Mazeway

Includes email/password, OAuth providers (Google, GitHub), email verification, password reset, multi-factor authentication (authenticator apps, SMS, backup codes), device session tracking, and account activity alerts.

Yes — the full source lives in your project under the MIT license, so you can customize flows, UI, and configuration without being tied to a third-party package.

Supabase is required for auth and storage. Optional integrations include Resend for transactional emails, Upstash Redis for API rate limiting, Twilio for SMS, and Trigger.dev for long-running data exports.

The starter includes production-focused features (rate limiting, device verification, email alerts, GDPR exports) and a production checklist; deployment requires configuring production Supabase settings, email provider, Redis, and hosting.