Authentication
Multi-layer access control built in
OAuth with GitHub and Google, email/password authentication, session management, and fine-grained permissions. Security infrastructure you don't have to build.
What Authentication gives you
OAuth Providers
Sign in with GitHub or Google. Familiar flows users already trust.
Email/Password
Traditional authentication for users who prefer it.
Session Management
Secure sessions with refresh tokens. Automatic expiration and renewal.
Permission System
Fine-grained permissions beyond just roles. Grant or deny specific actions.
Account Security
Password hashing, login attempt tracking, and account lockout protection.
Why Authentication matters
- Don't build auth from scratch. Use battle-tested infrastructure.
- OAuth + email gives users choice
- Fine-grained permissions for complex access requirements
How Authentication works
Authentication in Runwork provides enterprise-grade identity management without building anything from scratch. OAuth with GitHub and Google, traditional email/password, session management, and fine-grained permissions. All the security infrastructure your apps need is built in and ready to use.
User authentication flows are pre-built. Add "sign in with Google" or "sign in with GitHub" to your apps without configuring OAuth providers yourself. Traditional email/password authentication is also available for users who prefer it. Sessions are managed securely with refresh tokens, automatic expiration, and renewal, so no custom session handling is required.
The permission system goes beyond simple roles. Grant or deny specific permissions per user or per group across everything your team runs on Runwork: apps, integrations, workflows, schedules, data entities, file storage, agents, API keys, public endpoints, and logs. An Editor can gain an extra ability, a Viewer can be restricted further, and a contractor group can be limited to exactly the apps and data they need, all without changing anyone's base role. Teams and workspaces provide additional organizational layers for access control.
Security features protect accounts by default. Passwords are hashed with modern algorithms, login attempts are tracked to prevent brute force attacks, and accounts can be locked after suspicious activity. Audit logs track authentication events for compliance and security monitoring.