About Keystone

Keystone is a centralized identity provider that handles user authentication, session management, and application-level access control.

One identity, all services — sign in once and access everything, so each application doesn't need its own user management system.

Capabilities

• Email/password authentication with JWT tokens
• Session management with secure refresh token rotation
• Multi-application support with per-app user scoping
• Admin dashboard for user and application management
• Two-factor authentication support
• Dark mode with system preference detection

Stack

FastAPI backend with PostgreSQL, Astro + React frontend with shadcn/ui components.