Architecture guide

This guide describes the core building blocks behind Authalla and how they work together.

Core services

• Auth API handles authentication flows, tokens, and sessions.
• Admin API manages tenants, users, and configuration.
• UI surfaces serve hosted login, consent, and account screens.

Data flow overview

1. Your app redirects to Authalla’s hosted UI.
2. Authalla verifies credentials and issues tokens.
3. Your app exchanges tokens with the Auth API.

Multi-tenant isolation

Every request is scoped to a tenant, with strict data isolation and audit logging.