Secure Auth Boilerplate – NestJS (GraphQL) + Next.js

What is this?This is a production‑ready fullstack authentication boilerplate built with NestJS (GraphQL code‑first), Next.js App Router, and PostgreSQL.It solves authentication the right way, with secure session handling, refresh token rotation, and reuse detection — the same patterns used in serious production systems.If you’re tired of rebuilding auth for every project (or fixing security bugs later), this boilerplate saves you weeks.Authentication Features JWT authentication (access + refresh tokens) Refresh token rotation with reuse detection HttpOnly refresh tokens (secure cookies) In‑memory access tokens Logout & logout‑all‑sessions Explicit session model (User + Session entities) Fully GraphQL‑native (no REST hacks) Tech StackBackend NestJS GraphQL (code‑first) PostgreSQL TypeORM + migrations JWT (access + refresh) Jest (unit, integration & e2e) Frontend Next.js (App Router) Minimal demo UI (login / register / profile) Silent token refresh Tooling Docker & Docker Compose ESLint + Prettier GitHub Actions CI Seed scripts What You Get Full source code (backend + frontend) Database schema & migrations Working auth flows out of the box Dockerized local environment Clean, readable architecture Commercial‑friendly license Who is this for? Indie hackers Freelancers Backend & fullstack developers Small teams Anyone building SaaS or internal tools Not for beginnersBuilt for developers who care about security & correctnessWhy this boilerplate?Most auth tutorials: Ignore refresh token rotation Hide logic behind magic libraries Break at scale This boilerplate: Makes session handling explicit Is easy to extend Is battle‑tested architecture, not a demo DeliveryYou’ll receive a ZIP file with: Backend (NestJS) Frontend (Next.js) Docker setup Documentation Instant download after purchase

Found on Devadex — the discovery index for independent software the big search engines bury. More from gumroad.

Report this listing