Architecture
Architecture
The authorization server, management UI, and Helm charts form the VAuthenticator ecosystem.
Authorization server
The Kotlin and Spring Boot application provides OAuth2 and OpenID Connect endpoints, sign-in pages, account lifecycle flows, MFA, and administration APIs. Your applications connect to this server for authentication and authorization.
Management UI
A separate React and TypeScript application lets administrators manage clients, accounts, roles, keys, email templates, and password lifecycle rules. It authenticates through the authorization server and calls its management APIs.
Infrastructure
Persistence can use PostgreSQL or DynamoDB. Redis supports authorization code storage, distributed sessions, and caching. Key management can use plain Java cryptography or AWS KMS. Documents and static assets can be loaded from the filesystem or Amazon S3.
Deployment
The repository contains separate Helm charts for the server and management UI. Begin with the local installation overview, then explore the Kubernetes guide.