{"data":{"slug":"tinyauth","name":"Tinyauth","tagline":"AGPL-3.0 one-binary proxy auth + Certified OIDC","category":"nextjs","categoryName":"Next.js","url":"https://tinyauth.app","github":"https://github.com/steveiliop56/tinyauth","pricing":"open-source","hook":"Tinyauth is the single statically linked binary you put in front of Traefik when Authelia is the heavier portal.","whatsGood":"AGPL-3.0. Self-host forever; single statically linked binary, env-var config. OIDC Certified (Basic OP). Works with Traefik/Nginx/Caddy plus LDAP/OAuth.","theCatch":"Vs Authelia/Pocket ID: tiny proxy-fronted auth + Certified OIDC in one binary — not Authelia reverse-proxy SSO alone, not passkeys-only Pocket ID. Free path is self-host.","verdict":"AGPL one-binary proxy auth + Certified OIDC. Self-host forever.","addedAt":"2026-09-04","featured":false,"domain":"Auth","subSpecialty":"Auth","capabilities":["auth","oidc","sso"],"surfaces":["Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"AGPL","githubStars":8200},"related":[{"slug":"vercel","name":"Vercel","tagline":"The platform that made Next.js deployment trivial"},{"slug":"prisma","name":"Prisma","tagline":"Type-safe database access with killer DX"},{"slug":"drizzle","name":"Drizzle ORM","tagline":"TypeScript ORM that feels like SQL"},{"slug":"trpc","name":"tRPC","tagline":"End-to-end typesafe APIs without codegen"},{"slug":"clerk","name":"Clerk","tagline":"Auth that actually ships with your UI"}],"links":{"self":"/api/gems/tinyauth","html":"/gems/tinyauth","markdown":"/gems/tinyauth.md","category":"/api/gems?category=nextjs","categoryPage":"/stacks/nextjs"}}