A production-ready, high-performance FastAPI + Next.js boilerplate featuring enterprise-grade authentication (JWT access tokens & HttpOnly refresh cookie rotation), Role-Based Access Control (RBAC), Super Admin user management, single-use encrypted credential reveal (Fernet + TTL expiry), audit logging, and automated seeding.
Unlike every other BoilerShelf product, this one contains zero AI or LLM dependencies — it's the clean, battle-tested backbone you drop into any Python + Next.js web application to get immediate enterprise-grade user management, email verification, session security, and administrative oversight.
Core capabilities
- Dual-token session security: short-lived JWT access tokens plus long-lived, rotated refresh tokens stored in secure HttpOnly, SameSite=Lax cookies.
- Complete transactional email flow: welcome, OTP verification, password reset, login notification, and one-time credential reveal — all bundled as real Jinja2/HTML templates.
- Fernet credential encryption: sensitive credentials encrypted at rest with symmetric cryptography.
- Superadmin governance: user listing, status toggles, role upgrades, one-time secure credential reveal with expiration, and a comprehensive audit log.
- Redis rate limiting: sliding-window protection on login, registration, and password reset endpoints.
Two tiers, one choice: your database
Pick MongoDB or PostgreSQL — both tiers ship the identical, fully-featured auth system. There's no separate "basic" tier here; every deliverable includes the complete JWT/RBAC/OTP/admin stack.