terminal instead of actually being sent, making local testing easy. When you are ready to go live, a deploy command handles migration checks and pushes everything to Cloudflare's infrastructure. A built-in health check command called "doctor" can identify configuration problems before deployment. The security design is notably careful: passwords are stored using modern hashing techniques, session tokens are hashed so raw credentials are never stored, and magic links can only be used once and only via a direct form submission rather than a simple link click. This first version supports two integration styles for building apps: the Hono web framework and plain Cloudflare Workers. Social logins (like Google or GitHub), multi-factor authentication, and organization management are explicitly out of scope for this release.