Authenik8-core [Beta]

Authenik8-core is a stateful JWT authentication SDK with refresh-token replay protection, Redis-backed revocation, authorization, audit events, risk quarantine, and scoped agent identities.

Start with Getting Started, then review the requirements and threat model before deploying.

Documentation

Start Here

• What Authenik8-core does
• Getting started
• Requirements
• Why Authenik8-core?
• Use cases
• Final thought

Authentication and Sessions

• Replay-attack prevention example
• Secure refresh flow
• Key rotation
• Session risk and quarantine
• Agent and service identity

Authorization and API

• Authorization, tenants, and audit events
• API overview
• Security layer

Design and Internals

• Architecture
• How it works internally
• Refresh-token rotation
• Replay-attack detection
• Stateful session control
• Why stateful authentication matters

Assurance and Project Information

• Testing
• Security audit
• Threats addressed
• Full threat model
• Repository setup
• Changelog