SSO & OAuth2 + PKCE
Keycloak-powered Single Sign-On with PKCE S256. Supports Google, GitHub, and any OAuth2 provider. One login gives users access to every connected service.
Auth flow
Enterprise-grade identity, access control, micro-frontend orchestration, and billing — shipped as a single production-ready system.
Platform at a Glance
VENI-AI is a complete platform foundation. Stop rebuilding auth, billing, and access control for every project — ship your core product instead.
Core Capabilities
Each capability is production-ready, tested, and wired together — not a collection of loose libraries.
Multiple auth modes in one system. Users pick their preferred method — everything produces the same Shell JWT.
Policy-based access control via Casbin. Add @authorize() to any endpoint — no boilerplate.
Full multi-tenant support out of the box. Every data operation is scoped to the user's organization automatically.
Full Stripe integration — from checkout to usage enforcement. Define plans once, enforce everywhere.
Shell UI is the host shell. Remote services plug in as Module Federation remotes — one URL is all you need to register.
veni create appignis-grpc gateway over HTTP. No gRPC client libraries needed in downstream services — plain fetch works.
Full admin UI and audit trail. Know exactly who did what, when, and from where.
Kubernetes-native from day one. Three-environment overlay structure, one command to deploy.
./scripts/deploy.sh prod v1.0.0Platform Interface
Every screen ships with the platform. Auth, admin, billing, and service management — all built on a consistent design system.
| Name | Provider | Status | Roles | |
|---|---|---|---|---|
| JD jdoe | jane@acme.com | keycloak | Active | admin editor |
| AS asmith | alice@corp.io | Active | viewer | |
| BJ bjones | bob@startup.co | local | Locked | editor |
| CL clee | carol@enterprise.ai | keycloak | Active | admin |
How It Works
A user authenticates once with Shell. That session is trusted everywhere — no per-service login, no token juggling for the end user.
Technology Stack
Every technology was chosen for speed, type safety, and production reliability.
Use Cases
🏢 Enterprise SaaS
Multi-org, RBAC, SSO via Keycloak, B2B onboarding, and Stripe billing — all the enterprise requirements, zero custom code.
🛠️ Internal Platforms
Host multiple internal tools under one login. Teams own their micro-frontends; Shell handles auth and routing.
🚀 Product Studios
Build multiple products on one platform. Shared identity and billing, independent codebases and teams.
🏗️ Service Scaffolding
Scaffold a production-ready service with veni create app — auth, DB, API, UI, and K8s manifests included.
Get the platform running locally in 5 minutes. No cloud account needed.