Passwordless Authentication
First-class FIDO2 / WebAuthn passkeys with biometric authentication, security keys, and hardware token support.
Muljax ID Documentation
Production-ready identity provider and SSH Certificate Authority powered by Cloudflare Workers, D1 SQLite, and React.
OpenSSH Certificate Authority
Issue short-lived, Ed25519-backed OpenSSH user certificates on the wire adhering to RFC 4251 and OpenSSH CERT01 specifications.
OIDC & OAuth 2.0 Provider
RFC 6749 and OpenID Connect compliant with PKCE (S256), JSON Web Key Sets (JWKS), discovery metadata, and token rotation.
Automated KRL Synchronization
Keep server /etc/ssh/revoked_keys synchronized in real-time via systemd timers and native OpenSSH revocation endpoints.
Cloudflare Edge Native
Sub-millisecond global execution via Cloudflare Workers and global D1 distributed SQLite storage.
Role-Based Access Control
Granular permissions catalog, dynamic role assignments, and background user lifecycle state machines.