WARNING: This project is still a work in progress, and is NOT currently ready for deployment.
This project is an implementation of a single-sign-on system, where a single HTTP server will handle registering users, validating login attempts, and giving auth tokens / sessions. The main focus of this project is an investigation into best practices for storing confidential information such as passwords in a secure format, as well as creating a centralized system to handle user sessions in a web-application context.
- API versioning
- Secret key rotation
- Refresh JWT
argon2ID
JWTAuth
SQLite SQLC
Go stdlib Chi Router
Zerolog Lumberjack
GNU Make