Auth
JWT authentication with bcrypt, rate limiting, and user enumeration prevention.
Explicit dependencies, security-first, AI-friendly. Copy production-ready code into your project and own every line of it.
Every module ships as standalone, standard-library-first Go code. Copy what you need, adapt the config, and ship.
JWT authentication with bcrypt, rate limiting, and user enumeration prevention.
Generic CRUD operations with pagination, sort/filter whitelist, SQL injection prevention.
database/sql setup, transactions, and whitelisted query fragments.
Recovery, CORS, logging, timeout, request ID, body size limit.
Role-based access control with wildcard permissions and hierarchy inheritance.
Fixed window, sliding window, and token bucket algorithms with LRU eviction.
Chainable request validation with regex DoS prevention and panic recovery.
Secure file upload with magic bytes validation and path traversal prevention.
Liveness/readiness probes with SSRF protection.
Generic TTL + LRU in-memory cache with background cleanup.
Offset/limit and cursor pagination with base64 validation.
SMTP email with templates, header injection prevention, and async queue.
SQL migration runner with checksums, transactions, and safe file validation.
Prometheus HTTP metrics with route cardinality limits and label sanitization.
RFC 9457 API error responses with panic recovery and safe details.
Install the CLI, list the registry, and graft a module straight into your project. Scion copies source files and writes .scion-module.json metadata for later comparison — it never edits your go.mod automatically.
# Install the CLI (Go 1.22+)go install github.com/DarkInno/scion/cmd/scion@latest # Browse available modulesscion listscion info auth # Preview, then copy a module into your projectscion add cache --dry-runscion add cache # Compare local copy against the upstream templatescion diff cacheBackend modules share 80% of their skeleton across projects. Instead of installing a framework, copy pre-built, production-ready modules and own every line of code.
Every line is yours after copying. No black-box framework.
Standard library by default; security exceptions are declared.
Input validation, rate limiting, injection prevention built in.
__llms__.md files let AI assistants understand modules quickly.