Tinyauth is an OpenID Certified authentication and authorization server designed to be minimal in size and complexity.
The tool addresses the need for a lightweight, self-hosted authentication solution that can work both as middleware for existing applications and as a standalone server. It supports multiple authentication methods including OAuth and LDAP, with built-in access control capabilities. The server integrates with popular reverse proxies such as Traefik, Nginx, and Caddy, allowing it to sit in front of applications and handle authentication transparently.
Tinyauth suits developers and operators running self-hosted environments who want authentication without the overhead of larger identity platforms. It works well for small to medium deployments where simplicity and resource efficiency matter. The project explicitly positions itself as the smallest option in its category, making it appropriate for constrained environments like homelabs or edge deployments. The tool supports two-factor authentication via TOTP, adding security without complexity.
Development activity shows active ongoing work with regular updates to the codebase. The project maintains a public issue tracker and actively accepts community contributions. The maintainers have pursued formal OpenID certification, indicating commitment to standards compliance. Documentation is treated as a separate concern with its own repository, suggesting structured attention to user guidance. The project includes a demo environment for prospective users to evaluate fit before adoption, and maintains a Discord community channel for user discussion and support.
