awesome-rust-auth

awesome-rust-auth is a framework-agnostic Rust authentication crate inspired by awesome-node-auth.

✅ Implemented in this table indicates framework-agnostic core crate capabilities. Transport-specific middleware and full HTTP integration remain adapter/application concerns.

• Access/refresh JWT pair with rotation + revocation primitives
• Email/password auth (argon2) with validator-based request validation
• OAuth account-link model scaffolding
• Tenant-aware domain model + RBAC store contract
• Session, API key, telemetry, SSE, event-bus, and webhook traits
• Embedded awesome-node-auth-compatible Admin/Auth UI runtimes (/auth/admin, /auth/ui) with admin.js, auth.js, and /auth/ui/config
• Mail templating via Handlebars with built-in welcome, password_reset, magic_link, verify_email, email_changed, and invitation locale templates (en, it) plus custom registration
• OIDC discovery + JWKS helpers for IDP mode
• OpenAPI generation via utoipa
• Adapter modules behind feature flags for Axum, Actix-web, and Warp

[dependencies]
awesome-rust-auth = { version = "1.9.0", features = ["axum"] }

use awesome_rust_auth::AuthConfig;

let config = AuthConfig::builder()
    .issuer("https://auth.example.com")
    .audience("my-app")
    .jwt_secret("replace-with-a-long-secret")
    .enable_idp_mode(true)
    .build()?;
# Ok::<(), awesome_rust_auth::AuthError>(())

#[cfg(feature = "axum")]
{
    let app = awesome_rust_auth::adapters::axum::router();
    let _ = app;
}

#[cfg(feature = "actix")]
{
    let scope = awesome_rust_auth::adapters::actix::scope();
    let _ = scope;
}

#[cfg(feature = "warp")]
{
    let routes = awesome_rust_auth::adapters::warp::routes();
    let _ = routes;
}

This crate targets the same REST shape and token conventions used by:

• ng-awesome-node-auth
• awesome-node-auth-flutter

Current explicit deviations (also available via compatibility_notes()):

1. OAuth provider-specific payload shape follows the core Rust service contract and can be adapted per integration layer.
2. Inbound webhook action decorators run through the built-in secure Wasmtime execution model.

• examples/axum-postgres
• examples/actix-mongodb
• examples/warp-sqlite

• Database-agnostic persistence via traits in src/traits.rs
• Framework-agnostic core in src/service.rs
• No unsafe
• Public API designed for semver-stable evolution from 0.1.0