{"repo":"hamzzy/authx-rs","free":true,"listed":false,"github":"https://github.com/hamzzy/authx-rs","clone":"git clone https://github.com/hamzzy/authx-rs.git","description":"AuthX is a modular, framework-agnostic authentication toolkit for Rust.","language":"Rust","stars":44,"topics":["actix","actix-web","authentication","authorization","axum","crate","rust"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"authx-rs An authentication and authorization framework for Rust. Philosophy: Zero-cost abstractions, trait-based, async -native. Every feature is a plugin, nothing is hardcoded. --- Architecture Design constraints Constraint Detail --- --- Framework-agnostic core authx-core has zero axum/actix imports Storage-agnostic Pluggable Repository traits; bring your own adapter Password hashing Argon2id only (65536 mem / 3 iter / 4 parallelism) Session tokens SHA-256 hashed before storage, raw token sent to client once JWT signing Ed25519 / EdDSA via jsonwebtoken CSRF Origin/Referer trusted-origin check for mutating requests --- Workspace layout --- Quickstart See examples/axum-app/src/main.rs for a complete example. --- Features Email + Password authentication TOTP MFA Magic link authentication Password reset Admin operations RBAC + ABAC authorization Key rotation (zero-downtime) Rate limiting Audit logging --- Storage adapters In-memory (tests / development) PostgreSQL (production) --- Security defaults Concern Default --- --- Password hashing Argon2id · m=65536 · t=3 · p=4 JWT algorithm EdDSA (Ed25519) Session token storage SHA-256 hex hash only — plaintext discarded immediately OAuth token storage AES-256-GCM encrypted CSRF protection Origin/Referer trusted-origin check on all mutating methods Brute-force lockout Sliding window — configurable threshold + window Rate limiting Per-IP sliding window — configurable threshold + window Magic link TTL 15 minutes, single-use Password rese","default_branch":null,"files":null,"tree":[],"storefront":"/r/hamzzy","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/hamzzy/authx-rs/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}