The auth console: authup's SSR auth workflow UI. It renders the hosted pages on the IdP origin: /authorize (login + consent), /register, /activate, /password-forgot, /password-reset, /device (device verification, RFC 8628) and /logout.

This package is not a standalone application. @authup/server-auth-console depends on it, renders each request through the built server bundle (dist/server/server.js) with a per-request hydration payload, and serves the client assets (dist/client/). The auth pages are architecturally inseparable from the IdP origin (WebAuthn origin binding, first-party session cookies, same-path GET-HTML/POST-JSON routes), so there is nothing meaningful to host without the IdP's own API.

The supported boundary between the auth console service and this package is the render contract in src/contract.ts (render(RenderContext) => RenderResult). Operators who want a custom login/consent UI can substitute this package with one that fulfills the same contract instead of forking @authup/server-auth-console.

Development

This package has no dev script of its own: it is SSR and architecturally inseparable from the IdP origin, so it cannot be hosted standalone. Run npm run dev from the repository root instead. That EXPERIMENTAL command (authup dev) detects that this package is a source checkout and serves it through a vite dev server with hot module replacement, mounted in front of @authup/server-auth-console's own handler on server-core's listener, so an edit here shows up on the next request with no build step. See .agents/architecture.md → Development mode for how it works.

Documentation

To find out how to use Authup, visit the documentation.

License

Distributed under the AGPL-3.0-only license (with a commercial license available). See the LICENSE file and the repository's LICENSING.md for details.