# Vitify Auth — Single Sign-On & OAuth 2.0 Identity Provider

> Vitify Auth (https://login.vitify.id) is the centralized authentication gateway and OAuth 2.0 Identity Provider for the Vitify business software ecosystem, including Vitify Accounting, Task Management, and connected partner services.

## Overview
Vitify Auth provides enterprise-grade Single Sign-On (SSO), RFC 7636 OAuth 2.0 Authorization Code with PKCE, multi-factor credential management, social login, and developer OAuth client provisioning.

## Ecosystem Applications
- **Vitify Accounting**: https://accounting.vitify.id — Indonesian enterprise accounting, invoicing, tax invoice generation, and double-entry bookkeeping.
- **Vitify Task Management**: Integrated collaborative productivity and workflow suite.
- **Vitify Auth Portal**: https://login.vitify.id — Central identity provider, authentication, and session security.

## Core Capabilities
- **Protocols**: OAuth 2.0 with PKCE (Proof Key for Code Exchange, RFC 7636) and Personal Access Tokens via Laravel Passport.
- **Authentication**: Email/Username credentials with Argon2id/Bcrypt hashing, Google SSO, and email verification.
- **Security Architecture**: Strict origin preservation, state HMAC validation, anti-CSRF token verification, and granular rate limiting.
- **Subdomain SSO**: Unified authentication sharing across `*.vitify.id` subdomains.

## Key Public Routes
- Sign In: https://login.vitify.id/login
- Account Registration: https://login.vitify.id/register
- Password Reset: https://login.vitify.id/forgot-password
- OAuth Authorize: https://login.vitify.id/oauth/authorize
- OAuth Token: https://login.vitify.id/oauth/token
- User Identity Endpoint: https://login.vitify.id/api/v1/user

## Pricing Model
- Free for all end users and ecosystem applications.
- Full details available at: https://login.vitify.id/pricing.md