Skip to main content

Quick Start

Set up Nuxt Secure locally and run your first login in minutes.

Authentication

Learn how JWT authentication and Cloudflare Turnstile protect your app.

User Management

Create, edit, and deactivate users with profile photo support.

Permissions Matrix

Configure granular CRUD-level access per profile and module.

What is Nuxt Secure?

Nuxt Secure is a responsive corporate web application designed for secure access administration. It provides a complete identity and access management (IAM) solution for organizations that need to control which users can read, create, edit, or delete data in each part of the application. The system is built on top of Nuxt.js 4 with server-side API routes, a PostgreSQL database (via Neon serverless), and Drizzle ORM. Authentication is powered by JSON Web Tokens (JWT) and protected against bots with Cloudflare Turnstile CAPTCHA.

Core capabilities

JWT Authentication

Secure cookie-based sessions with 8-hour token expiry and global route protection middleware.

Role-Based Access Control

Every action — view, add, edit, delete, detail — is gated per profile and per module.

User Administration

Full CRUD for users including status management (active/inactive) and avatar uploads via Cloudinary.

Profile Management

Define roles (profiles) with an administrator flag and assign them to users.

Module Registry

Register application modules and control access to them through the permissions matrix.

Permissions Matrix

A visual editor to assign bitwise permissions (add, edit, query, delete, detail) to any profile-module combination.

Technology stack

LayerTechnology
FrameworkNuxt.js 4 + Vue 3
LanguageTypeScript
StylingTailwind CSS
DatabasePostgreSQL (Neon Serverless)
ORMDrizzle ORM
AuthJSON Web Tokens (jsonwebtoken)
Password hashingbcrypt
CAPTCHACloudflare Turnstile
Image hostingCloudinary

Environment setup

Configure all required environment variables before running the app.

Architecture

Understand the full-stack layout of Nuxt Secure.

RBAC system

Deep dive into how permissions are evaluated at runtime.

API Reference

Browse all server API endpoints with request/response documentation.

Build docs developers (and LLMs) love