A self-hosted identity and settings-sync backend that lets an entire family of apps share one secure account. Users register once, then every app onboards with a single tap, and their settings and state stay in step across every device in real time.
Security is built into every request: calls are signed and verified with replay protection, and each user data is encrypted at rest with per-user derived keys, kept strictly isolated from every other user and service.
Highlights
- One shared account across many apps: register once, onboard everywhere.
- Signed requests (HMAC-SHA256) with nonce and timestamp replay protection on every call.
- Encrypted at rest with per-user HKDF-derived AES-256-GCM keys and strict per-user isolation.
- Sub-second cross-device sync over a live WebSocket event hub.
- Centralised MFA (TOTP, backup codes, push, passkeys) covering the whole fleet.
- Onboard a new app with zero server changes, plus operator tools, metrics and encrypted nightly backups.
Built with Go, HMAC-SHA256, AES-256-GCM, TLS 1.3, WebSocket.
Frequently asked
What is OAuth Authentication and Sync Service?
A self-hosted identity and settings-sync backend that lets an entire family of apps share one secure account. Users register once, then every app onboards with a single tap, and their settings and state stay in step across every device in real time.Security is built into every request: calls are signed and verified with replay protection, and each user data is encrypted at rest with per-user derived keys, kept strictly isolated from every other user and service.HighlightsOne shared account across many apps: register once, onboard everywhere.Signed requests (HMAC-SHA256) with nonce and timestamp replay protection on every call.Encrypted at rest with per-user HKDF-derived AES-256-GCM keys and strict per-user isolation.Sub-second cross-device sync over a live WebSocket event hub.Centralised MFA (TOTP, backup codes, push, passkeys) covering the whole fleet.Onboard a new app with zero server changes, plus operator tools, metrics and encrypted nightly backups.
What was OAuth Authentication and Sync Service built with?
It was built with Go, HMAC-SHA256, AES-256-GCM, TLS 1.3, WebSocket.
Who built OAuth Authentication and Sync Service?
OAuth Authentication and Sync Service was designed and built by Sokol Alickaj, the engineer behind AEU-I.
Can AEU-I build something similar for me?
Yes. AEU-I designs and builds custom software, web and mobile apps and hosting. Get in touch to discuss a similar project.