Crate actix_passport

Actix Passport

A comprehensive, flexible authentication framework for actix-web applications in Rust.

Actix Passport is built around the idea of authentication strategies.

Authentication strategies register themselves with the framework and are responsible for:

• Authenticating incoming requests
• Attaching their custom routes to the framework
• Providing their own authentication logic

The framework provides a default implementation of password and OAuth authentication strategies.

Features

• Multiple Authentication Methods: Username/password (with Argon2 hashing), OAuth 2.0, and session-based authentication
• Pluggable Architecture: Database-agnostic user stores, extensible OAuth providers
• Security First: Built-in CSRF protection, secure session management, configurable CORS policies
• Developer Friendly: Minimal boilerplate, type-safe extractors, comprehensive documentation

Quick Start

use actix_passport::prelude::*;
use actix_web::{web, App, HttpServer};
use actix_session::{SessionMiddleware, storage::CookieSessionStore};
use actix_web::cookie::Key;

#[actix_web::main]
async fn main() -> std::io::Result<()> {
    // Configure authentication framework with convenience methods
    let auth_framework = ActixPassportBuilder::with_in_memory_store()
        .enable_password_auth()  // Easy password authentication setup
        .build();

    HttpServer::new(move || {
        App::new()
            // Session middleware is required for authentication
            .wrap(SessionMiddleware::builder(
                CookieSessionStore::default(),
                Key::from(&[0; 64])
            ).build())
            .configure(|cfg| auth_framework.configure_routes(cfg, RouteConfig::default()))
    })
    .bind("127.0.0.1:8080")?
    .run()
    .await
}

Available Routes

Once configured, your app automatically gets these authentication endpoints:

• POST /auth/register - Register new user with email/password
• POST /auth/login - Login with email/username and password
• POST /auth/logout - Logout current user
• GET /auth/me - Get current user profile
• GET /auth/{provider} - Initiate OAuth login
• GET /auth/{provider}/callback - Handle OAuth callback

Architecture

The framework is built around these core components:

• ActixPassport - Main framework object containing all services
• UserStore - Trait for user persistence (implement for your database)
• AuthStrategy - Trait for authentication strategies

Re-exports

pub use crate::builder::ActixPassportBuilder;

pub use crate::errors::AuthError;

pub use crate::strategies::AuthStrategy;

pub use crate::strategies::oauth::oauth_provider;

pub use crate::user_store::stores::postgres::PostgresConfig;

pub use crate::user_store::stores::postgres::PostgresUserStore;

pub use crate::user_store::stores::in_memory::InMemoryUserStore;

pub use crate::user_store::UserStore;

pub use crate::core::*;

pub use crate::types::*;

Modules

builder

Builder for constructing the main authentication framework.

core

Core Passport types and functions.

errors

Authentication error types.

prelude

Convenient re-exports of commonly used types.

strategies

Authentication strategy trait and implementations. Authentication strategy trait and implementations.

types

Type definitions for authentication.

user_store

User store trait and implementations.