Golang Gin Boilerplate v3

The fastest way to deploy a RESTful API with Gin Framework — structured with PostgreSQL, JWT authentication stored in Redis, and ready to build on.

What's Included

• sqlx: Lightweight SQL extensions for Go
• jwt-go: JSON Web Tokens (JWT) middleware
• go-redis: Redis client
• maroto: Pure Go PDF generation
• Built-in CORS, RequestID, and Auth middleware
• Built-in custom form validators with reusable error translation
• Invoice example — HTML preview and PDF download
• Swagger API documentation
• PostgreSQL with JSON/JSONB queries and trigger functions
• SSL support
• Go Modules

Getting Started

Prerequisites

• Go 1.24+
• PostgreSQL
• Redis

Setup

Clone the repository:

git clone https://github.com/Massad/gin-boilerplate.git
cd gin-boilerplate

Install dependencies:

go mod download

Set up your environment:

cp .env_rename_me .env
# Edit .env with your database credentials

Import the database schema:

psql -U postgres -h localhost < ./db/database.sql

The database includes trigger functions (created_at_column() and update_at_column()) that automatically manage created_at and updated_at timestamps on the user and article tables.

Running

make run

Or directly:

go run *.go

Building

go build -v
./gin-boilerplate

Testing

Tests are integration tests that require running PostgreSQL and Redis:

go test -v -tags=all ./tests/*

SSL (Optional)

To enable SSL, set SSL=TRUE in .env and generate certificates:

mkdir cert/
sh generate-certificate.sh

To disable SSL, set SSL=FALSE in .env.

API Endpoints

User

Article

Auth

Invoice (Example)

Swagger Docs

Generate and view API documentation:

make generate_docs
make run

Then open: https://localhost:9000/swagger/index.html

Invoice Demo

Once the server is running, open the invoice preview in your browser:

http://localhost:9000/v1/invoice

The page shows an HTML invoice with a Download PDF button that generates a PDF using maroto (pure Go, no external dependencies).

Trusted Proxies & CORS

By default, SetTrustedProxies(nil) is configured — Gin will not trust any proxy headers. If you deploy behind a reverse proxy (nginx, CloudFlare, etc.), set your trusted proxy IPs:

r.SetTrustedProxies([]string{"192.168.1.0/24", "10.0.0.0/8"})

CORS is configured in middleware/cors.go. Update the Access-Control-Allow-Origin header for your domain in production.

Authentication

This boilerplate uses Bearer Token authentication:

1. Login returns an access_token (15 min) and refresh_token (7 days)
2. Include the access token in requests: Authorization: Bearer <access_token>
3. When the access token expires, use /v1/token/refresh with the refresh token to get new tokens
4. Both tokens are stored in Redis and invalidated on logout

Project Structure

controllers/    HTTP handlers
models/         Database structs and queries (sqlx + raw SQL)
forms/          Request validation structs and reusable error translation
middleware/     CORS, RequestID, and JWT auth middleware
invoice/        Invoice HTML/PDF generation example
db/             PostgreSQL and Redis initialization
docs/           Swagger documentation (auto-generated)
public/         Static files and HTML templates

Adding a New Resource

1. Create a model in models/ with your SQL queries
2. Create form structs in forms/ with binding tags and a ValidationMessages map
3. Create a controller in controllers/ — use forms.Translate(err, messages) for validation errors
4. Register routes in main.go
5. Run make generate_docs to update Swagger

Previous Versions

• v2.0 — JWT authentication with Redis (current architecture)
• v1.x — Session/cookie authentication (v1 branch)

License

MIT