refresh-token-rotation

This Repository implements Refresh Token Rotation Authentication System and Automatic Retry Mechanism of Failed APIs with Stale Access Tokens, using MERN (Mongo DB - Express - React - Node) Stack

Refresh/Access JWT authentication server with backend + administration frontend supporting HMAC (HS256 HS384 HS512), RSA (RS256 RS384 RS512), ECDSA (ES256 ES384 ES512) and Ed25519 (EdDSA). See also other repos for Javascript, Python and Go client libraries.

FastAPI User Authentication: A high-performance, open-source user authentication framework for FastAPI, featuring Role-Based Access Control (RBAC), job scheduling, email verification, async SQLAlchemy for concurrent requests.

Sentra - TypeScript authentication framework with JWT access tokens, refresh-token sessions, hooks, and database adapters.

Built with a focus on user experience, achieving 100% Accessibility (WCAG standards, semantic HTML, keyboard navigation, screen reader support) and 95%+ performance scores (Chrome Lighthouse) and advanced security features.

CleanCore React frontend — Clean Architecture katmanlı, üretime hazır SPA template'i (TanStack Query + Zustand + Tailwind + Refresh Token Rotation)

FastAPI backend implementing authentication with JWT, Refresh Token Rotation, Refresh Token Reuse Detection, and HttpOnly Cookies with a PostgreSQL database

ASP.NET Core 8 Web API behind kod.is — a share-by-link notepad. Sqids slugs, Google sign-in, JWT with refresh-token rotation and replay detection, per-notebook passwords, rate limiting, EF Core + SQLite.

FastAPI backend implementing authentication with JWT and Refresh Token Rotation with a PostgreSQL database

Vue 3 SPA client implementing authentication with JWT and Refresh Token Rotation with a FastAPI backend

Custom JWT authentication engine built from scratch with RS256 token rotation, OAuth2 PKCE (Google/GitHub), fine-grained RBAC, rate-limiting, and Redis/MongoDB session validation.

Authenticated todo REST API with JWT access/refresh token rotation, pagination, sorting, and filtering. Express 5 + TypeScript + PostgreSQL.

Production-ready, highly secure Authentication and Identity Management microservice built with Express 5, TypeScript, Prisma, Redis, and BullMQ.

Vue 3 SPA client implementing authentication with JWT, Refresh Token Rotation, Refresh Token Reuse Detection, and HttpOnly Cookies with a FastAPI backend

Access Token과 Refresh Token을 이용한 인증/인가 학습

Full-stack user management monorepo: Spring Boot API and Angular panel, with HttpOnly cookie auth, refresh token rotation with reuse detection, Redis-backed sessions and Kubernetes deployment.

FastAPI backend implementing authentication with JWT, Refresh Token Rotation and Refresh Token Reuse Detection with a PostgreSQL database

Spring 입문용 프로젝트

Teaching repo demonstrating the hybrid refresh token model and minimal non‑tracking session table for refresh‑token‑theft detection. Not a production auth system.

Security-focused auth + OAuth 2.0 (Auth Code + PKCE) implementation from first principles. RS256 JWTs, rotating refresh tokens, strict trust boundaries, and documented attack mitigations. Minimal, readable, not production-ready.