A Blog full of Web Projects

A Blog full of Web Projects

Python FastAPI with PostgreSQL JWT Authentication using Refresh Token Rotation and Refresh Token Reuse Detection with HttpOnly Cookies

15-July-2026

A production-ready starter project showcasing secure JWT authentication with Refresh Token Rotation and Refresh Token Reuse Detection using HttpOnly cookies. It includes OpenAPI / Swagger, SQLAlchemy, Alembic, PostgreSQL, and is hosted on Vercel Cloud with Serverless Functions using a GitHub-based CI/CD workflow

The included Vue 3 SPA supports silent authentication, allowing users to stay signed in even after refreshing the browser

Try the OpenAPI demo...

Try the Vue 3 SPA demo...

The project demonstrates how to build a secure REST API with FastAPI and PostgreSQL using modern JWT authentication, HTTPS, and automated database migrations

CI/CD is implemented with VS Code, GitHub, and Vercel Cloud

The Web API on GitHub

The Vue 3 SPA on GitHub
A Blog made with Gatsby React and GraphQL