AuthKit-Pro overview

What AuthKit-Pro is

AuthKit-Pro is a paid source-code authentication boilerplate built as a production-focused foundation for Spring Boot applications. It owns local accounts, refresh sessions, account lifecycle, and application policy while Spring Security owns authentication protocols and security infrastructure.

Release baseline

Major capabilities

• Password registration and login with BCrypt
• Short-lived JWT access tokens and independent rotating refresh sessions
• Email verification, password recovery and change, verified email change, and account state controls
• Session listing and individual, other-session, or full revocation
• Explicit Google, GitHub, and configurable OIDC account linking
• Optional native Spring Security WebAuthn passkeys
• Optional Spring One-Time Token magic-link authentication
• Secret-free account activity history and selected security notifications

Local default behavior

The purchased project starts without a .env file, MySQL, SMTP, OAuth credentials, Docker, or Redis. H2 and Flyway initialize the schema, the JWT secret is generated for the local process, and the browser API tester is available at http://localhost:8080/api-test.

• Demo accounts are disabled by default; register a user for a normal first run.
• Passkeys and magic links are disabled until configured.
• OAuth2/OIDC providers are unavailable until Spring client registrations are supplied.
• Mail delivery is optional locally and required by the documented production policy.

Start with the quickstart

Purchase and download the ZIP from Gumroad, extract it, enter the AuthKit-Pro directory, and run the included Maven wrapper.

Documentation