Skip to content

Case Study / Web Application

SecureAuth / 3 weeks

Next.js Auth Without an ORM

A production-grade authentication starter for Next.js — NextAuth sessions, bcrypt-hashed credentials and a Postgres schema, with no ORM in sight.

  • 0 ORM dependencies. NextAuth + plain SQL for the whole auth layer.
  • Postgres Serverless-ready. Works with Neon and @vercel/postgres.
  • Full Setup documentation. SETUP.md walks through schema and environment.
  • Next.js
  • NextAuth
  • PostgreSQL
  • bcrypt
  • Neon
SecureAuth — Next.js Auth Without an ORM

Overview

Client Overview

Personal project — reusable auth starter

Services provided

  • Full-Stack Web Development
  • Custom Software Development
Client
Personal project — reusable auth starter
Industry
Software
Timeline
3 weeks
Year
2025
Platforms
Web application
Team
1 engineer

Challenge

Business Challenge

The situation before the engagement, in the client's terms.

Most Next.js auth tutorials lean on Prisma. This starter deliberately does not — proving that sessions, hashing and Postgres can be wired cleanly by hand.

  • 01

    ORM-free

    NextAuth and plain SQL instead of a generated client.

  • 02

    Security basics

    Hashing and sessions done properly from line one.

  • 03

    Onboarding

    A setup guide any team can follow.

Objectives

Engagement Objectives

What the build needed to achieve before implementation began.

  • Prove production auth is possible without an ORM

  • Hash credentials and manage sessions properly

  • Ship the schema and setup guide with the repo

  • Keep the auth screens as polished as the product

Solution Design

How We Solved It

The approach that addressed each challenge above.

The starter walks the boring path correctly: NextAuth for sessions, bcryptjs for credentials, and a hand-written schema for Postgres.

  • 01

    Proven sessions

    NextAuth handles the session lifecycle.

  • 02

    Safe credentials

    Passwords hashed with bcryptjs.

  • 03

    Plain SQL

    Schema and setup script ship with the repo.

  • 04

    Good-looking screens

    Auth UI that matches the product, not a tutorial.

Capabilities

Key Features

What SecureAuth does in day-to-day use.

  • NextAuth sessions

    Battle-tested session management without an ORM.

  • Hashed credentials

    bcryptjs password hashing out of the box.

  • Plain SQL schema

    A hand-written Postgres schema with setup script.

  • Polished auth screens

    Sign-up and login with motion and icon polish.

  • Startup guide

    SETUP.md and SQL walk any team through booting it.

Technology Stack

Technology Stack

  • Next.js
  • React
  • Tailwind CSS
  • Framer Motion
  • lucide-react
  • NextAuth
  • bcryptjs
  • Session handling
  • Neon PostgreSQL
  • @vercel/postgres
  • pg
  • Plain SQL schema
  • Setup guide

Outcome

Results & Outcome

What changed for the business after launch.

  • 0

    ORM dependencies

    NextAuth + plain SQL for the whole auth layer.

  • Postgres

    Serverless-ready

    Works with Neon and @vercel/postgres.

  • Full

    Setup documentation

    SETUP.md walks through schema and environment.

Interface

A Closer Look

Screens from the delivered system.

  • Auth flow
    NextAuth session management without an ORM.
  • Session handling
    bcrypt-hashed credentials end to end.
  • Postgres schema
    Plain SQL schema with setup guide.

Conclusion

The Result

The auth starter proved that a production-grade authentication flow can run without an ORM — NextAuth sessions, hashed credentials and a Postgres schema that any team can pick up.

  • 0 ORM dependencies: NextAuth + plain SQL for the whole auth layer.
  • Postgres Serverless-ready: Works with Neon and @vercel/postgres.
  • Full Setup documentation: SETUP.md walks through schema and environment.

More work

Related Projects

Other systems built on similar foundations.

  • Abstract layout of a customer relationship platform with linked record panels

    SaaS / AI

    Smart CRM

    A multi-tenant CRM with AI assistance built into the record, summarising history and surfacing the next action for every account.

    • Next.js
    • TypeScript
    • PostgreSQL
    • OpenAI
    • +1

    View Case Study

  • Abstract representation of document parsing into structured candidate profiles

    AI / Web Application

    AI Resume Platform

    A web platform that parses resumes into structured data, matches candidates to roles with an explainable score, and generates tailored documents.

    • Next.js
    • Python
    • FastAPI
    • OpenAI
    • +1

    View Case Study

Next step

Want a System Like This?

Tell us what your business needs to automate and we'll map out a practical build.

hello@thedevrox.comWe reply to every enquiry within one business day.