Keylion
Lightweight identity and authorization for modern applications
Production ReadyFeatures
JWT Authentication
Secure token-based authentication with automatic refresh token rotation and family-based reuse detection for seamless session management.
Hierarchical RBAC
Fine-grained role-based access control with role inheritance. Define roles that automatically inherit permissions from parent roles.
Google OAuth SSO
Single sign-on with Google OAuth integration out of the box. Users authenticate with their existing Google accounts.
RESTful API
Clean RESTful API for all identity and authorization operations. User management, role management, and health checks included.
Built With
Keylion uses a modular crate structure — config, core, db, and api — making it easy to understand, extend, and contribute to.
Keylion is fully open source. Explore the code, deploy it, or contribute.
View on GitHub