# Tinyauth

> AGPL-3.0 one-binary proxy auth + Certified OIDC

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://tinyauth.app  
**GitHub:** https://github.com/steveiliop56/tinyauth  
**Added:** 2026-09-04

---

## The Hook

Tinyauth is the single statically linked binary you put in front of Traefik when Authelia is the heavier portal.

## What's Good

AGPL-3.0. Self-host forever; single statically linked binary, env-var config. OIDC Certified (Basic OP). Works with Traefik/Nginx/Caddy plus LDAP/OAuth.

## The Catch

Vs Authelia/Pocket ID: tiny proxy-fronted auth + Certified OIDC in one binary — not Authelia reverse-proxy SSO alone, not passkeys-only Pocket ID. Free path is self-host.

## Verdict

AGPL one-binary proxy auth + Certified OIDC. Self-host forever.