Skip to content
All building blocks

Platform

Run your own logic in login and stream every event out

Inject custom code at fixed points in the auth flow, and receive lifecycle events in your own systems.

The problem it removes

Off-the-shelf login rarely fits exactly. You need to enrich a token, block a risky sign-in, or notify a downstream system.

Without an extension point, those needs force a fork or a fragile workaround.

How Thoryn solves it

Register a hook against a named stage. Inline hooks can augment or veto the flow; event hooks fire asynchronously and never block it.

Every delivery is signed with an HMAC or an Ed25519 detached JWS, and you can send a test delivery and rotate the signing key.

For lifecycle events, poll the Events API from a stored cursor, so downtime simply resumes without a lost event. Webhook push delivery is in preview.

What you get

  • Inline hooks that can augment or veto a login

  • Asynchronous event hooks that never block the flow

  • HMAC or Ed25519 detached-JWS signatures on every delivery

  • Test deliveries and signing-key rotation

  • Events API: a poll-based, replayable event feed

  • Webhook push delivery in preview

Ready to build on the platform?

Create an account and wire your first login, or talk to us about a pilot.