RustyAuth
Built in Rust. Built on SableDB. Built for passkeys.
Passkey-first authentication for teams that want to own their identity boundary.
RustyAuth is a small, self-hosted Rust identity service for WebAuthn ceremonies, durable browser sessions and short-lived ES256 access tokens. Durable identity state lives in a private, volume-backed SableDB instance.
- Passkey registration, authentication and multi-credential management
- Server-side, single-use WebAuthn ceremony state
- Revocable HttpOnly sessions with idle and absolute expiry
- ES256 access tokens, OpenID-style discovery and JWKS
- Exact-origin enforcement, structured audit events and fail-closed configuration
- Docker Compose and Railway-oriented deployment packaging
Warning
RustyAuth is pre-release software. Recovery, scheduled backup and restore, signing-key rotation and an independent security assessment are not complete. Do not use it as the sole identity system for a production service yet.
Start with the project README, read the architecture, or review the security policy.
RustyAuth is an independent open-source project maintained by Livermore Ledger Ltd. It is not sponsored, endorsed or maintained by the Rust Foundation, the Rust Project, SableDB or their contributors.
Pinned Loading
Repositories
People
This organization has no public members. You must be a member to see who’s a part of this organization.
Top languages
Loading…
Most used topics
Loading…