SAST Link is the unified identity authentication center and personnel information management system.
cp .env.example .env
# Generate an Ed25519 private key and paste it into JWT_SECRET_KEY in .env
openssl genpkey -algorithm ED25519 -out jwt.key
docker compose up -dCompose starts PostgreSQL and Redis and applies database migrations automatically. Verify:
curl http://127.0.0.1:8080/health
# {"status":"ok","db":"ok","redis":"ok"}- Login & accounts: password login, two-step email registration, password reset, GitHub and Feishu sign-in
- Standard auth protocol: OAuth 2.1 / OIDC for third-party apps to integrate login, token refresh, and user info
- Account security: argon2id password hashing, Ed25519 token signing, revoke all sessions on password change
- Self-service: profile management, third-party account binding, device management, avatar upload
- Admin console: user management, OAuth client configuration, audit logs
- Operations: PostgreSQL 16 + Redis 8, one-command Compose startup, built-in health check
- API Documentation: endpoints, response format, and business error codes
- OpenAPI Specification: machine-readable API contract
Other documents — product requirements, database design, deployment guides — live in docs/.
go test -race -shuffle=on ./...
golangci-lint run ./...Contributing Guide · Code of Conduct · Security Policy
MIT © NJUPT SAST