How it works
Three calls. Zero auth code to maintain.
We handle JWKS rotation, refresh tokens, MFA challenges, password resets, OIDC discovery, IAM policy evaluation. You handle your product.
Install the SDK
npm install @forjio/huudis-node — or the Python or Go SDK. Same wire format across every language.
Verify a token
Call verifyAccessToken() in your route handler. Token in, claims out. JWKS cache + clock-skew tolerance built in.
Authorize with policies
AWS-IAM-style JSON policies. Canned tiers for Admin / Developer / ReadOnly / Billing. Custom Conditions when you need them.
Features
Everything auth should be. Nothing you'd outgrow.
One API for user identity and authorization. The bits other providers charge Enterprise for — in the free tier.
Email + password
Verification flows, password reset, rate-limited sign-in. Strong-password checks by default.
Social sign-in
Google and Apple ready. Drop-in buttons, ID-token verification, email-based account linking.
MFA + backup codes
TOTP with any authenticator app. Step-up auth gated by Condition keys in your policies.
OIDC provider
Full discovery, JWKS, authorize, token, userinfo, end-session + RFC 8628 device flow.
AWS-IAM-style policies
The exact JSON shape your devs already know. Canned Admin / Developer / ReadOnly / Billing per service.
HMAC access keys
AKIA long-term + ASIA session keys. HMAC-SHA256 signing, ±5 min skew, constant-time compare.
Pricing
Fair, in rupiah, no asterisks.
Free forever for small apps. Pay only when you grow.
Free
For your next side project.
10,000 MAU
- OIDC provider + OAuth clients
- Email + password + social sign-in (Google, Apple)
- TOTP multi-factor auth
- AWS-IAM-style policies (Admin/Developer/ReadOnly/Billing tiers)
- Up to 3 organizations, 3 seats, 2 service accounts
Pro
Ship your first paying product.
50,000 MAU
- Everything in Free
- 1 SAML/OIDC enterprise connection
- Passkeys (WebAuthn) + TOTP
- Up to 25 organizations, 10 seats, 10 service accounts
- 30-day audit log
Business
For Indonesian SaaS that’s scaling.
200,000 MAU
- Everything in Pro
- 5 SAML/OIDC connections
- SCIM directory sync
- Unlimited organizations, 50 seats, 50 service accounts
- All MFA methods (TOTP, WebAuthn, SMS)
Scale
Dedicated support, SLA, and compliance-ready.
1,000,000 MAU
- Everything in Business
- Unlimited SAML/OIDC connections
- Bring-your-own custom IdP
- SCIM + JIT provisioning
- Adaptive/risk-based MFA
Compare
Cheaper than Auth0. Sharper than Cognito.
We built Huudis for devs who got tired of paying USD-priced enterprise tiers for auth features that should be free.
For developers
CLI-first. Type-safe SDKs. Webhooks that don't lie.
Real CLI, type-safe SDKs for Node.js, Python, and Go, REST API, signed webhooks. Test-mode access keys mean you can prototype policies before flipping the live switch.
- huudis iam, huudis audit, huudis account — fully scriptable
- OpenAPI spec + type-safe SDKs (Node, Python, Go)
- Webhooks with HMAC signatures + replay protection (t=…,v1=…; 5-min window)
- AWS-IAM-style access keys (AKIA long-term, ASIA STS-style assumed roles)
import { verifyAccessToken } from '@forjio/huudis-node';
app.get('/me', async (req, res) => {
const claims = await verifyAccessToken(req.headers.authorization);
res.json({ userId: claims.sub, email: claims.email });
});
One login
Powering identity for every Forjio product.
Huudis is the identity layer behind every Forjio product. One sign-in, one IAM surface, one place to revoke access — across the entire suite.
Huudis
identity
One Huudis account unlocks every product in the Forjio family.
FAQ
Common questions.
Ship the auth. Get back to the product.
Sign up, drop in the SDK, and forget about identity for the rest of the quarter.
10,000 MAU free forever. No credit card. PPN-compliant invoicing.