do.dev uses secure authentication powered by WorkOS AuthKit.

Sign-In Options

Email & Password

Traditional email and password authentication with secure password hashing.

OAuth Providers

• Google - Sign in with your Google account
• GitHub - Sign in with your GitHub account

Session Management

Sessions are managed securely with:

• HTTP-only cookies
• Automatic token refresh
• Cross-domain support for subdomains

API Authentication

For API access, use API keys:

// Using environment variables (recommended)
const apiKey = process.env.DO_DEV_API_KEY;

// Making authenticated requests
const response = await fetch('https://api.do.dev/v1/resource', {
  headers: {
    'Authorization': `Bearer ${apiKey}`,
  },
});

Security Best Practices

1. Use environment variables - Never hardcode API keys
2. Rotate keys regularly - Generate new keys periodically
3. Use least privilege - Only request permissions you need
4. Monitor usage - Check the dashboard for unusual activity

Role-Based Access

do.dev supports different user roles:

Next Steps

• API Reference - API authentication details
• Dashboard - Manage your account