oqtopus-auth

Overview

OQTOPUS Auth is a framework-agnostic authentication and authorization library for the OQTOPUS ecosystem. It ships pluggable authentication providers (disabled auth, and reverse-proxy-injected JWT headers) plus a role/permission model, with an optional FastAPI integration.

Features

• Pluggable providers: none (disabled auth) and header (JWT read from a reverse-proxy-injected header, with optional JWKS signature verification).
• Framework-agnostic core: providers, configuration models, and permission checks have no dependency on any web framework.
• Optional FastAPI integration: middleware and Depends-based role and permission checks, installed via the fastapi extra.

Usage

• Getting Started
• Authentication

API reference

• API reference

Developer Guidelines

• Development Flow
• Setup Development Environment
• How to Contribute
• Code of Conduct
• Security

Citation

You can use the DOI to cite oqtopus-auth in your research.

Citation information is also available in the CITATION file.

Contact

You can contact us by creating an issue in this repository or by email:

• oqtopus-team[at]googlegroups.com

License

oqtopus-auth is released under the Apache License 2.0.