Easy Auth

A narrow, internal authorization server for machine-to-machine tokens.

Next.js, Auth.js, MariaDB, and signed JWT access tokens. This scaffold is intentionally small: client credentials only, no refresh tokens, and no delegated user consent.

Auth.js session

Microsoft Entra sign-in powers the admin dashboard and client management flow.

OAuth token endpoint

Issue RS256 JWT access tokens for registered clients and scope assignments.

Operational controls

Client creation, secret rotation, revocation, rate limiting, and audit hooks.

Open dashboard View token route