The auth tax
Every new SaaS rebuilds the same flows: sign up, sign in, password reset, OAuth callback, JWT refresh, and guarded API routes. Teams typically spend 2–4 weeks before writing product code.
What Framework includes
The authentication module ships:
- Email/password and Google OAuth
- JWT access + refresh tokens
- Auth guards in NestJS and Hasura permissions aligned with user identity
- Pre-wired routes in app and service
Build vs fork
| Task | From scratch | Framework |
|---|---|---|
| Auth flows | 1–2 weeks | Day 1 |
| OAuth setup | 2–3 days | Env swap |
| Token refresh | 2–3 days | Included |
| Hasura permissions | 1 week | Included |
When to customize
Fork the boilerplate and extend apps/service auth modules for your domain rules. You rarely need to replace the foundation — only add business-specific guards or SSO providers.
Conclusion
Auth is solved infrastructure. Framework lets you skip the tax and ship your differentiation faster.