Kroton Auth

Lightweight identity and authorization for modern applications

Production Ready

Features

🔑

JWT Authentication

Secure token-based authentication with automatic refresh token rotation and family-based reuse detection for seamless session management.

🛡️

Hierarchical RBAC

Fine-grained role-based access control with role inheritance. Define roles that automatically inherit permissions from parent roles.

🔐

Google OAuth SSO

Single sign-on with Google OAuth integration out of the box. Users authenticate with their existing Google accounts.

RESTful API

Clean RESTful API for all identity and authorization operations. User management, role management, and health checks included.

Built With

RustAxumPostgreSQLSQLxJWTOAuth 2.0

Kroton Auth uses a modular crate structure — config, core, db, and api — making it easy to understand, extend, and contribute to.

Kroton Auth is fully open source. Explore the code, deploy it, or contribute.

View on GitHub