Foxnox
Password and account-security service: credential storage, 2FA, recovery tokens, and trusted devices, plus server-rendered account workflow pages. Foxnox is an internal password store: put a Backend for Frontend in front of it as the public API layer. Gatelin is one such BFF, not a requirement.
Images
| Image | Registry |
|---|
| API (includes workflow pages and Admin UI) | ghcr.io/alten-group/foxnox |
| Migration | ghcr.io/alten-group/foxnox-migration |
Features
- Credentials — Password hashes, rotation dates, expiry, and lockout state kept out of other services
- Authentication factors — TOTP 2FA enrollment and mid-login verification
- Tokens — Short-lived typed tokens for reset, unlock, recovery, and login challenges (HMAC only at rest)
- Trusted devices — Remember a browser for a limited time so 2FA is not prompted on every sign-in
- Security questions — Recover an account when the authenticator is lost
- Policies — Length and character rules used to generate and validate passwords
- Account workflows — Server-rendered recovery, unlock, 2FA, and device pages (EN/FR), white-label ready
- Admin UI — Angular front-end to manage passwords, policies, tokens, and devices
Documentation
Full documentation is available at https://alten-group.github.io/Foxnox.
Quick Start for off the shelf usage
Integrate Foxnox into your application using published Docker images :
Quick Start for contributors
# 1. Clone the repository
git clone https://github.com/ALTEN-group/Foxnox.git
cd Foxnox
# 2. Generate the development environment file
bash scripts/setup-env.sh
# 3. Start the stack
bash scripts/start-dev.sh
See CONTRIBUTING.md for the full development workflow, testing, and production build instructions.
License
MIT — see LICENSE and NOTICE.md. Published and maintained by ALTEN.
