Authentication

Authentication in Runwork provides enterprise-grade identity management without building anything from scratch. OAuth with GitHub and Google, traditional email/password, session management, and fine-grained permissions—all the security infrastructure your apps need is built in and ready to use.

User authentication flows are pre-built. Add "sign in with Google" or "sign in with GitHub" to your apps without configuring OAuth providers yourself. Traditional email/password authentication is also available for users who prefer it. Sessions are managed securely with refresh tokens, automatic expiration, and renewal—no custom session handling required.

The permission system goes beyond simple roles. Define exactly who can do what at a granular level: "users in the Sales team can view customers but only edit their own deals." Permissions integrate with entities, letting you control access to specific data types. Teams and workspaces provide additional organizational layers for access control.

Security features protect accounts by default. Passwords are hashed with modern algorithms, login attempts are tracked to prevent brute force attacks, and accounts can be locked after suspicious activity. Audit logs track authentication events for compliance and security monitoring.