masks

Self-hosted auth for the open web.

An OpenID Connect provider with a signing key for every tenant,
and the libraries your apps use to sign people in with it.

Quickstart · Documentation · Demo · Self-hosting

docker run --name masks -p 3000:3000 -v masks:/rails/storage ghcr.io/masksrb/masks

Open http://localhost:3000 and enter the setup token from the output.

• Host it yourself behind HTTPS, with its own Postgres or yours.
• Mount it inside a Rails app with the masks-server gem.
• Build your own masks server as a Rails app, the way the image is built.
• Put it in front of an app that has no sign-in, with Caddy, Traefik, or nginx.
• Work on masks from this repository.

Report a hole through private vulnerability reporting. SECURITY.md says what counts and how fast masks answers.

You need Ruby and Colima.

• ./dev runs the provider at http://masks.localhost:12345 and the docs at http://masks.localhost:12346.
• ./dev test runs every suite in containers.

Try it locally lists the rest.

MIT