LOOMPIXEL handles login, sessions, roles and audit trails with defaults that pass a security review without a rewrite. Authentication is solved; authorisation is where products bleed. LOOMPIXEL gives you one model for users, teams, roles and permissions, plus an audit log that answers "who could have done this".
https://github.com/loompixel/loompixelLOOMPIXEL in numbers: < 50 ms token check · 100% actions audited · 2 auth protocols. MIT licensed, v0.8.2.
Short-lived tokens, refresh rotation and device revocation.
Coarse roles plus fine-grained scopes, evaluated in one place.
OIDC and SAML with per-tenant configuration.