Drop-in identity
for your app.
Email, social, MFA, and fine-grained authorization — under one API. Built for Indonesian devs, priced in IDR. Ship auth in an afternoon.
import { verifyAccessToken } from '@forjio/huudis-node';
app.get('/me', async (req, res) => {
const claims = await verifyAccessToken(req.headers.authorization);
res.json({ userId: claims.sub, email: claims.email });
});
Token in. Claims out. Same call for every Huudis flow, every framework.
Everything auth should be.
Nothing you’d outgrow.
One API for user identity and authorization. The bits other providers charge Enterprise for — in the free tier.
Email + password
Verification flows, password reset, rate-limited sign-in. Strong-password checks by default.
Social sign-in
Google and Apple ready. Drop-in buttons, ID-token verification, email-based account linking.
MFA + backup codes
TOTP with any authenticator app. Step-up auth gated by condition keys in your policies.
OIDC provider
Full discovery, JWKS, authorize, token, userinfo, end-session + RFC 8628 device flow.
AWS-IAM-style policies
The exact JSON shape your devs already know. Canned Admin / Developer / ReadOnly / Billing tiers per service. Custom ones with Condition keys.
HMAC access keys
AKIA long-term + ASIA session keys. HMAC-SHA256 signing, ±5 min clock skew, constant-time compare.
Priced in IDR
Auth0 charges in USD + GST. We invoice in rupiah, PPN-compliant, with bank transfer on Business+. Your CFO will thank you.
CLI-native
huudis iam, huudis audit, huudis account sessions — your whole identity surface from a terminal. Not a click-ops afterthought.
IAM built in
Other providers sell "Enterprise RBAC" as an upsell. Here it’s Tuesday — AWS-IAM-style JSON policies, on the free tier.
Any language. Any framework.
Typed Node SDK today, REST endpoints for everything else. Every verb is the same wire format — copy-paste, ship, move on.
curl https://huudis.com/api/v1/authz/check \
-H "Authorization: Bearer $HUUDIS_ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-d '{
"action": "ripllo:campaigns:Publish",
"resource": "arn:forjio:ripllo:*:acct_abc:campaign/launch-2026"
}'
Fair, in rupiah, no asterisks.
Free forever for small apps. Pay only when you grow.
- OIDC provider + OAuth clients
- Email + password + social sign-in
- TOTP MFA + backup codes
- AWS-IAM-style policies (all 4 tiers canned)
- Access keys — 3 active
- Everything in Free
- Unlimited access keys + service accounts
- WhatsApp OTP add-on (roadmap)
- Remove Huudis branding
- 30-day audit retention
- Everything in Pro
- WebAuthn / passkeys (roadmap)
- 1-year audit retention
- PPN-compliant IDR invoicing
- SSO enforcement policies
- Everything in Business
- Dedicated tenant / on-prem option
- SAML / SCIM (roadmap)
- SOC 2 + ISO 27001 artifacts
- Named CSM · 99.99% SLA
Ship the auth.
Get back to the product.
Sign up, drop in the SDK, and forget about identity for the rest of the quarter.