Huudis

Huudis provides a unified API for identity and authorization, combining authentication and fine-grained access control for applications. It is designed to simplify the integration of user sign-in, multi-factor authentication, and AWS-IAM-style policy management into developer workflows. The platform targets developers seeking to implement robust auth and permissions without maintaining custom code or paying enterprise-level prices for essential features.

Key features include support for email and password authentication with verification flows, password resets, and strong password enforcement. Social sign-in is available for Google and Apple, with drop-in buttons and email-based account linking. Multi-factor authentication is offered via TOTP and backup codes, with step-up authentication gated by policy conditions. Huudis acts as an OIDC provider, supporting full discovery, JWKS, authorization, token issuance, userinfo, end-session, and RFC 8628 device flow. Authorization is managed through AWS-IAM-style JSON policies, with canned roles such as Admin, Developer, ReadOnly, and Billing, as well as custom policy conditions. The system also provides HMAC access keys with long-term and session-based credentials, HMAC-SHA256 signing, and clock-skew tolerance.

Developers can integrate Huudis using type-safe SDKs for Node.js, Python, and Go, or via a REST API. The platform is CLI-first, offers an OpenAPI specification, and supports webhooks with HMAC signatures and replay protection. Test-mode access keys allow developers to prototype and test policies before deploying them live. User data is stored in a Singapore-region Postgres database with encrypted backups and daily snapshot retention, and dedicated regional tenants are available for enterprise customers with data residency requirements.

Pricing is structured in Indonesian rupiah, with a free tier supporting up to 10,000 monthly active users and core features including OIDC provider, OAuth clients, email and social sign-in, TOTP MFA, and IAM-style policies. Paid plans increase limits and add features such as SAML/OIDC enterprise connections, passkeys (WebAuthn), SCIM directory sync, adaptive or risk-based MFA, and compliance options. Invoicing is PPN-compliant for Indonesian businesses. Huudis also serves as the identity layer for all products in the Forjio suite, providing unified sign-in and access management across multiple services.