authfort-service 0.0.4

Lightweight JWT verification for AuthFort-powered microservices

authfort-service

Lightweight JWT verification for microservices powered by AuthFort.

Install

pip install authfort-service[fastapi]

Quick Start

from authfort_service import ServiceAuth
from fastapi import FastAPI, Depends

service = ServiceAuth(
    jwks_url="https://auth.example.com/.well-known/jwks.json",
    issuer="authfort",
)

app = FastAPI()

@app.get("/api/data")
async def protected(user=Depends(service.current_user)):
    return {"user_id": user.sub, "roles": user.roles}

@app.get("/api/admin")
async def admin_only(user=Depends(service.require_role("admin"))):
    return {"message": "admin access"}

Features

• JWKS fetching with automatic caching and refresh
• JWT signature verification (RS256)
• Token introspection client (optional real-time validation)
• FastAPI integration (current_user, require_role dependencies)
• No database required

With Introspection

service = ServiceAuth(
    jwks_url="https://auth.example.com/.well-known/jwks.json",
    issuer="authfort",
    introspect_url="https://auth.example.com/auth/introspect",
    introspect_secret="shared-secret",
)

# Real-time validation (checks ban status, token version, fresh roles)
result = await service.introspect(token)

License

MIT