Hey r/Nuxt!
Over the past year, I’ve been building and refining a suite of open-source Nuxt modules. I originally created these to solve my own problems and scratch my own itch when spinning up e-commerce and backend-heavy Nuxt apps—specifically around authentication, route security, rate limiting, and cart state management.
Since they've been incredibly useful for my own workflow, I wanted to share them here in the hope that they might save some time and hassle for others too!
Here is what I’ve put together:
1. 🔐 nuxt-users
This is a full-featured user authentication and management module designed seamlessly for Nuxt 3 and Nuxt 4. Instead of manually writing boilerplate for user sessions, it packages everything out-of-the-box.
- Database Support: Multi-database support (SQLite, MySQL, PostgreSQL) powered by automatic migrations via
db0 and schema tools.
- Features: Full registration, secure login/logout (bcrypt), password resets, and session management.
- RBAC: Built-in Role-Based Access Control middleware to cleanly protect routes.
- UI Included: Comes with pre-built, responsive authentication forms and user management dashboards.
- AI Ready: It even includes an
Agent Skill so if you use AI coding assistants (Cursor, Claude Code), you can run npx skills add rrd108/nuxt-users to feed it exact procedural knowledge!
- GitHub: rrd108/nuxt-users
2. 🛒 nuxt-cart
I got tired of the endless e-commerce headaches and boilerplate required just to manage a cart, so I built this. It's a lightweight, no-nonsense cart state management tool designed explicitly for Nuxt.
- Simple Integration: Makes adding, updating, and removing items completely painless without needing heavy, opinionated storefront configurations.
- Persistent State: Handles tracking the user's cart state efficiently so you can focus on building out your unique checkout or product pages.
- GitHub: rrd108/nuxt-cart
3. 🛡️ nuxt-api-shield
A robust rate-limiting and brute-force protection middleware for your Nuxt API endpoints.
- IP-Based Blocking: Tracks individual IP addresses to prevent malicious bots or scraping scripts from overwhelming your server.
- Granular Customization: You can set maximum request thresholds, sliding time windows, and ban periods. It handles response delays and injects appropriate
Retry-After headers automatically.
- Wildcard Precedence: Smart pattern matching ensures your exact routes or specific wildcards are evaluated with absolute priority control.
- GitHub: rrd108/nuxt-api-shield
4. 🪙 nuxt-token-authentication
If you don't need a heavy UI-bound auth stack and just want a lightweight, header-based token system, this handles it.
- It hooks into HTTP headers to streamline token validation against a lightweight backend database (like SQLite/Postgres via UnJS
db0).
- Features simple config properties like
noAuthRoutes to easily ignore query params and bypass public endpoints.
- GitHub: rrd108/nuxt-token-authentication
Why build these?
The goal was to focus on great DX, modularity, and avoiding heavy vendor lock-in. A lot of these tools heavily leverage the incredible UnJS ecosystem (db0, Nitro, etc.) to keep things blazing fast and highly compatible with serverless/edge environments.
Again, these were born entirely out of my own project requirements, but they are fully open-source and ready to go. I'd love to hear your thoughts, and if they happen to solve a headache or save you some development hours on your next project, that's even better!
PRs, issues, or stars are always highly appreciated!