I talk to founders every week and the pattern repeats. The team needs login, someone says "how hard can a login form be," and two quarters later they are maintaining an identity system nobody wanted to own and the actual roadmap is on fire.
The problem is that auth looks like one feature but it is actually five products stacked on top of each other:
Every sign-in method your users expect (passkeys alone took our team over 800 engineering hours to get production ready)
Session management that survives a real security review, which arrives with 40 questions you have not thought about
Token infrastructure, issuance, rotation, revocation, the part that pages someone at 2am
Permissions, because plain roles stop working the moment your product grows
And now identity for AI agents acting on behalf of your users, which no in-house auth from two years ago was designed for
Each of these is somebody's entire company. Your team will build all five as a side quest, and then maintain them forever.
The github repo can be found here: https://github.com/basejump-ai/b...
A little more history on what led us to this point. We started working on Basejump in 2023 and always had the goal to eventually open source. It took us almost 3 years, but we're really happy with what we're giving to the community.
