Guardian

An auth server in Rust covering OAuth, sessions, email templates and the usual set. A learning project that later shaped how Authsome splits authentication methods into plugins instead of configuration flags.

Language

Rust

Anatomy

1 modules

Auth server

Sessions and tokens for the Rust stack.

Why it exists

Design notes

#What it is

An authentication server in Rust from 2021: OAuth, session handling, all the standard auth types, email templates and rendered pages.

It was a learning project, and the thing it taught me outlasted the code. Every authentication method I added, whether password, OAuth or magic link, wanted a different shape of configuration, a different storage requirement and a different set of routes, and expressing that as configuration flags on one server produced a config surface nobody could reason about.

Authsome's method-as-plugin structure is that lesson applied five years later. An application that never needs SAML does not carry SAML code, SAML configuration or SAML attack surface.