The unified authentication, authorization, and directory authority powering NishDrop, NS IP Logger, and upcoming NS services. Engineered with hardware-bound passkeys, OAuth 2.1, and enterprise RBAC.
Every protocol implemented in NSGO adheres strictly to RFC standards and zero-trust architecture, delivering high assurance without sacrificing developer velocity.
Sign in with Touch ID, Face ID, Windows Hello, or YubiKeys via FIDO2 / WebAuthn. Eliminates credential stuffing and password reuse through hardware-bound cryptography.
Full Authorization Server with mandatory PKCE (S256) for public clients, RS256 JWT signing, dynamic token introspection (RFC 7662), and a public JWKS endpoint.
Authenticate developer CLIs and headless environments using RFC 8628 user-code verification. Power automated background daemons via confidential Client Credentials.
Isolate teams with organizational tenancy. Features 3-tier hierarchical roles (Owner, Admin, Member), cryptographic single-use invite tokens, and strict Row-Level Security.
Real-time security lifecycle events delivered with HMAC-SHA256 signatures. Built with strict RFC 1918 private IP blocking and redirect prevention to neutralize SSRF attacks.
Real-time security telemetry with contribution heatmaps, session invalidation, IP tracking, and anomaly flags for full visibility over user and application behaviors.
Whether building a browser frontend, backend API service, or command-line developer tool, our type-safe TypeScript SDK provides standard cryptographic utilities with zero third-party bloat.
// Validate incoming requests against NSGO JWKS in any Node/Next.js/Express service
import { verifyToken } from '@nsgo/sdk/server';
export async function authorizeApiRequest(req: Request) {
const authHeader = req.headers.get('authorization');
// Cryptographically verifies RS256 signature, expiry, issuer & audience
const claims = await verifyToken(authHeader, {
issuer: 'https://auth.nsgo.app',
requiredScopes: ['openid', 'profile']
});
return { userId: claims.sub, email: claims.email, roles: claims.roles };
}Log in once with NSGO and carry your cryptographic identity, organizations, and security profile seamlessly into every NS ecosystem tool.
High-speed encrypted peer-to-peer file transfer. Leverages NSGO OAuth 2.1 identity to verify recipient addresses and authorize end-to-end file sharing rooms.
Real-time IP telemetry and request inspection engine. Ingests security audit streams and verifies network origins with NSGO identity correlation.
Plug-and-play OpenID Connect discovery. Any future tool in the NS ecosystem can integrate NSGO single sign-on immediately with zero custom authentication code.
Create your unified identity in seconds with biometric passkeys or integrate NSGO into your services via our developer SDK.