rust-backend-auth

JWT authentication in Rust backends involves creating tokens with claims like expiration, issuer, and audience, then validating them on protected routes. This Skill provides middleware patterns for Axum/Tower-based services that decode and inject user context into requests, handling clock-skew and token expiry checks automatically.

Argon2 password hashing with salted hashes is the industry standard for secure password storage. This Skill implements Argon2id hashing so passwords are protected even if your database is compromised, and provides verification logic for login flows.

Yes. This Skill provides middleware that validates JWT tokens, checks expiration and issuer/audience claims, handles clock-skew tolerance, and injects authenticated user context into request extensions so downstream handlers access user data directly.

Login flows hash user passwords with Argon2, generate JWT tokens with configurable claims, and return them to clients. Logout is stateless with JWTs—clients discard tokens; this Skill shows the token generation and validation patterns for Axum/Tower backends.

Yes. Clock skew—minor time differences between servers—can cause valid tokens to be rejected. This Skill implements configurable clock-skew tolerance during JWT validation so tokens remain valid across distributed systems.

This Skill validates expiration (exp), issuer (iss), and audience (aud) claims in JWTs. These claims prevent token misuse across different services and ensure tokens don't outlive their intended lifespan.