Authentication System for NestJS SaaS

Every auth pattern your SaaS needs — JWT with refresh token rotation, Google OAuth, two-factor authentication, magic links, email verification, and account security. All production-tested and ready to customize.

Building authentication from scratch takes 2-4 weeks and is the #1 source of security vulnerabilities in SaaS applications. The Cloudrix SaaS Starter Kit gives you a battle-tested auth system built on NestJS, Passport.js, and bcrypt, with a clean Angular frontend. Every flow — registration, login, password reset, email verification — is fully implemented with proper error handling and security best practices.

// Protect any endpoint with a single decorator
@UseGuards(JwtAuthGuard)
@Get('profile')
getProfile(@CurrentUser() user: User) {
  return { id: user.id, email: user.email };
}

// Require 2FA verification
@UseGuards(JwtAuthGuard, TwoFactorGuard)
@Post('transfer')
transferFunds(@Body() dto: TransferDto) {
  // Only runs if user passed 2FA
}