InfiniteTeam identity platform
One account, every service
Self-hosted authentication for the InfiniteTeam ecosystem — OAuth 2.0 / OpenID Connect, LDAP identity, WebFinger and social login. The first consuming service is Tailscale (custom OIDC client).
OAuth 2.0 / OIDC
Standards-compliant provider built on oidc-provider with a Nest.js backend.
OIDC & integrationsLDAP identity
User identities managed by lldap (PostgreSQL-backed, single source of truth).
Security modelSession & cookies
Signed inft_session cookie — HttpOnly, Secure, SameSite=Lax, 7-day TTL.
Security model