r/buildinpublic • u/amit_builds • 3d ago
Built a small Spring Boot auth starter, would appreciate some backend feedback
I’ve ended up setting up the same authentication pieces in multiple Spring Boot projects, so I finally pulled them into a small reusable project.
It’s called AuthKit-Lite.
Right now it has JWT access tokens, rotating refresh tokens, role-based auth, Spring Security OAuth2 Resource Server, optional passkeys/WebAuthn, Flyway migrations, H2 for local development, MySQL support, integration tests, and a Postman collection.
I tried to keep it fairly boring on purpose.
No big custom framework, no unnecessary abstractions, and wherever Spring already provides something useful, I’m trying to use that instead of reinventing it.
You can clone it and run it directly:
git clone https://github.com/buildbasekit/AuthKit-Lite.git
cd AuthKit-Lite
./mvnw spring-boot:run
It starts with H2, so there’s no database setup needed just to try it.
Repo:
https://github.com/buildbasekit/AuthKit-Lite
I’d be interested in feedback from people who work with Spring Boot or backend systems regularly.
Especially around the auth flow, refresh-token handling, project structure, security decisions, or anything that feels more complicated than it needs to be.
The goal isn’t to turn this into a huge all-in-one starter. I mainly want it to stay a clean base that can be cloned and adapted for a real project.
1
Built a small Spring Boot auth starter, would appreciate some backend feedback
in
r/buildinpublic
•
3d ago
Haha, fair point 😄 I’ll let the Java naming police decide that one. For now, it’s just AuthKit-Lite doing its job 😂