AuthGuard

AuthGuard is a Python library for building TOTP and WebAuthn authentication flows.

It provides:

• TOTP enrollment, verification, and recovery-code helpers
• WebAuthn registration and authentication services
• in-memory, SQLite, Redis, and PostgreSQL storage backends
• a small, typed service surface built around a src/ package layout

Installation

Install the library:

pip install authguard

For local development:

pip install -e ".[dev]"

Quick Start

import asyncio

from authguard import AuthService, Config, MemoryStorage, User


async def main() -> None:
    storage = MemoryStorage()
    config = Config(
        RP_ID="example.com",
        RP_NAME="Example App",
        RP_ORIGINS=("https://example.com",),
    )
    auth = AuthService(storage=storage, config=config)

    user = User(id="user-123", name="alice@example.com", display_name="Alice")

    enrollment = await auth.totp.begin_enrollment(
        user_id=user.id,
        user_name=user.name,
    )
    print(enrollment.provisioning_uri)

    registration_options = await auth.webauthn.begin_registration(user=user)
    print(registration_options.rp.id)


asyncio.run(main())

Public API

Top-level imports:

from authguard import AuthService, Config, MemoryStorage, User, get_storage

Available storage backends:

• MemoryStorage
• SQLiteStorage
• RedisStorage
• PostgreSQLStorage

Running Tests

pytest -q tests/unit