# k2rbac-api-server
Standalone Axum server for the k2rbac authentication and RBAC service.
## What it provides
- HTTP endpoints for login, refresh, registration, password reset, email verification, and admin RBAC operations.
- Integration with k2db through the k2db HTTP API.
- Optional local or proxied UI mode in the same binary.
- Telemetry hooks suitable for Ratatouille and Ringtail-based local observability.
## Running
```bash
cargo run -p k2rbac-api-server -- serve \
--listen-host 127.0.0.1 \
--listen-port 4100 \
--jwt-secret dev-secret \
--k2db-base-url http://127.0.0.1:3000 \
--k2db-api-key your-k2db-api-key
```
Use `--ui-mode ui-local` or `--ui-mode ui-proxied` to enable the optional UI surface.
License: GPL-3.0-or-later
Repository: https://github.com/frogfishio/k2db