14 packages · Roadmap

One API. Every stack.

Idiomatic SDKs for the frameworks your team already ships with. Same auth primitives, native ergonomics. Web-first, mobile and remaining backends follow.

// Node.js — SDK wraps the fetch + refresh loop
import { Authyon } from "@authyon/node";

const auth = new Authyon({ envKey: process.env.AUTHYON_ENV });

app.post("/sign-in", async (req, res) => {
  const session = await auth.login(req.body);
  res.json(session);
});
// React — hooks + provider, tokens stored transparently
import { AuthyonProvider, useUser } from "@authyon/react";

<AuthyonProvider envKey="pk_live_...">
  <App />
</AuthyonProvider>

function Profile() {
  const { user } = useUser();
  return <p>Hi {user.email}</p>;
}
// Program.cs — one call wires JWT + JWKS + fresh-state validation
builder.Services.AddAuthyon(o =>
    o.EnvironmentKey = builder.Configuration["Authyon:EnvKey"]);

var app = builder.Build();
app.UseAuthyon();

app.MapGet("/orders", (AuthyonUser user, OrdersRepo repo) =>
    repo.ForTenant(user.Tenant.Id))
   .RequireAuthyon("orders:read");
# Python — FastAPI dependency, typed pydantic models
from authyon import Authyon

auth = Authyon(env_key="pk_live_...")

@app.get("/orders")
async def list_orders(user = Depends(auth.required)):
    return await Orders.for_tenant(user.tenant.id)
# Any language — hit the public API directly
curl -X POST https://api.authyon.com/auth/login \
  -H "X-Authyon-Env: pk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"email":"alice@@acme.com","password":"..."}'

# → { accessToken, refreshToken, expiresIn: 1800, user: {...} }
Shipping order

Delivered in 3 waves.

Web-first, mobile follows, then the long tail. Wave 1 ships together.

01 Coming soon
Wave 1 · Web core

React, Vue, Node.js, .NET, JS/TS. Everything most stacks reach for first.

React Vue 3 Node.js .NET JS / TS
02 Next
Wave 2 · SSR & scripting

Framework-native SSR support, plus the top scripting backends.

Next.js Svelte Python Go
03 Later
Wave 3 · Mobile & long tail

Native mobile SDKs and the remaining server-side runtimes.

iOS Android PHP Ruby Java
Frontend

Client-side auth for every framework

Framework-native primitives — hooks, composables, stores, native bindings. Token storage and refresh handled transparently.

React TypeScript
Wave 1

Hooks for login, current user, and tenant switching. Ships an <AuthyonProvider/> plus typed useUser().

$ npm install @@authyon/react
Vue 3 TypeScript
Wave 1

Composables that mirror the React hooks. Reactive user state, Pinia integration, transparent token refresh.

$ npm install @@authyon/vue
Svelte TypeScript
Wave 2

Writable stores for session + user. Works with SvelteKit load functions and hooks.

$ npm install @@authyon/svelte
Next.js TypeScript
Wave 2

App Router support: middleware for route protection, server actions for login, edge-friendly session helpers.

$ npm install @@authyon/next
JS
JS / TS Vanilla
Wave 1

Framework-free client. Use it in Astro, plain HTML, browser extensions, or as the base of your own wrapper.

$ npm install @@authyon/browser
iOS Swift
Wave 3

SwiftUI + UIKit compatible. Keychain-backed token storage, biometric unlock, refresh on background wake.

$ swift package add authyon-swift
Android Kotlin
Wave 3

Kotlin coroutines, EncryptedSharedPreferences storage, Compose-friendly state holder.

$ implementation "com.authyon:sdk:1.0"
Backend

Server-side verification & management

JWT verification via JWKS, automatic /env/oauth/token renewal, typed clients for every management endpoint.

JS
Node.js TypeScript
Wave 1

Express + Fastify middleware, fresh-state check via /auth/validate. Environment-client credentials handled automatically.

$ npm install @@authyon/node
.NET
.NET C#
Wave 1

One AddAuthyon() call in Program.cs wires JWT bearer, JWKS caching, fresh-state validation and options binding.

$ dotnet add package Authyon
Python 3.11+
Wave 2

FastAPI dependency + Flask decorator. Async token refresh, typed pydantic models for every response.

$ pip install authyon
Go
Go 1.22+
Wave 2

net/http and chi middleware. Zero-alloc JWT verification, context-based user injection.

$ go get github.com/authyon/go
PHP
PHP 8.2+
Wave 3

Framework-agnostic middleware for Laravel, Symfony, Slim, and vanilla PSR-15.

$ composer require authyon/php
Ruby 3.2+
Wave 3

Rack middleware, Rails helper, Sinatra plugin. Idiomatic Ruby DSL for the management API.

$ gem install authyon
Java 17+
Wave 3

Spring Boot starter + servlet filter for plain Jakarta EE. Auto-configures the JWKS cache and refresh scheduler.

$ implementation "com.authyon:java:1.0"

Building today?

Every SDK is a thin wrapper over the public API. Read the endpoint reference — you can integrate against Authyon right now with whatever HTTP client you already use.