Tesla Authenticator is a secure, containerized authentication service for Tesla-related applications. Built using Rust, Actix Web, Diesel, and PostgreSQL, it enables secure user registration and login using JWT tokens. It also provides health checks, secure PostgreSQL authentication, and flexible environment configuration.
- User Authentication with username, email, and password
- JWT Session Management for stateless authentication
- PostgreSQL 17 integration with Diesel ORM
- Dockerized Deployment using Docker Compose
- Secure Configuration with
scram-sha-256enforced in PostgreSQL - Healthchecks to ensure readiness and liveness
Make sure the following are installed on your system:
- Docker
- Docker Compose
- Rust (optional, for local builds)
- Git
Tesla_Authenticator/
├── config/
8000
# Configuration files
│ └── pg_hba.conf # Custom PostgreSQL auth config
├── init/ # Initialization scripts
│ └── init-db.sh # PostgreSQL init script
├── migrations/ # Diesel DB migrations
├── src/ # Application source code
│ ├── config.rs # Env configuration loader
│ ├── db.rs # Database schema/models
│ ├── errors.rs # Error definitions
│ ├── handlers.rs # HTTP endpoints
│ ├── middleware.rs # JWT validation
│ ├── services/ # Business logic
│ │ └── auth.rs # Auth service logic
│ └── main.rs # App entry point
├── .env # Environment variables
├── Cargo.toml # Rust dependencies
├── Dockerfile # Auth service image
├── docker-compose.yml # Compose configuration
└── README.md # This file
git clone https://github.com/your-username/Tesla_Authenticator.git
cd Tesla_AuthenticatorCreate a .env file in the root directory:
JWT_SECRET=REPLACE_ME_BASE64_SECRET
SERVER_PORT=8080
POSTGRES_USER=user
POSTGRES_PASSWORD=securepassword
POSTGRES_DB=db
POSTGRES_HOST=0.0.0.0
POSTGRES_PORT=5432Create or modify config/pg_hba.conf:
# TYPE DATABASE USER ADDRESS METHOD
local all all scram-sha-256
host all all 0.0.0.0/0 scram-sha-256
host all all ::/0 scram-sha-256
docker-compose up --buildThis will:
- Build the Rust app
- Launch PostgreSQL 17
- Initialize the database
- Run migrations
- Visit:
http://localhost:8080 - Health check:
curl http://localhost:8080/health - Logs:
docker-compose logs
| Method | Endpoint | Description |
|---|---|---|
| POST | /auth/register |
Register a new user |
| POST | /auth/login |
Authenticate and get a JWT |
| GET | /health |
Healthcheck endpoint |
The app uses environment variables loaded in src/config.rs:
let user = env::var("POSTGRES_USER")?;
let password = env::var("POSTGRES_PASSWORD")?;
let host = env::var("POSTGRES_HOST").unwrap_or("localhost".to_string());
let port = env::var("POSTGRES_PORT").unwrap_or("5432".to_string());
let db = env::var("POSTGRES_DB")?;Located in init/init-db.sh. It validates required environment variables and creates the PostgreSQL user/database with detailed logs and error handling.
- Cannot connect to DB: Check Docker logs (
docker-compose logs db) - JWT validation fails: Ensure your
.envfile has a validJWT_SECRET - App fails on start: Check health logs or malformed
.envvalues
- Fork the repo
- Create your branch (
git checkout -b feature/xyz) - Commit your changes
- Push and open a PR
This project is under the MIT License. See LICENSE for details.