Zero-knowledge multi-user authentication for developers

Point any OAuth 2.0 / OIDC library at the discovery URL and you’re done. Works with anything that has a “sign in with OIDC” option.

// next-auth / Auth.js
providers: [{
  id: "anonlogin",
  type: "oidc",
  issuer: "https://anonlog.in",
  clientId: process.env.AUTH_ANONLOGIN_ID,
  clientSecret: process.env.AUTH_ANONLOGIN_SECRET,
  authorization: { params: { scope: "openid" } },
  checks: ["pkce", "state"],
}]

Compatible with NextAuth.js, Auth.js, oauth2-proxy, omniauth, and every “custom OIDC provider” field you’ll ever see.

RFC 8628 device authorization grant, end to end. The bundled anonlogin CLI handles login, token refresh, and storage — or wire up your own.

$ anonlogin login

  URL:  https://anonlog.in/device/activate
  Code: BDWP-HQXC

  Or go directly to:
  https://anonlog.in/device/activate?user_code=BDWP-HQXC

  ✓ Authenticated successfully.

$ anonlogin token
eyJhbGciOiJSUzI1NiIs...

Perfect for headless boxes, dev tools, and anything where a browser lives somewhere else.

Long-lived bearer tokens with custom scopes. One header, no refresh dance. Every call shows up in your auth log so you always know what touched what.

# in your app / service

$ curl https://anonlog.in/v1/me \
  -H "Authorization: Bearer $KEY"

{"account_id":"01J…",
 "auth_method":"api_key","scopes":[]}

Ideal for cron jobs, CI runners, and any script that needs to talk to your management API. Works with any HTTP client — no SDK required.