nx9-auth

Identity & Access Management
System Health: Operational

Identity & Access Control Center

High-performance, zero-Node.js Rust IAM server featuring Argon2id password hashing, BLAKE3 token hashing, and strict OWASP security controls.

Active Engine
Axum / Tokio
⚡ Pure Rust Non-Blocking I/O
Password Protection
Argon2id
🛡️ Memory-Hard Key Derivation
Token Hashing
BLAKE3
🔒 Hashed Opaque Storage at Rest
UI Architecture
Dioxus WASM
🌐 Zero JS Runtime Overhead

🧪 Authentication Simulator & Protocol Inspector

Simulate API Request

RESPONSE INSPECTOR HTTP 200 OK
Content-Type: application/json | Cache-Control: no-store 
{
  "status": "ready",
  "message": "Click 'Send Request' to execute simulated request."
}

🛡️ Security & Compliance Architecture

🔑

Timing-Attack Mitigation

Non-enumerating authentication failures with constant-time dummy Argon2id execution delays for unknown users.

🌐

Strict Content Security Policy

Hardened CSP (script-src 'self' 'wasm-unsafe-eval') with zero inline script execution and zero javascript: URIs.

🍪

HttpOnly Cookie Protection

Dual-mode cookie authentication featuring HttpOnly, SameSite=Lax, and automatic Cache-Control: no-store.

⚡

In-Memory IP Rate Limiter

Lock-free exponential backoff lockout penalties managed via concurrent DashMap tracking.

📚 Core REST API Surface Reference

Method Endpoint Path Guard / Authentication Description
GET /health Public System and database health diagnostic check.
GET /version Public Returns binary version and build target information.
POST /api/v1/auth/login Rate Limiter JSON login. Issues session cookies & Bearer access tokens.
GET /api/v1/auth/me AuthUser (Cookie/Bearer) Resolves current identity, assigned roles, and permission scopes.
POST /api/v1/auth/logout AuthUser Revokes active session and invalidates HttpOnly cookies.
GET /api/v1/users AuthUser (Admin) Paginated search and listing of registered platform users.