aegis 0.3.1

Authentication library for aiohttp

aegis allows to protect endpoints and also provides authentication scoping.

---

Installation

pip install aegis

Simple Example

# examples/login_required.py
from aiohttp import web
from aegis import auth
from aegis.authenticators.jwt import JWTAuth


DATABASE = {
    'david': {'id': 5, 'scopes': ('user',)}
}


class MyAuth(JWTAuth):
    jwt_secret = "test"

    async def authenticate(self, request: web.Request) -> dict:
        payload = await request.json()
        user = DATABASE.get(payload['username'])
        return user


async def public(request):
    return web.json_response({'hello': 'anonymous'})


@auth.login_required
async def protected(request):
    return web.json_response({'hello': 'user'})


def create_app():
    app = web.Application()

    app.router.add_get('/public', public)
    app.router.add_get('/protected', protected)

    MyAuth.setup(app)
    return app


if __name__ == '__main__':
    app = create_app()
    web.run_app(app)

Get access token

curl -X POST http://0.0.0.0:8080/auth -d '{"username": "david"}'


{"access_token": "<access_token>"}

Get user

curl http://0.0.0.0:8080/me -H 'Authorization: Bearer <access_token>'


{"id": 5, "scopes": ["user"], "exp": 1553753859}

Test

git clone https://github.com/mgurdal/aegis.git
cd aegis
make cov

Requirements

• Python >= 3.6

• aiohttp

• PyJWT

License

aegis is offered under the Apache 2 license.