Centralized sign-in
Register users, verify email addresses, sign users in, refresh sessions, and sign them out across applications.
Houy Auth Service
Authentication and application access in one place.
Houy Auth Service handles user identity, sessions, roles, and application membership so other apps can plug into a shared authentication system instead of rebuilding account logic every time.
Application access
Create client applications, issue client IDs and secrets, manage membership, and control per-app roles.
Account security
Support password resets, password changes, email changes, session revocation, and account activity review.
User relationships
Use built-in social endpoints for profiles, friend requests, friendships, blocks, and user social state.
What this site is for
This site is the control center for the auth service. Users can maintain their account, review activity, manage sessions, and use account recovery flows. Developers and admins can create applications, manage who has access to each one, and view the API documentation generated for each client ID.
Each application gets its own client ID. Auth endpoints use that client ID to scope sessions, roles, and membership, which lets the same user account have different access in different apps.
The service also exposes admin and audit tools for users, applications, login logs, email logs, and server error logs, with role checks controlling who can call each endpoint.
End-to-end API workflow
HouyAuth sits between client applications, users, and admin workflows. Applications send a client ID to scope auth behavior; users receive app-specific sessions and roles; privileged dashboards and APIs manage the system around those identities.
1
1
Developer / admin
Application setup
Create an app, save the one-time client secret, and choose which API permissions it can use.
Common endpoints
POST /api/applicationsPATCH /api/applications/{clientid}2
2
User-facing app
User identity
Register or sign in users with the client ID so HouyAuth can scope sessions and roles.
Common endpoints
POST /api/auth/registerPOST /api/auth/login3
3
Browser / API client
Session refresh
Refresh tokens rotate the session and issue a short-lived auth token for the requested client.
Common endpoints
POST /api/auth/refreshGET /api/auth/me4
4
Application backend
Protected calls
Use the auth token, client ID, and role checks to call user, app, social, log, and email endpoints.
Common endpoints
GET /api/users/me/profilePOST /api/email/send5
5
Owner / admin
Operations
App owners manage members, roles, secrets, and lifecycle; HouyAuth admins handle user recovery, logs, and disabled users.
Common endpoints
POST /api/users/{userid}/password-resetGET /api/logs/loginClient ID
Sent with auth requests to select the application context.
Auth token
Returned after login or refresh and used for protected API calls.
Roles
Evaluated per application for user, admin, owner, and HouyAuth-level actions.
Building against the API?
Open the public docs for a general endpoint reference with placeholders, or choose an application and select Docs to fill in that application's client ID. Each docs page shows the method, URL, auth requirement, permissions, headers, and sample body.