<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Sebastian</title>
    <description>The latest articles on DEV Community by Sebastian (@sebastiansala).</description>
    <link>https://dev.to/sebastiansala</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3899687%2Fb9a10e39-9023-4aef-9833-275a2de9e7da.png</url>
      <title>DEV Community: Sebastian</title>
      <link>https://dev.to/sebastiansala</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/sebastiansala"/>
    <language>en</language>
    <item>
      <title>RustAuth: a Better Auth-inspired toolkit for Rust apps</title>
      <dc:creator>Sebastian</dc:creator>
      <pubDate>Mon, 15 Jun 2026 02:40:00 +0000</pubDate>
      <link>https://dev.to/sebastiansala/rustauth-a-better-auth-inspired-toolkit-for-rust-apps-jjh</link>
      <guid>https://dev.to/sebastiansala/rustauth-a-better-auth-inspired-toolkit-for-rust-apps-jjh</guid>
      <description>&lt;p&gt;I’m building &lt;strong&gt;RustAuth&lt;/strong&gt;, an authentication toolkit for Rust applications.&lt;/p&gt;

&lt;p&gt;The idea is simple: give Rust developers a clean, extensible auth foundation without forcing them into a hosted provider, a specific framework, or a pile of one-off glue code.&lt;/p&gt;

&lt;p&gt;👉 &lt;a href="https://www.rustauth.dev" rel="noopener noreferrer"&gt;rustauth.dev&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Rust already has great crates for auth-related pieces: hashing, cookies, sessions, OAuth, JWTs, databases, middleware, and more.&lt;/p&gt;

&lt;p&gt;But when you are building real products, auth usually becomes more than &lt;strong&gt;login and logout&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;You eventually need things like:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;- Email/password
- Sessions
- OAuth/OIDC
- Passkeys
- SAML
- SSO
- SCIM
- Organizations
- Database adapters
- Payment flows
- Framework integrations
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Most Rust solutions I found were either excellent low-level building blocks, framework-specific examples, or focused libraries for one part of the problem.&lt;/p&gt;

&lt;p&gt;That is not a bad thing. It is actually one of Rust’s strengths.&lt;/p&gt;

&lt;p&gt;But I wanted something more product-oriented: a toolkit that starts simple, stays modular, and can grow with the app.&lt;/p&gt;

&lt;p&gt;That is the direction of RustAuth.&lt;/p&gt;

&lt;h2&gt;
  
  
  What RustAuth is trying to be
&lt;/h2&gt;

&lt;p&gt;RustAuth is not a hosted auth platform. It is not trying to take over your application. It is meant to be part of your backend.&lt;/p&gt;

&lt;p&gt;With RustAuth:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;You own your database.&lt;/li&gt;
&lt;li&gt;You own your user model.&lt;/li&gt;
&lt;li&gt;You choose the features you need.&lt;/li&gt;
&lt;li&gt;You keep auth close to your product logic.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The goal is a Better Auth-inspired developer experience, designed for Rust instead of copying JavaScript patterns directly.&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight rust"&gt;&lt;code&gt;&lt;span class="k"&gt;let&lt;/span&gt; &lt;span class="n"&gt;auth&lt;/span&gt; &lt;span class="o"&gt;=&lt;/span&gt; &lt;span class="nn"&gt;RustAuth&lt;/span&gt;&lt;span class="p"&gt;::&lt;/span&gt;&lt;span class="nf"&gt;new&lt;/span&gt;&lt;span class="p"&gt;()&lt;/span&gt;
    &lt;span class="nf"&gt;.adapter&lt;/span&gt;&lt;span class="p"&gt;(&lt;/span&gt;&lt;span class="n"&gt;db&lt;/span&gt;&lt;span class="p"&gt;)&lt;/span&gt;
    &lt;span class="nf"&gt;.email_password&lt;/span&gt;&lt;span class="p"&gt;()&lt;/span&gt;
    &lt;span class="nf"&gt;.oauth&lt;/span&gt;&lt;span class="p"&gt;()&lt;/span&gt;
    &lt;span class="nf"&gt;.build&lt;/span&gt;&lt;span class="p"&gt;();&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Simple when you start. Composable when your product grows.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why I care about this
&lt;/h2&gt;

&lt;p&gt;Auth is one of those things that looks small until it is not.&lt;/p&gt;

&lt;p&gt;Login is easy.&lt;/p&gt;

&lt;p&gt;Then come sessions, account linking, token rotation, email verification, OAuth callbacks, permissions, teams, SSO, enterprise requirements, billing states, audit logs, and edge cases you did not think about on day one.&lt;/p&gt;

&lt;p&gt;I want RustAuth to help with that progression.&lt;/p&gt;

&lt;p&gt;Not by hiding everything, but by giving Rust developers a solid structure to build on.&lt;/p&gt;

&lt;h2&gt;
  
  
  Current status
&lt;/h2&gt;

&lt;p&gt;RustAuth is still early.&lt;/p&gt;

&lt;p&gt;The API will evolve, docs will improve, and more integrations are coming. Right now, the focus is on getting the architecture right: core primitives, adapters, plugins, and framework integrations that feel natural in Rust.&lt;/p&gt;

&lt;p&gt;You can check it out here:&lt;/p&gt;

&lt;p&gt;👉 &lt;a href="https://www.rustauth.dev" rel="noopener noreferrer"&gt;rustauth.dev&lt;/a&gt;&lt;br&gt;
👉 &lt;a href="https://github.com/salasebas/rustauth" rel="noopener noreferrer"&gt;https://github.com/salasebas/rustauth&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Feedback is very welcome, especially from Rust developers building real apps.&lt;/p&gt;

</description>
      <category>rust</category>
      <category>opensource</category>
      <category>webdev</category>
      <category>security</category>
    </item>
  </channel>
</rss>
