apptension/saas-boilerplate

The built-in authentication system in the SaaS Boilerplate includes the following features:

• Email/password authentication
• Social login (Google, Facebook)
• Two-factor authentication (2FA)
• Email verification
• Password reset
• Role-based access control (Owner, Admin, Member)
• User profile management

Additional built-in capabilities include:

• Translations & i18n: Dynamic i18n with cloud publishing, AI-powered translation, and build-time sync.
• CMS Integration: Contentful integration for managing marketing content and blog posts.
• Admin Panel: Django admin with custom actions for user and system administration.
• Asset Management: S3-based file storage with secure upload/download and CDN distribution.
• CRUD Generator: Plop-based generators for scaffolding new features and components.

The SaaS Boilerplate comes with several production-ready features pre-configured:

• Authentication: Supports email/password, social login, 2FA, and email verification.
• Multi-tenancy: Includes team workspaces with role-based access control (RBAC).
• Payments: Integrated with Stripe for subscriptions and one-time payments.
• Notifications: Real-time in-app notifications system.
• GraphQL API: Type-safe API with automatic code generation.
• CI/CD Pipeline: Automated deployment workflows to AWS.

The built-in Stripe integration in the SaaS Boilerplate includes:

• Payment method management (cards)
• Subscription plans (Free, Monthly, Yearly)
• One-time payments
• Transaction history
• Webhook handling
• Customer portal integration

The architecture consists of three primary services:

1. Web Application: A React/TypeScript/Vite frontend using Apollo Client for GraphQL state management and shadcn/ui (via webapp-core) for components.
2. Backend API: A Django-based service using Graphene for GraphQL, PostgreSQL for data, and JWT for authentication. The admin panel is accessible at admin.localhost:5001 during local development.
3. Async Workers: Handles background tasks. Locally, this uses Celery with a Redis broker. In production, it uses AWS Lambda triggered by EventBridge.

The SaaS Boilerplate includes a built-in in-app notification system designed to inform users of important updates and actions.

Key features include:

• Notification Icon: A visual indicator in the top right corner of the application that shows unread notification counts.
• Notification List: A customizable list view where users can view notifications and mark all as read.
• Real-time Updates: The notification status and list are synchronized in real-time using GraphQL subscriptions over WebSocket communication.

The boilerplate provides built-in infrastructure and DevOps capabilities:

• Infrastructure as Code (IaC): AWS CDK-based infrastructure definitions for reproducible, version-controlled deployments.
• CI/CD Pipeline: Automated testing, building, and deployment via GitHub Actions or BitBucket Pipelines.
• Async Workers: Celery-based background job processing for emails, webhooks, and heavy computations.
• GraphQL API: Type-safe API featuring automatic TypeScript code generation and Apollo Client integration.

The SaaS Boilerplate provides a comprehensive Enterprise SSO solution including:

• SAML 2.0: Industry-standard protocol (Okta, Azure AD, OneLogin).
• OpenID Connect (OIDC): Modern OAuth-based SSO.
• SCIM 2.0: Automated user provisioning and directory synchronization.
• Just-in-Time (JIT) Provisioning: Automatic user creation upon first SSO login.
• Group-to-Role Mapping: Mapping IdP groups to tenant roles.
• Session Management: Viewing and revoking active sessions.
• Device Management: Tracking and managing trusted devices.
• WebAuthn/Passkeys: Passwordless authentication using biometrics or security keys.