Authentication

User Model

Built-in Model

Runique includes a ready-to-use user model that requires no configuration.

Generated table: eihwaz_users

Field	Type	Description
`id`	`Pk`	Primary key (`i32` by default, `i64` with the `big-pk` feature)
`username`	`String`	Unique username
`email`	`String`	Email address
`password`	`String`	Argon2 hash — never stored in plain text
`is_active`	`bool`	Account active
`is_staff`	`bool`	Admin panel access (limited)
`is_superuser`	`bool`	Full access, bypasses all rules
`roles`	`String`	Custom roles (nullable)
`created_at`	datetime	Creation timestamp
`updated_at`	datetime	Last update timestamp

To create the first superuser:

runique create-superuser

i64 primary key (BigAutoField)

By default, the primary key is i32. To switch to i64:

# project Cargo.toml
runique = { version = "...", features = ["big-pk"] }

RuniqueUser Trait

If you use your own user model instead of the built-in one, you must implement RuniqueUser.

use runique::middleware::auth::RuniqueUser;
use runique::prelude::Pk;

impl RuniqueUser for users::Model {
    fn user_id(&self) -> Pk      { self.id }
    fn username(&self) -> &str       { &self.username }
    fn email(&self) -> &str          { &self.email }
    fn password_hash(&self) -> &str  { &self.password }
    fn is_active(&self) -> bool      { self.is_active }
    fn is_staff(&self) -> bool       { self.is_staff }
    fn is_superuser(&self) -> bool   { self.is_superuser }

    // Optional — custom admin access logic
    fn can_access_admin(&self) -> bool {
        self.is_active() && (self.is_staff() || self.is_superuser())
    }
}

Required Methods

Method	Return	Description
`user_id()`	`Pk`	Unique identifier
`username()`	`&str`	Username
`email()`	`&str`	Email address
`password_hash()`	`&str`	Password hash
`is_active()`	`bool`	Account is active
`is_staff()`	`bool`	Limited admin access
`is_superuser()`	`bool`	Full admin access

Methods With Default Implementation

Method	Default	Description
`roles()`	`vec![]`	Custom roles
`can_access_admin()`	`is_active && (is_staff \|\| is_superuser)`	Admin access logic