nextjs-nestjs-oauth-rbac-boilerplate

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

Next.js, NestJS, Express

Database / ORM

MongoDB (Mongoose), Kysely, node-postgres

UI

Tailwind CSS, Radix UI

Email

Nodemailer

Testing

Vitest, Jest, Playwright

i18n

next-intl

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• API
  Runtime auth method discoveryDynamic runtime auth method discovery via `GET /api/auth/methods`
• API
  Swagger documentationSwagger documentation: http://localhost:5001/api/docs
• Auth
  Email/password with verificationEmail and password registration with a 6-digit verification code sent by email
• Auth
  Magic link sign-inMagic link sign-in sent by email
• Auth
  Native email sign-in codesSign-in codes sent by email to native apps
• Auth
  TOTP two-factor authTwo-factor authentication (TOTP) with single-use recovery codes
• Auth
  Passkey WebAuthn loginPasskey (WebAuthn) registration and authentication
• Auth
  OAuth/OIDC providersOAuth and OIDC providers discovered from backend configuration
• Auth
  Dynamic RBACDynamic role-based access control with role hierarchy, custom permissions, and direct user overrides
• Auth
  Multi-session managementMulti-session management with device, browser, OS, and IP tracking
• Auth
  OAuth account linkingAccount linking across configured OAuth providers
• Auth
  Rotating native tokensReact Native clients use rotating access and refresh tokens, with optional device binding
• Data
  MongoDB or PostgreSQLChoose MongoDB or PostgreSQL before configuring the backend
• Deploy
  Docker startupStart with Docker

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.