Features

This chapter covers the core features and capabilities of SaaS Boilerplate.

Features

• User management — Registration, authentication, password hashing (PBKDF2-HMAC-SHA256)
• Role-based access control — Admin, member, and viewer roles with permission checks
• Multi-tenant scaffolding — Tenant context, per-tenant data isolation
• Application settings — JSON-persisted settings with defaults and validation
• Session management — Token-based sessions with expiration and rotation
• Audit logging — Structured log of all user and system operations
• HTTP server — Built-in routing with middleware pipeline
• Configuration — Environment variables or JSON config file

Requirements

• Python 3.10+
• No external dependencies (stdlib only)

Quick Start

Follow this guide to get SaaS Boilerplate up and running in your environment.

Quick Start

# Start the server with demo data
python src/main.py --init-demo

# Start on a custom port
python src/main.py --port 9000

# Start clean (no demo data)
python src/main.py

Then open http://localhost:8000 and try the API:

# Register a user
curl -X POST http://localhost:8000/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{"email": "admin@example.com", "password": "changeme123", "name": "Admin"}'

# Login
curl -X POST http://localhost:8000/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email": "admin@example.com", "password": "changeme123"}'

# List users (requires auth token from login response)
curl http://localhost:8000/api/users \
  -H "Authorization: Bearer <token>"

API Endpoints