go-web-starter

An opinionated web app starting point.

Tools

• Go server-rendered pages, backed by Postgres
• Web framework: Gin
• Validations: govalidator
• Query building: sqlx and squirrel
• Minimal CSS, no frameworks
• Frontend interactivity with htmx

Security

• Cross-site request forgery (CSRF)
• Cross-origin resource sharing (CORS)
• A bunch of other security headers
  • HTTP strict transport security (HSTS)
  • Content security policy (CSP)
  • Mime type sniffing
  • Frame blocking
  • Cross origin resource policy
  • Cross origin opener policy

Features

• Session handling
• Basic email service
• Passwordless login