Documentation
Orbit is an enterprise authorization platform for multi-tenant applications. These pages cover the four services that make up the platform, their APIs, and the management SDK.
Orbit Service
Multi-tenant IAM engine with RBAC, direct permissions, hierarchical tenants, and a real-time introspect hot path.
Overview API ReferenceOrbit OAuth2
Headless OAuth2 authorization server with PKCE, ES512 JWTs, refresh token rotation, and pluggable consent.
Overview API ReferenceOrbit SDK
Typed TypeScript client wrapping every management endpoint. Discriminated unions — no try/catch, no surprises.
Overview API ReferenceOrbit Dash
Server-rendered admin dashboard for managing tenants, users, roles, and OAuth2 clients. Bootstrap 5 + HTMX.
OverviewQuick links
- Introspect API — the hot-path endpoint your application calls on every authorization decision
- OAuth2 flows — authorization code + PKCE, client credentials, token refresh
- SDK installation — get started with
@wrift/orbit-sdk