RustyAuth documentation
Own the identity boundary.
Everything you need to understand, run and integrate the pre-release RustyAuth service.Account recovery, abuse controls, multi-writer qualification and an independent security assessment are not complete.
Start here
Getting started
Run RustyAuth and SableDB locally with Docker Compose.
Read chapter →02Architecture
Understand trust boundaries, durable state and authentication flows.
Read chapter →03Identity data model
See every persisted identity field, invariant and API projection.
Read chapter →04HTTP API
Review public endpoints, access requirements and response contracts.
Read chapter →05Configuration
Configure origins, tokens, sessions, persistence and backups.
Read chapter →06Backups and key rotation
Operate, rotate, verify and rehearse clean-room recovery.
Read chapter →07Deployment
Package RustyAuth safely for Docker and Railway.
Read chapter →What RustyAuth does
RustyAuth authenticates an identity, maintains revocable browser sessions and issues short-lived claims for downstream services. It intentionally leaves roles, permissions, entitlements and resource ownership to the application.