SignetSource →

Who Am I

One sign-in for every site, and none of them sees your secrets

Signet is an identity service with multiple backends: proxy to an OAuth provider, use a database, or connect a crypto wallet (coming soon).

Not running anywhere yet: version 0.2.0.0 is on NixLab, and no signet serves it.

A gold ring set with a jewel

  1. Tokens

    Signed with ed25519, for one audience, checked offline.

  2. SSH certificates

    Short-lived OpenSSH user certificates for a principal's own keys.

  3. Revocation

    Per principal, the epoch before which its tokens are refused.

  4. Signing in

    By SSH signature. Passkeys are typed, and refused until they land.

  5. Stores

    SQLite, tee, forward, cached forward, and split by namespace.

  6. Sign in with signet

    An OpenID Connect provider: the code flow, with PKCE S256.

  7. GitHub and Google

    An outside identity logs in as the principal it is mapped to.