agentity-auth

OIDC authentication plugin for Agentity. Verify human ownership of agent identities via Google, GitHub, Apple, and Microsoft login.

Installation

pip install agentity-auth

Usage

Mount the router on your FastAPI application:

from fastapi import FastAPI
from agentity_auth import router as auth_router

app = FastAPI()
app.include_router(auth_router)

Configuration

Set OAuth2 credentials as environment variables:

GOOGLE_CLIENT_ID=xxx.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=GOCSPX-xxx
GITHUB_CLIENT_ID=Ov23lixxx
GITHUB_CLIENT_SECRET=xxx
APPLE_CLIENT_ID=com.example
APPLE_CLIENT_SECRET=xxx  # client secret generated from private key
MICROSOFT_CLIENT_ID=xxx
MICROSOFT_CLIENT_SECRET=xxx

All providers are optional — only configure the ones you need.

Endpoints

Integration with registry

from fastapi import FastAPI
from agentity_registry.main import create_app
from agentity_auth import router as auth_router

app = create_app()                     # creates FastAPI with /register, /did, /revoke, etc.
app.include_router(auth_router)        # adds /auth/login, /auth/callback, /auth/me

Supported providers

Session model

class OwnerInfo(BaseModel):
    did: str              # did:agentity:human:{fingerprint}
    provider: str         # google | github | apple | microsoft
    provider_sub: str     # Provider's user ID
    email: str
    name: str
    verified: bool

License: Apache 2.0