Built in Rust. Built on SableDB. Built for passkeys.
Passkey-first authentication for teams that want to own their identity boundary.
RustyAuth is a small, self-hosted Rust identity service for WebAuthn ceremonies, durable browser sessions and short-lived ES256 access tokens. Durable identity state lives in a private, volume-backed SableDB instance.
- Passkey registration, authentication and multi-credential management
- Server-side, single-use WebAuthn ceremony state
- Revocable HttpOnly sessions with idle and absolute expiry
- ES256 access tokens, OpenID-style discovery and JWKS
- Exact-origin enforcement, structured audit events and fail-closed configuration
- Docker Compose and Railway-oriented deployment packaging
Warning
RustyAuth is pre-release software. Recovery, scheduled backup and restore, signing-key rotation and an independent security assessment are not complete. Do not use it as the sole identity system for a production service yet.
Start with the project README, read the architecture, or review the security policy.
RustyAuth is an independent open-source project maintained by Livermore Ledger Ltd. It is not sponsored, endorsed or maintained by the Rust Foundation, the Rust Project, SableDB or their contributors.