All work
04 — Authentication
Noirly Identity
One Noirly account for every product — the OAuth 2.0 + OpenID Connect provider behind the suite's sign-in.
The problem
A suite of products needs one secure account system, instead of every app building and maintaining its own sign-in.
What I built
Identity is the central authentication service and OpenID Connect provider for every Noirly product. Apps sign users in through the standard OAuth 2.0 Authorization Code flow with PKCE, and a single Noirly account works everywhere — including Google sign-in, configured once on Identity.
Highlights
- OAuth 2.0 Authorization Code + PKCE and OpenID Connect
- RS256-signed ID tokens with a published JWKS
- Argon2id password hashing
- Continue with Google, configured once for the whole suite
- OAuth client registration for each Noirly product
- Security-critical paths covered by automated tests
Have a project like this in mind?
Open to full stack developer opportunities and interesting technical collaborations.