github.com/deafauth/deafauth # Core identity compiler
github.com/pinkycollie/deafauth-ecosystem # Full MBTQ Universe integration
github.com/pinkycollie/auth-services # Microservices architecture
Framework-Agnostic Universal Identity System
DeafAUTH is a universal identity compiler that aggregates authentication from multiple sources into a single Deaf-first identity hub.
Not a framework. Not a library. A protocol.
βββββββββββββββββββββββββββββββββββββββββββ
β Your Existing Auth Systems β
β (Auth0, Google, Work SSO, School, IoT) β
ββββββββββββββββ¬βββββββββββββββββββββββββββ
β
βΌ
ββββββββββββββ
β DeafAUTH β β Compiles ALL into ONE
β Compiler β with Deaf-first defaults
ββββββββ¬ββββββ
β
βΌ
βββββββββββββββββββββββββ
β One Identity β
β Infinite Access β
β Accessibility Synced β
βββββββββββββββββββββββββ
import { DeafAUTH } from '@deafauth/core';
const deafauth = new DeafAUTH({
apiUrl: 'https://api.deafauth.mbtq.dev'
});
// Register with Deaf-first defaults
const user = await deafauth.register({
email: 'user@example.com',
password: 'secure-password',
name: 'John Doe'
});
// Automatically includes:
// - deaf_status: 'unspecified'
// - preferred_language: 'ASL'
// - communication_preference: 'visual'
// - accessibility_needs: []
from deafauth import DeafAUTH
deafauth = DeafAUTH(api_url='https://api.deafauth.mbtq.dev')
user = deafauth.register(
email='user@example.com',
password='secure-password',
name='John Doe'
)
curl -X POST https://api.deafauth.mbtq.dev/v1/register \
-H "Content-Type: application/json" \
-d '{
"email": "user@example.com",
"password": "secure-password",
"name": "John Doe"
}'
package main
import "github.com/deafauth/go-sdk"
func main() {
client := deafauth.NewClient("https://api.deafauth.mbtq.dev")
user, err := client.Register(deafauth.RegisterParams{
Email: "user@example.com",
Password: "secure-password",
Name: "John Doe",
})
}
<?php
require 'vendor/autoload.php';
use DeafAUTH\Client;
$deafauth = new Client('https://api.deafauth.mbtq.dev');
$user = $deafauth->register([
'email' => 'user@example.com',
'password' => 'secure-password',
'name' => 'John Doe'
]);
require 'deafauth'
client = DeafAUTH::Client.new(api_url: 'https://api.deafauth.mbtq.dev')
user = client.register(
email: 'user@example.com',
password: 'secure-password',
name: 'John Doe'
)
DeafAUTH is protocol-first, not framework-specific.
POST /v1/register # Create DeafAUTH identity
POST /v1/login # Authenticate user
POST /v1/validate-deaf # Validate Deaf identity
POST /v1/connect-system # Link external auth system
GET /v1/user/:id # Get user profile
PATCH /v1/user/:id # Update preferences
DELETE /v1/user/:id # Delete identity
Full API docs: api.deafauth.mtbq.dev/docs
Wrap existing OAuth with DeafAUTH:
User β Your App β DeafAUTH β Auth0/Google
β
Deaf preferences
stored & synced
Central hub for all authentications:
Work SSO ββ
School ββΌβ DeafAUTH β Your App
IoT ββ€ β
Banking ββ Single identity
+ Accessibility
Each service checks DeafAUTH:
Service A ββ
Service B ββΌβ DeafAUTH API
Service C ββ (validates token
+ returns prefs)
| Language | Package | Install |
|---|---|---|
| JavaScript/TypeScript | @deafauth/core |
npm install @deafauth/core |
| Python | deafauth |
pip install deafauth |
| Go | github.com/deafauth/go-sdk |
go get github.com/deafauth/go-sdk |
| PHP | deafauth/php-sdk |
composer require deafauth/php-sdk |
| Ruby | deafauth |
gem install deafauth |
| Rust | deafauth |
cargo add deafauth |
| Java | deafauth:sdk |
Maven/Gradle |
DeafAUTH is built BY and FOR the Deaf community.
We need:
Not needed:
MIT License - Use freely, attribute appropriately
Full-Stack Deaf-First Business Operating System
The complete MBTQ Universe where DeafAUTH is the identity layer integrated with:
deafauth-ecosystem/
βββ packages/
β βββ deafauth/ # Identity compiler
β βββ fibonrose/ # Logging & validation
β βββ pinksync/ # Browser extension
β βββ magicians/ # AI agents
β βββ dao/ # Governance system
β
βββ services/
β βββ api/ # REST API
β βββ websocket/ # Real-time sync
β βββ workers/ # Background jobs
β
βββ apps/
β βββ web/ # Main web app
β βββ mobile/ # React Native
β βββ desktop/ # Electron
β
βββ docs/
β βββ architecture/
β βββ deaf-research/ # Research aggregation
β βββ community/ # Deaf voices
β
βββ infrastructure/
βββ docker/
βββ kubernetes/
βββ terraform/
git clone https://github.com/pinkycollie/deafauth-ecosystem.git
cd deafauth-ecosystem
docker-compose up
pnpm install
pnpm dev
# API
cd services/api && npm start
# Frontend
cd apps/web && npm start
# Workers
cd services/workers && python main.py
Flexible - Choose Your Stack:
Framework-agnostic design tokens:
{
"colors": {
"primary": "#ff1493",
"secondary": "#8a2be2",
"success": "#00ff88",
"warning": "#ffa500",
"error": "#ff6b6b"
},
"typography": {
"fontFamily": "Inter, system-ui, sans-serif",
"scale": {
"xs": "0.75rem",
"sm": "0.875rem",
"base": "1rem",
"lg": "1.125rem",
"xl": "1.25rem",
"2xl": "1.5rem"
}
},
"accessibility": {
"minTouchTarget": "44px",
"highContrast": true,
"reducedMotion": "respected"
}
}
This is a monorepo for the complete ecosystem.
Contribution Areas:
AGPL-3.0 (ecosystem must remain open-source)
DeafAUTH Broken into Composable Services
DeafAUTH as independent microservices that can be deployed separately.
Use cases:
auth-services/
βββ services/
β βββ identity/ # Core authentication
β βββ validation/ # Deaf identity validation
β βββ systems/ # External system connections
β βββ accessibility/ # Preference management
β βββ logging/ # Fibonrose integration
β βββ notifications/ # Email/webhooks
β
βββ gateway/ # API Gateway
βββ shared/ # Shared libraries
βββ infrastructure/ # Deployment configs
Port: 5001
Tech: Your choice (Node/Python/Go)
Purpose: Core authentication
POST /register
POST /login
POST /logout
GET /user/:id
Port: 5002
Tech: Python (ML/AI heavy)
Purpose: Deaf identity validation
POST /validate-deaf
POST /validate-community
GET /validation-status/:userId
Port: 5003
Tech: Node.js (API integrations)
Purpose: Connect external systems
POST /connect
GET /connected/:userId
DELETE /disconnect/:systemId
Port: 5004
Tech: Any
Purpose: Manage preferences
GET /preferences/:userId
PUT /preferences/:userId
POST /sync-preferences
Port: 5005
Tech: Go (high-performance)
Purpose: Fibonrose logging
POST /log
GET /logs/:userId
POST /blockchain-anchor
Port: 5006
Tech: Node.js
Purpose: Emails, webhooks
POST /email
POST /webhook
GET /notifications/:userId
Single entry point for all services:
Client β API Gateway (port 8080)
β
βββββββββ΄ββββββββ
β β
Identity (5001) Validation (5002)
β β
Systems (5003) Accessibility (5004)
β β
Logging (5005) Notifications (5006)
docker-compose up
# All services start on localhost
kubectl apply -f k8s/
# Services auto-scale
# Each service as Lambda/Cloud Function
serverless deploy
# Manual service startup
cd services/identity && npm start
cd services/validation && python main.py
# etc...
Services call each other via HTTP
RabbitMQ/Redis for async communication
High-performance RPC
Unified GraphQL API
Your choice based on needs.
Each service follows the same structure:
service-name/
βββ src/
β βββ routes/
β βββ controllers/
β βββ services/
β βββ models/
βββ tests/
βββ Dockerfile
βββ package.json (or requirements.txt)
βββ README.md
Each service has independent tests:
# Test individual service
cd services/identity
npm test
# Test all services
./scripts/test-all.sh
# Integration tests
npm run test:integration
Each service exposes:
/health - Health check/metrics - Prometheus metrics/ready - Readiness probeCentralized monitoring:
Perfect for:
Each service can be:
APACHE License
| Repo | Best For | Complexity | Scale |
|---|---|---|---|
| deafauth/deafauth | SDK users, simple integration | Low | Small-Medium |
| pinkycollie/deafauth-ecosystem | Full product, monorepo | Medium | Medium-Large |
| pinkycollie/auth-services | Enterprise, microservices | High | Large-Scale |
deafauth/deafauth if:deafauth-ecosystem if:auth-services if:All repos maintained by: pinkycollie / MBTQ
Email: deafauth@mbtq.dev
Community: Built WITH the Deaf community, not FOR them
Remember: DeafAUTH is not about hearing people building βaccessibility tools.β
Itβs about Deaf identity, culture, and autonomy in digital spaces.