Secure Auth Template

A small Node auth starter with no external dependencies.

Implemented:

• Password hashing with crypto.scrypt
• Per-user salts
• HttpOnly, SameSite session cookies
• First registered user becomes admin; later users become analyst
• Basic rate limiting on auth routes
• Audit log events for registration, login, logout, and session checks
• Live password policy feedback in the interface

This is a strong learning template, not a full production identity provider.

Run

From this project folder:

npm start

Open http://127.0.0.1:4401.