A token authentication library for Phoenix applications, designed for API authentication in single-page apps.
PhoenixTokenAuth is a library that adds token-based authentication to Phoenix web applications using Ecto. It provides a complete solution for user registration, email confirmation, login, password reset, and account management, making it suitable for securing APIs, particularly for single-page applications.
Phoenix developers building APIs, especially for single-page applications, who need a pre-built authentication system with token-based security.
Developers choose PhoenixTokenAuth for its convention-over-configuration approach, which reduces boilerplate code by offering predefined routes and integrations for common authentication tasks, focusing on security and usability out of the box.
Token authentication solution for Phoenix. Useful for APIs for e.g. single page apps.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Handles user registration, email confirmation, login, logout, and password resets out of the box, reducing boilerplate for common API security needs.
Uses JSON Web Tokens for stateless authentication, making it suitable for securing APIs in single-page applications and mobile backends.
Provides predefined routes for authentication endpoints with the option to customize paths and pipelines, as shown in the README examples.
Supports sending confirmation and password reset emails via modules like Mailgun, with a mailing behaviour for custom implementations.
The author explicitly warns against new projects, stating it's not actively maintained, which risks security vulnerabilities and compatibility issues over time.
Admitted to be implemented when the author was new to Elixir, leading to suboptimal code that may require significant forking and refactoring.
TODO list includes essential gaps like cleaning expired tokens, merging configs, and providing example migrations, indicating the library is not fully polished.
Requires manual configuration of Joken for JWT signing and external services like Mailgun, adding integration overhead compared to more streamlined alternatives.