AuthKit for Convex: Zero-configuration authentication for real-time applications

AuthKit is now the default authentication option for Convex projects. When you run npm create convex, AuthKit appears as the first authentication choice, and the CLI provisions everything automatically—no WorkOS signup needed, no configuration tweaking, just instant authentication that works.

Today, we're excited to announce our deep integration with Convex, the popular reactive backend platform. This partnership brings Enterprise Ready authentication to one of the most innovative database backends in the developer ecosystem, making it dead simple to build real-time applications with production-grade auth from day one.

With this integration, developers can go from zero to a fully authenticated Convex application in under 60 seconds. No more jumping between dashboards, configuring JWT templates, or managing redirect URIs.

Run npm run dev and start building.

What is Convex?

Convex is a reactive backend platform that's gained significant traction among developers building real-time applications. It combines a database, serverless functions, and real-time sync into a single platform, making it particularly popular for collaborative apps, multiplayer games, and any application where data needs to flow seamlessly between users.

The platform's reactive qualities mean that when data changes in your backend, those changes automatically propagate to all connected clients. This makes Convex an ideal choice for developers who want to focus on building features rather than managing infrastructure and real-time synchronization logic.

While Convex has supported WorkOS authentication for some time, the integration required numerous manual steps, creating friction in the developer experience. We knew we could do better.

The New Experience: Authentication That Just Works

Starting today, when you create a new Convex project, AuthKit is the default authentication option. Select it, and the Convex CLI handles everything automatically through our platform APIs.

Here's what the new flow looks like:

npm create convex

When prompted for authentication, select AuthKit as your authentication method. Then navigate to your project and run:

npm run dev

This is when the magic happens. The convex CLI automatically:

• Creates a new WorkOS team if you don't already have one
• Sets up dedicated environments for your Convex deployments
• Generates and securely stores API keys
• Configures redirect URIs for your development environment
• Updates the JWT template with the proper audience claim
• Sets up CORS origins for client-side applications
• Configures your app homepage URL

Your application now has fully functional authentication. The entire AuthKit setup, which previously required multiple manual steps across two dashboards, happens automatically when you first run your development server.

How We Built Zero-Configuration

The magic happens through a new platform API that allows Convex to provision and manage WorkOS resources programmatically. When you initialize a new Convex project with AuthKit, the Convex CLI communicates directly with WorkOS to handle all configuration automatically.

Automated Account Setup

If you're new to WorkOS, the integration creates a new team and sends an invite to your Convex email address. You can then choose any authentication method you prefer—password, social login, or any other AuthKit-supported option.

Your end users get access to the full range of AuthKit authentication methods, just like any other AuthKit implementation.

Smart Configuration Management

The integration intelligently handles all the technical details that previously required manual configuration:

• JWT Template Configuration: Automatically formats the audience claim to match Convex's expectations
• Redirect URI Management: Sets up the correct URIs for your development environment
• CORS Origins: Configures origins for client-side React SPAs to communicate with AuthKit
• Environment Variables: Automatically populates your Convex project with the necessary WorkOS credentials

All of this happens in seconds during project initialization, removing the friction that traditionally comes with setting up authentication.

Seamless Dashboard Experience

When you access the WorkOS dashboard, you'll see your Convex-provisioned environments clearly marked. A banner indicates which resources are managed by Convex, and API keys created through the integration are protected to prevent accidental modification.

You maintain full visibility into your authentication setup while the integration handles the complexity.

Built for Scale

The integration is designed to grow with your application:

• Multiple Environments: Each Convex deployment gets its own WorkOS environment, keeping development, staging, and production properly isolated
• Team Collaboration: All Convex deployments within your Convex team share the same WorkOS team, making it easy to manage authentication across projects

Available Today

The AuthKit-Convex integration is available immediately for all new Convex projects. There's no additional cost.

To get started:

1. Run npm create convex in your terminal
2. Select AuthKit when prompted for authentication
3. Start building your real-time application with Enterprise Ready auth

We believe this integration represents what a modern developer experience should be: powerful capabilities that work out of the box, allowing you to focus on building features that matter to your users.

Check out the Convex documentation to learn more, or join the conversation in the #workos channel in the Convex Discord community to share feedback and connect with other developers building with AuthKit and Convex.