An authorization REST API server featuring RLS database queries, JWT cookies and RBAC. The client implementation includes server-side rendering and navigation guards.
Note
Developed as a college project to demonstrate cookie exchange and end-to-end security patterns in web apps.
API - Rust, Axum, diesel
APP - TypeScript, NuxtJS
Database - CockroachDB Cluster
Login flow
use devcontainer
api - localhost 3000
cargo run
app - localhost 3001
npm install npm run dev
port forwarding
cargo build
npm run build
releases
compose
rust, axum, diesel
todo
register, email, totp, mfa
rbac resource check
refresh token flow refresh token revocation
typescript, nodejs, nuxtjs
TODO
Look at LICENSE