Auth as a Service
Authentication, solved.
Passwordless OTP and magic-link login, social sign-in, JWT sessions, multi-organisation RBAC and audit logs — production-grade and drop-in.
Features
Everything you'd otherwise build yourself.
Passwordless first
Email OTP and magic-link login — no password resets, no leaks.
Social sign-in
Google and Apple, ready to wire up. SAML/SSO for enterprise.
Organisations + RBAC
Multi-tenant from day one, with roles and invite flows.
JWT + sessions
Stateless JWT plus refresh-token rotation. Secure by default.
Audit logs
Tamper-evident logs for every auth event — compliance-ready.
Rate limiting
Built-in protection against brute force and credential stuffing.
Code
Wire it up in minutes.
Passwordless OTP flowtypescript
// Send a passwordless OTP
await fetch("https://auth.nxtgenaidev.com/v1/otp/request", {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ email: "user@example.com" }),
});
// Exchange OTP for a session JWT
const { token } = await fetch("https://auth.nxtgenaidev.com/v1/otp/verify", {
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({ email: "user@example.com", code: "482301" }),
}).then(r => r.json());