Backend Security Starter Pack — Auth RBAC + Redis Rate Limiter
The complete production API protection suite. Combines Enterprise Auth & RBAC with Upstash Redis Rate Limiting.
Key Capabilities & Architecture
Dual-Token Auth + Prisma ORM (Product 02)
Complete JWT access + refresh rotation, bcrypt password security, Admin/Editor/User hierarchy, and PostgreSQL/MySQL/SQLite persistence.
Sliding-Window Redis Rate Limiter (Product 07)
True sliding-window rate limiting on Upstash Redis with burst tolerance buffer, CIDR subnet whitelisting, and fail-open resilience.
Unified Backend Security
Integrates anti-brute-force rate limiting directly with dual-token authentication to protect your entire API perimeter.
Quick Setup & Installation Instructions
- Extract bundle ZIP containing 02-auth-rbac-boilerplate and 07-api-rate-limiter-redis
- Configure environment variables using .env.example templates in both directories
- Place rate limiter middleware on your Express router ahead of auth endpoints
- Run npx prisma db push in 02-auth-rbac-boilerplate to initialize user authentication schema
Verified Compatibility & Requirements
One-time purchase • Unlimited commercial use • Instant download
Included in Your Download ZIP
- └─02-auth-rbac-boilerplate/ (Full Auth suite + Prisma adapter)
- └─07-api-rate-limiter-redis/ (Sliding-window Redis limiter)
- └─README.md (Bundle integration guide)
Frequently Asked Questions
Technical specifics and licensing details for this product.
Can these two products be used in the same Express application?
Yes! They are designed to complement each other seamlessly. Place the rate limiter on your /api/auth routes to prevent brute-force attacks while authenticating requests with the RBAC middleware.