refresh-token-rotation

This Repository implements Refresh Token Rotation Authentication System and Automatic Retry Mechanism of Failed APIs with Stale Access Tokens, using MERN (Mongo DB - Express - React - Node) Stack

Refresh/Access JWT authentication server with backend + administration frontend supporting HMAC (HS256 HS384 HS512), RSA (RS256 RS384 RS512), ECDSA (ES256 ES384 ES512) and Ed25519 (EdDSA). See also other repos for Javascript, Python and Go client libraries.

Sentra - TypeScript authentication framework with JWT access tokens, refresh-token sessions, hooks, and database adapters.

FastAPI User Authentication: A high-performance, open-source user authentication framework for FastAPI, featuring Role-Based Access Control (RBAC), job scheduling, email verification, async SQLAlchemy for concurrent requests.

A production-ready, security-hardened Express.js starter template built with TypeScript and the Bun runtime.

Built with a focus on user experience, achieving 100% Accessibility (WCAG standards, semantic HTML, keyboard navigation, screen reader support) and 95%+ performance scores (Chrome Lighthouse) and advanced security features.

CleanCore React frontend — Clean Architecture katmanlı, üretime hazır SPA template'i (TanStack Query + Zustand + Tailwind + Refresh Token Rotation)

Custom JWT authentication engine built from scratch with RS256 token rotation, OAuth2 PKCE (Google/GitHub), fine-grained RBAC, rate-limiting, and Redis/MongoDB session validation.

Production-ready, highly secure Authentication and Identity Management microservice built with Express 5, TypeScript, Prisma, Redis, and BullMQ.

Authenticated todo REST API with JWT access/refresh token rotation, pagination, sorting, and filtering. Express 5 + TypeScript + PostgreSQL.

Access Token과 Refresh Token을 이용한 인증/인가 학습

Java checkout service with refresh-token rotation, replay-triggered session revocation, and a captcha check before an order is accepted

Frontend console and interactive visualizer for IdentityForge authentication and identity management microservice.

ASP.NET Core 8 Web API behind kod.is — a share-by-link notepad. Sqids slugs, Google sign-in, JWT with refresh-token rotation and replay detection, per-notebook passwords, rate limiting, EF Core + SQLite.

Vue 3 SPA client implementing authentication with JWT and Refresh Token Rotation with a FastAPI backend

FastAPI backend implementing authentication with JWT, Refresh Token Rotation, Refresh Token Reuse Detection, and HttpOnly Cookies with a PostgreSQL database

Spring 입문용 프로젝트

Teaching repo demonstrating the hybrid refresh token model and minimal non‑tracking session table for refresh‑token‑theft detection. Not a production auth system.

Vue 3 SPA client implementing authentication with JWT, Refresh Token Rotation, Refresh Token Reuse Detection, and HttpOnly Cookies with a FastAPI backend

Security-focused auth + OAuth 2.0 (Auth Code + PKCE) implementation from first principles. RS256 JWTs, rotating refresh tokens, strict trust boundaries, and documented attack mitigations. Minimal, readable, not production-ready.