Available · Pro$39 one-time

Authentication foundation

AuthKit-ProSpring Boot authentication boilerplate

Production-focused Spring Boot authentication foundation with JWT, rotating refresh sessions, account lifecycle workflows, OAuth2/OIDC, passkeys, and documented security boundaries.

Spring Boot 4JWTOAuth2/OIDCWebAuthnSessionsAuthentication
Get AuthKit-Pro — $39View documentation

AuthKit-Pro · quick run

Quick start

Run AuthKit-Pro

Terminal
# After purchasing, downloading, and extracting the Gumroad ZIP
cd AuthKit-Pro
# Demo users are disabled by default; register on first run
./mvnw spring-boot:run
Java 25 · Maven wrapper included · H2 local defaultThen open http://localhost:8080/api-test

Release details

Version
v1.0.0
Java
25
Spring Boot
4.1.1
License
AuthKit-Pro Commercial License

Capability summary

Features

The focused capabilities included in the current product generation.

JWT + rotating sessions

Short-lived JWT access tokens pair with rotating hashed refresh credentials, independent sessions, and refresh-family replay handling.

Account lifecycle

Email verification, password recovery and change, verified email changes, and account-state controls are included.

Session management

List active sessions and revoke one session, other sessions, or every session for the account.

OAuth2 / OIDC

Google, GitHub, and configurable OIDC providers use explicit linking to an existing local account.

WebAuthn passkeys

Optional passkeys use Spring Security's native WebAuthn infrastructure and browser ceremony state.

Magic-link authentication

Optional Spring One-Time Token login requires a verified email address and configured mail delivery.

Security activity

Secret-free account activity records support security-event history and selected email notifications.

Local-to-production workflow

H2 startup, Flyway migrations, MySQL support, a browser API tester, Postman resources, and documented deployment boundaries are included.

Fit

Who this is for

  • SaaS and backend APIs that need a broader authentication foundation
  • Applications that require account lifecycle and session management
  • Products supporting OAuth2/OIDC or passkey sign-in
  • Teams that want authentication infrastructure they can own and adapt

Build or adopt

Why AuthKit-Pro?

AuthKit-Pro extends the AuthKit foundation with broader account, session, and provider workflows while keeping application-specific authorization and deployment policy visible.

Without AuthKit-Pro

  • Design independent refresh sessions and replay handling
  • Build verification, recovery, and email-change workflows
  • Connect external identities without unsafe email auto-linking
  • Integrate passkey and magic-link authentication boundaries

With AuthKit-Pro

  • JWT access tokens and rotating session credentials are connected
  • Account lifecycle and session controls share one policy boundary
  • OAuth2/OIDC linking requires explicit local-account authorization
  • Native Spring WebAuthn and One-Time Token integrations remain optional

Implementation resources

Technical documentation

Task-oriented setup, configuration, architecture, and API references for this product.

DocumentationQuickstart

Download, run, and verify AuthKit-Pro v1.0.0 with its dependency-free local defaults.

Open resourceDocumentationConfiguration

Configure AuthKit-Pro database, JWT, development utilities, passkeys, mail, magic links, OAuth2/OIDC, and maintenance.

Open resourceDocumentationAPI Reference

Reference verified AuthKit-Pro authentication, account, session, provider, magic-link, and passkey endpoints.

Open resourceDocumentationArchitecture

Evaluate AuthKit-Pro ownership boundaries, security filter chains, token flows, identity policy, persistence, and deferred scope.

Open resource

Commercial terms

License, support, and updates

Review the maintained policies and release record before purchasing or updating the product.

  • One-time purchase
  • One purchase licenses one developer
  • Use and modify the source in unlimited permitted end products
  • Commercial, client, and internal use are allowed
  • Future AuthKit-Pro updates released through the same Gumroad product are included
  • Redistribution, resale, public source publishing, and sharing with unlicensed developers are not permitted
AuthKit-Pro license terms Support and updates Refund policy

Related guidance

Architecture and implementation guidance related to this foundation.

GuideSpring Boot JWT Authentication with Spring Security

Implement JWT authentication and role-based authorization with Spring Security, password hashing, protected REST APIs, and explicit security boundaries.

8 min readGuideSpring Boot JWT Authentication Architecture

Structure Spring Boot JWT authentication across security configuration, token validation, user lookup, authorization, persistence, and application services.

9 min readGuideJWT Authentication Mistakes in Spring Boot

Review common Spring Boot JWT mistakes involving token lifetime, refresh tokens, secrets, authorization, filter boundaries, and security configuration.

4 min read

Get AuthKit-Pro

Start from a production-focused authentication foundation instead of rebuilding account and session infrastructure.

Get AuthKit-Pro — $39View documentation