Example applications and integrations for Authorizer — the open-source, self-hosted authentication and authorization server.
Authorizer v2 server is configured entirely via CLI flags (no
.env/ OS env vars), e.g../authorizer \ --database-type sqlite --database-url authorizer.db \ --url http://localhost:8080 \ --jwt-type HS256 --jwt-secret <jwt-secret> \ --encryption-key "$(openssl rand -hex 32)" \ --client-id <client-id> --client-secret <client-secret> \ --admin-secret <admin-secret>All of the above are required as of 2.4.0 — the server exits at boot if any is missing.
--urlis this server's own address (not the apps allowed to call it, which is--allowed-origins).
| Example | Description |
|---|---|
| with-express-js | Express.js middleware validating Authorizer JWTs with @authorizerdev/authorizer-js |
| with-gatsbyjs | Gatsby site with login and private routes using @authorizerdev/authorizer-react |
| with-nextjs | Next.js (pages router) app with login, session cookie, and SSR profile page |
| with-nextjs-13 | Next.js 13 (app router) app with login, session cookie, and server-component profile page |
| with-react | Create React App + React Router demo using @authorizerdev/authorizer-react |
| with-react-native-expo | React Native (Expo) OAuth2 PKCE flow with token refresh via @authorizerdev/authorizer-js |
| with-svelte-kit | SvelteKit app using @authorizerdev/authorizer-svelte components |
| with-svelte-routing | Svelte + svelte-routing app using @authorizerdev/authorizer-svelte |
| with-vanilla-js | Plain HTML/JS page using the authorizer-js UMD CDN build |
| with-vanilla-js-custom-ui | Custom login UI (no components) built directly on authorizer-js |
| with-vue | Vue 3 app integrating Authorizer |
| with-go | Go backend integration with Authorizer |
| with-python | Python backend integration with Authorizer |
| with-m2m-client-credentials | Machine-to-machine auth using the OAuth2 client credentials grant |
| with-token-exchange-delegation | RFC 8693 token exchange and delegation (act claim) |
| with-fga-permissions | Fine-grained authorization (ReBAC) checks with the embedded OpenFGA engine |
| with-fga-advanced | Advanced FGA modeling: hierarchies, role grants, and exclusions |
| with-microservices | Authorizer as the auth layer across multiple microservices |
| with-openid-connect | Standard OpenID Connect integration against Authorizer's OIDC endpoints |
| with-agent-delegation | Delegating scoped access to AI agents with audited delegation chains |
| with-agent-permissions | Per-agent FGA permissions intersected with the delegating user's |
| with-claude-agents | Two real Claude Agent SDK agents (DevOps assistant + infra agent) delegating and authorizing over HTTP, with a fail-closed OpenFGA permission gate |
| with-mcp | Authorizer as the OAuth 2.1 authorization server protecting an MCP server (RFC 9728 + RFC 8707) |
| with-a2a-agent-card | A2A (Agent2Agent) v1.0 Agent Card backed by Authorizer as the OAuth2 authorization server |
| with-k8s-tokenreview | Kubernetes TokenReview-based workload authentication |
| with-spiffe | SPIFFE/SPIRE workload identity integration |
| with-org-sso-oidc | Organization SSO via an upstream OIDC identity provider |
| with-org-saml | Organization SSO via SAML |
| with-scim | SCIM user/group provisioning against Authorizer |