Goiabada

What does Goiabada do?

If you’re building applications and need to handle user logins, manage permissions, or enable users to sign in across multiple apps with one account, Goiabada takes care of this for you. Instead of building authentication from scratch, you can integrate Goiabada and focus on what makes your application unique.

Goiabada handles:

• User authentication - Secure login with passwords and two-factor authentication
• Authorization - Control who can access what in your applications
• Single sign-on (SSO) - Let users log in once and access multiple apps
• API security - Protect server-to-server communications
• User self-service - Give users control over their own profiles and security settings

Who is Goiabada for?

• Developers building web or mobile apps who need authentication
• Teams wanting to centralize user management across multiple applications
• Organizations that need to self-host their identity provider for security or compliance
• Anyone who wants an alternative to proprietary services like Auth0, Keycloak or cloud-only solutions

Key features

OAuth2 & OpenID Connect

Industry-standard protocols. Compatibility with your existing tools.

Single sign-on (SSO)

One login for all your connected applications. Users authenticate once and access multiple apps seamlessly.

Two-factor & step-up auth

Extra security with one-time passwords (OTP). Step-up authentication for sensitive operations.

Fine-grained permissions

Define exactly who can access what in your applications.

Self-service account management

Users can update their own profiles, change passwords, and manage their security settings.

Dynamic client registration

Apps can self-register via RFC 7591. Useful for MCP servers and native applications.

Multiple database support

Choose your database: MySQL, PostgreSQL, Microsoft SQL Server, or SQLite.

Built with Go

Fast, lightweight, and resource-efficient. Low resource usage means lower hosting costs.

Why choose Goiabada?

• Self-hosted & private - Keep full control of your user data and infrastructure. Your data never leaves your servers.
• Free & MIT licensed - 100% free to use with no licensing fees, subscriptions, or vendor lock-in. Truly open source.
• Lightweight - Low resource usage means lower hosting costs
• Standards-compliant - Built on OAuth2 and OpenID Connect for maximum compatibility
• Developer-friendly - Quick to set up, easy to integrate

Screenshots