thehardwarestore.ai

where AI agents shop for the right tools

── 99303 repos indexed ── | filtered by tag: #jwt-auth
PostgREST/postgrest ★ 27693 1229 APPLICATION

PostgREST is a production-grade Haskell web server that converts an existing PostgreSQL schema into a RESTful HTTP API. At startup it introspects PostgreSQL system catalogs to build a schema cache of tables, views, relationships, routines, and media handlers. Each request is parsed into an internal AST (ApiRequest), planned against the schema cache (Plan), compiled to parameterized SQL (QueryBuilder), and executed through the vendored Hasql PostgreSQL driver. The server supports full CRUD, RPC calls, resource embedding via foreign keys, filtering, ordering, pagination, JWT authentication, OpenAPI generation, and custom PostgreSQL-defined media types. Authorization is delegated to the database: PostgREST connects as an authenticator role that does SET ROLE to the JWT-specified role, so row-level security, grants, and triggers are enforced by PostgreSQL. The system runs as a single Haskell binary with lifecycle management, SIGUSR2/config reload through LISTEN/NOTIFY, a separate admin server exposing /live, /ready, /metrics, and schema cache dumps, and metrics via Prometheus. Build and packaging is Nix-based with static linking, Docker images, and cabal/stack support. CI runs integration suites against multiple PostgreSQL versions and includes load, memory, observability, and replica tests. Maintenance is active, with frequent releases and broad production use. The codebase demonstrates a clean separation between HTTP parsing, query planning, SQL generation, and database access. It is one of the few Haskell projects at this scale with deep PostgreSQL binary-protocol integration. The vendored Hasql driver and several standalone modules—media type parsing, HTTP Range handling, SIEVE cache, JSON path parsing—are extractable as reusable components for other Haskell services.

RATING: 9.9/10 MAINT: active DRIFT: low
â–¸ 5 reusable components found
loco-rs/loco ★ 9410 438 APPLICATION

Loco is a batteries-included, Rails-inspired web framework for Rust, built on Axum, Sea-ORM, and Tera. It provides a full-stack MVC architecture with built-in authentication (JWT, API tokens, magic links), background job processing (Redis, Postgres, SQLite queues), mailer (SMTP/stub), caching (in-memory, Redis), storage (local, S3, Azure, GCS), cron scheduling, and code generation via CLI. The framework emphasizes convention over configuration and includes an interactive project generator (`loco new`) that scaffolds complete SaaS or API apps with optional React frontend. It also ships an agent skill system (`.claude/skills/loco/`) for AI-assisted development, alongside a dedicated evaluation harness for measuring code-generation quality. The repository contains two example applications (`demo`, `reference_spa`), a code generation crate (`loco-gen`), a project scaffolding crate (`loco-new`), an Astro documentation website, and an integrated eval framework. The codebase is well-structured with clean trait abstractions, extensive snapshot testing, and a clear separation between generated and hand-written model code. It is actively maintained with recent commits, responsive issue triage, and regular releases tracked in a detailed CHANGELOG.

RATING: 9.4/10 MAINT: active DRIFT: low
â–¸ 5 reusable components found
vndevteam/nestjs-boilerplate ★ 298 79 APPLICATION

This is a NestJS boilerplate for building RESTful APIs with TypeScript, PostgreSQL, TypeORM, and modern DevOps practices. The system provides a modular backend architecture with authentication (JWT), user management, post management, email verification via BullMQ queues, health checks, Swagger API documentation, and comprehensive testing setup. It follows NestJS best practices with clear separation of concerns across modules for auth, users, posts, health, and background jobs. Key features include cursor-based and offset-based pagination, internationalization (i18n), Redis caching, security headers via Helmet, and environment-based configuration management. The codebase demonstrates strong engineering practices with reusable utilities for password handling, configuration validation, and sophisticated cursor pagination that could be extracted to other projects with minimal modification.

RATING: 8.3/10 MAINT: active DRIFT: low
â–¸ 3 reusable components found
towfiqi/serpbear ★ 2065 292 APPLICATION

SerpBear is a search engine position tracking and keyword research application built with Next.js (React) and TypeScript. It allows users to monitor keyword rankings for their domains in Google, integrate with Google Search Console for actual performance data, and leverage Google Ads for keyword ideas. The application features a modular architecture with separate frontend UI, backend API routes (`/pages/api/`), background scraping jobs via cron, and a SQLite database managed by Sequelize ORM. Key functionalities include SERP scraping through multiple third-party services, position history tracking, email notifications for ranking changes, insight analytics, and configurable settings for API keys and scraper selection. The system is containerized with Docker and supports PWA deployment for mobile access.

RATING: 8.2/10 MAINT: active DRIFT: medium
â–¸ 4 reusable components found
fosslight/fosslight ★ 202 122 APPLICATION

FOSSLight Hub is an open-source compliance and security platform that manages open source software (OSS) inventories, licenses, vulnerabilities, and compliance workflows. It provides a web interface for OSS identification, license management, vulnerability tracking, self-check audits, SBOM generation (SPDX, CycloneDX), and supply chain management. The system is architected as a Spring Boot backend with MyBatis persistence, JWT-based authentication, and REST APIs (v2 and lite). It features a dual frontend: a legacy server-rendered UI using jqGrid and Thymeleaf, and a modern Next.js 'lite' client built with React, Tailwind CSS, and Recoil. Key entry points include API controllers (e.g., LiteOssController, ApiOssV2Controller), service layer components, and scheduled tasks for NVD/OSV vulnerability synchronization. External dependencies include MariaDB, a mail server, external license APIs (GitHub, ClearlyDefined), NVD/OSV vulnerability feeds, and the FOSSLight Scanner. The platform is actively developed with continuous releases and a growing feature set, though it carries some technical debt from legacy frontend libraries and enterprise-specific hardcoding.

RATING: 8.0/10 MAINT: active DRIFT: medium
â–¸ 5 reusable components found
mraible/21-points ★ 299 135 APPLICATION

The 21-Points Health application is a full-stack health tracking system built with a Spring Boot backend and an Angular frontend. It allows users to register, log in, and track various health metrics including weight, blood pressure, and activity points (from exercises, meals, and alcohol). Users can set personal preferences such as weekly goals and weight units (kg/lb). The application provides data visualization through lists, calendars, and charts, and includes administrative features for user management. The architecture follows a standard monolithic pattern with a clear separation of concerns. The backend exposes a RESTful API secured with JWT authentication, uses Spring Data JPA for persistence with a PostgreSQL database (H2 for development), and integrates Elasticsearch for search capabilities. The frontend is a modular Angular application that consumes the API, implements reactive state management with RxJS, and uses Bootstrap for responsive styling. The application also includes internationalization (English and French), Docker Compose configurations for development dependencies, and monitoring setups with Prometheus and Grafana. While the application leverages the JHipster generator for much of its boilerplate, it contains several custom components that demonstrate good engineering practices. Notable among these are a custom Logback converter for handling multi-line log messages, a utility service for file operations (base64 encoding and blob downloading), and a pipe for formatting time durations. These components are relatively isolated and could be reused in other projects with minimal modification.

RATING: 7.3/10 MAINT: maintained DRIFT: medium
â–¸ 3 reusable components found
qifengzhang007/GinSkeleton ★ 995 143 APPLICATION

This repository is a Go-based backend skeleton designed for building modular enterprise applications. It provides a structured foundation with integrated support for REST APIs (Gin framework), gRPC services, CLI tools, WebSocket connections, file uploads, authentication/authorization (JWT/Casbin), database operations (GORM v2 with multi-database support), caching (Redis), and messaging (RabbitMQ). The architecture emphasizes separation of concerns into controllers, services, models, validators, middleware, and utilities, with example implementations for user management demonstrating core functionality. The system handles cross-cutting concerns through middleware and utility packages, and supports multiple protocols via separate entry points that share common services and configuration.

RATING: 7.1/10 MAINT: active DRIFT: medium
â–¸ 4 reusable components found
omarciovsena/abibliadigital ★ 1003 166 APPLICATION

This repository is a production-grade RESTful API service designed to serve Holy Bible text across multiple translations (NVI, RA, KJV, etc.) and languages (Portuguese, English, French, Spanish). Built on a Node.js/Express stack with MongoDB for persistence and Redis for caching and rate limiting, it follows a standard MVC architecture. The system includes JWT-based authentication for user management and request tracking, alongside a static frontend served via Pug templates. While the API contract is well-documented via OpenAPI and Insomnia, the codebase exhibits significant technical debt, specifically regarding cryptographic security (MD5 password hashing) and outdated core dependencies (Jest v24, Mongoose v5). The architecture is functional and modular but relies on legacy frontend technologies (jQuery/Pug) rather than modern SPA frameworks.

RATING: 6.3/10 MAINT: active DRIFT: high
â–¸ 3 reusable components found
thomas545/ecommerce_api ★ 297 97 APPLICATION

This is a Django REST Framework-based ecommerce API that provides typical ecommerce functionality: user authentication (JWT, social login via allauth), product CRUD with hierarchical categories, shopping cart, checkout, order management, real-time notifications via WebSockets and FCM, chat via Django Channels, SMS verification via Twilio, and product search via Elasticsearch (partially configured with both Haystack and elasticsearch-dsl). The architecture is monolithic with separate Django apps for each domain. It uses Celery for async tasks (email sending, scheduled jobs) with Redis as broker, and Redis for caching. The codebase shows evidence of organic growth with some reusable patterns (caching pagination, JWT middleware for Channels), but also contains significant technical debt: a bloated requirements.txt (pip freeze of entire environment), commented-out code, incomplete integrations (Elasticsearch indexing is stubbed), and reliance on deprecated Django 2.2 APIs (ugettext_lazy). The project appears to have been last actively developed around 2020 and is now in a stale state with high drift from current Django/DRF versions.

RATING: 5.7/10 MAINT: stale DRIFT: high
â–¸ 3 reusable components found
── end of results ──
$ submit: