Roadmap
What AuthFlow does today, and what is planned next.
In v1, today
- Email and password sign-up and sign-in
- Email verification, with resend
- Password reset, revoking every session
- Two-factor authentication (TOTP), optional per user, with recovery codes
- Session management, first-party cookie, 30-day sliding expiry
- Rate limiting on every credential route
Not built yet
Planned for v1.2 — no date
- OAuth and social sign-in