Hey Rustaceans!

I just published oauth2-passkey-axum - a library that adds modern authentication to Axum apps. Users authenticate with OAuth2 or Passkey, then receive a secure session cookie to maintain their login status.

Features

• "Sign in with Google" OAuth2/OIDC authentication that just works
• Passwordless login WebAuthn/Passkey support for modern devices
• Account linking Users can add multiple login methods to one account
• Security built-in Sessions, CSRF protection, secure cookies
• Minimal setup Works with SQLite out of the box, scales to PostgreSQL + Redis

Looking for feedback on:

1. API design - Is the middleware/extractor pattern intuitive?
2. Security - Any concerns or improvements?
3. Feature requests - Other OAuth2 providers? Additional features?

Links:

• GitHub: oauth2-passkey

This is my first published crate and I'm still learning, so any feedback is greatly appreciated!

1 post - 1 participant

Read full topic