Genyleap/Docs
OpenProof

Identity infrastructure without hidden shortcuts.

OpenProof keeps proof, identity, sessions and authorization distinct while giving applications one consistent account surface.

PasskeysOAuth/OIDCSIWEFarcasterSAMLLDAPS

Quickstart

01

Choose the proof method

Password, passkey, social provider, wallet signature or enterprise federation starts a protocol-specific ceremony.

02

Verify the proof

OpenProof validates signatures, state, nonce, PKCE, issuer/audience and replay protections where the protocol requires them.

03

Resolve one canonical identity

A verified provider subject maps to an explicit linked identity. Email is not used as a silent account-merge key.

04

Issue controlled access

Sessions and OAuth/OIDC tokens carry the assurance and authorization context required by the relying application.

Self-hosting model

Run OpenProof inside your own trust boundary. Put it behind your HTTPS entry point, keep provider credentials in your secret manager, and choose the datastore and service layout that fit your environment.

exampledeployment shape
public origin   https://auth.example.com
application     your web or API service
identity core   OpenProof
state           your PostgreSQL-compatible datastore
secrets         your secret manager / environment
Use your own paths and hostnames

Examples in this documentation are intentionally generic. Do not copy a filesystem path, port, hostname or callback URI unless it matches your deployment.

API surface

MethodPathPurpose
GET/health/readyReadiness check
GET/auth/providersAdvertised authentication providers
POST/auth/passkey/optionsStart a WebAuthn ceremony
GET/.well-known/openid-configurationOIDC discovery
curlreadiness example
curl https://auth.example.com/health/ready

{"status":"ok"}
Explore the complete contract

The Developer Portal includes an isolated browser sandbox, identity workbench and API Explorer generated from OpenProof's OpenAPI 3.1 contract, currently covering 87 paths and 111 operations.

Open API Reference →

Next steps

↗◎

Deployment & Developer Handbook

The complete operator-to-developer workflow, with a downloadable PDF.

 ↗↓

Install OpenProof

Package installation, PostgreSQL, providers, email delivery, Nginx and TLS.

 ↗{ }

Build with OpenProof

OAuth/OIDC, application registration and Node.js, PHP, C++ and generic HTTP integration.

 ↗API

API Reference

Search the complete OpenAPI contract and copy integration examples.

 ↗+

Configure providers

Redirect URIs, credentials and provider-specific integration rules.

 ↗AI

LLM & MCP

Machine-readable docs, llms.txt and the public read-only documentation MCP.