About iQ Key Value
Open source hybrid tenancy SaaS foundation with identity federation and plan enforcement. Five production-ready microservices (IAM, Gateway, Billing, Audit, CMS) on Java 25 + Spring Boot 4 — deploy as multi-tenant B2B or single-tenant B2C from the same codebase with OAuth2/OIDC, enterprise SSO, magic-link passwordless sign-in, FLAT + PER_SEAT pricing, and plan-code feature gating built in.
Our Mission
Every SaaS team should spend their time solving customer problems, not rebuilding authentication systems, identity federation, API gateways, and payment infrastructure from scratch. iQ Key Value provides the essential backend foundation — production-ready, open source, Apache 2.0 — so you can launch faster and scale confidently.
What's Included
IAM Service
Full identity lifecycle — signup, JWT RS256 auth with plan_code claim, magic-link passwordless sign-in, OAuth2/OIDC social login, tenant-scoped enterprise SSO, platform tenant personal workspace, invitation flows, brute-force protection, token revocation, email verification.
Gateway Service
Reactive Spring Cloud Gateway — JWT validation, header sanitization, tenant context propagation, correlation IDs, plan-code enforcement, PlatformModeGuard, security response headers.
Billing Service
Gateway-agnostic payment abstraction — Stripe and Lemon Squeezy via PaymentGatewayPort, FLAT + PER_SEAT pricing with trials, per-tenant customer provisioning, subscription lifecycle, seats API, refunds, and self-service billing management.
Audit Service
Centralized event-driven audit trail — passive RabbitMQ consumption, ActivitySeverity enum, SPI-based extensibility, JSONB metadata with custom MyBatis TypeHandler, and PLATFORM_ADMIN search API.
CMS Service
Content management microservice — static page CRUD with draft/published lifecycle, multi-language with en-US fallback, hierarchical slugs, SEO metadata, tenant-isolated schemas, RabbitMQ event publishing.
Tenant App
React 19 SPA for workspace members — magic-link + social sign-in, enterprise SSO entry, create organization, team management, invitations, plan-aware feature gates, billing self-service, connected accounts, Lingui i18n (en-US, bg-BG, de-DE, fr-FR).
Platform Admin
Internal operator console — global user (3-tab detail: Overview/Orgs/Identities) + org (5-tab: Overview/Members/Billing/Subscriptions/Refunds) management, subscription and refund monitoring, platform authority controls, OIDC identity remediation, announcements, audit log browser, Lingui i18n (4 languages).
Landing Kit
The Astro landing kit you're looking at right now — optimized for performance, SEO, and developer experience with Tailwind CSS, DaisyUI, and build-time plan fetching.
Hybrid Tenancy Model
One codebase, two deployment models. Set platform.rolloutMode to choose between MULTI_TENANT (schema-per-tenant PostgreSQL isolation, each company gets a dedicated schema) and SINGLE_TENANT (all users in one default workspace, ideal for B2C). Every user is auto-joined to the fixed platform tenant as a personal workspace, always accessible even if an org tenant is suspended. Architectural zero-migration symmetry between modes. No code changes required.
Who It's For
Why iQ Key Value
Production Ready
Java 25, Spring Boot 4, Kubernetes-native. 10-stage CI/CD pipeline with SonarQube, JaCoCo, ArchUnit, and Testcontainers gates.
Fast Time to Market
IAM, Gateway, Billing, and Audit are production-ready. Deploy with Helm and start building your vertical-specific features immediately.
Security by Default
RS256 JWT with plan_code claim, OAuth2/OIDC federation, Redis-backed PKCE state handling, magic-link passwordless auth with rate limiting, brute-force lockout, header sanitization, schema-per-tenant isolation, and two-layer token revocation.
Apache 2.0 — Free Forever
No licensing fees, no usage limits, no vendor lock-in. Use it for personal projects or commercial products.
Get Started
Clone the repo, run docker compose up, and have a working multi-tenant platform in minutes.