JWT

0 articles

NestJS JWT + RBAC Permission System in Practice: From Open APIs to Fine-Grained Access Control

The blog system's management interfaces have evolved from a completely open state to a two-tier protection system of JWT authentication + RBAC permissions, covering the complete implementation of AdminJwtAuthGuard, PermissionsGuard, @RequirePermission decorator, and RolePermissions configuration.

Security Protection

Full-Stack Authentication System — API JWT Dual Secret + Flutter AuthNotifier + admin-next Edge Middleware + Cookie Guard

Tracking the complete lifecycle of authentication tokens across three platforms: API issuance and verification (Passport JWT + Dual Secret Strategy) → Flutter secure storage and state machine refresh → admin-next Edge Middleware Cookie route guard and HTTP interceptor automatic refresh

Management Backend

Middleware JWT Route Guard — Authentication Defense Line Under Edge Runtime

The admin backend implements route-level JWT authentication guard via Middleware under Edge Runtime, performing server-side verification before requests reach the page, forming the first barrier of a two-layer security defense.

Management Backend