authweave-otel

OpenTelemetry API-only security observability facade for the AuthWeave authentication stack.

authweave-otel depends only on opentelemetry-api and authweave-core. It never installs an SDK, exporter, sampler, propagator, or service.name. Without a configured SDK every span and metric is a no-op, so instrumentation is safe and free by default.

The application owns the TracerProvider/MeterProvider, sampling, export, and retention. Construct AuthWeaveTelemetry with global or explicit providers and pass it into your AuthWeave adapter configuration. LitestarAuth creates only INTERNAL child security spans inside the server span produced by normal ASGI instrumentation; it never creates a second HTTP span:

from authweave_otel import AuthWeaveTelemetry
from litestar_auth import LitestarAuthConfig

telemetry = AuthWeaveTelemetry()
config = LitestarAuthConfig(
    # normal required configuration omitted
    observer=telemetry,
)

The same observer can be passed to the HTTP-signature/webhook verifier and webhook sender constructors. verify(..., links=(TraceCorrelation(...),)) and send(..., links=...) attach retry/async causal links without accepting trace context as identity. Direct operation_span() and metric methods remain available for application-owned operations.

Privacy and abuse resistance

Attribute keys are allowlisted (authweave.* catalog only).
Values are truncated to 64 characters and redacted when they match secret canaries (tokens, cookies, PEM headers, payment fragments).
Unknown reason codes collapse to _OTHER so hostile input cannot grow label cardinality.
Baggage extraction/forwarding defaults to off (DEFAULT_TRACE_CONTEXT_POLICY); remote parents are never trusted identity.
Telemetry never participates in authentication, authorization, replay, or idempotency decisions. Collector/exporter outage must not change auth results.
Workload SecurityEvent values receive the active trace_id/span_id for lookup only. The mandatory event callback remains the durable audit channel.

Catalog and reference stack

Span names, metric names, units, and attribute keys are a versioned catalog. See authweave_otel.catalog; renames and cardinality growth are breaking changes.

A non-production Collector/Prometheus/Tempo/Grafana stack lives at docker/reference/observability/. Run sh docker/reference/observability/verify.sh for the synthetic smoke test and golden Prometheus name checks after the pinned OTel→Prometheus translation.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

authweave_otel-8.0.0.tar.gz (10.3 kB view details)

Uploaded Aug 24, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

authweave_otel-8.0.0-py3-none-any.whl (12.4 kB view details)

Uploaded Aug 24, 2026 Python 3

File details

Details for the file authweave_otel-8.0.0.tar.gz.

File metadata

Download URL: authweave_otel-8.0.0.tar.gz
Upload date: Aug 24, 2026
Size: 10.3 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for authweave_otel-8.0.0.tar.gz
Algorithm	Hash digest
SHA256	`e35c6a87d3cff1d26cce056637b1f82e35768088b7cbaabf3a4dc9174524fd74`
MD5	`288aabd4a52ada63c2ef89e4ef29cabd`
BLAKE2b-256	`3c41f0c11f416cc5ad8fd570f03477196279faa69509d6ed33e64931dc0decdf`

See more details on using hashes here.

Provenance

The following attestation bundles were made for authweave_otel-8.0.0.tar.gz:

Publisher: 3_release.yml on ZYLVEXT/litestar-auth

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: authweave_otel-8.0.0.tar.gz
- Subject digest: e35c6a87d3cff1d26cce056637b1f82e35768088b7cbaabf3a4dc9174524fd74
- Sigstore transparency entry: 2579611450
- Sigstore integration time: Aug 24, 2026
Source repository:
- Permalink: ZYLVEXT/litestar-auth@407607d5e0dbcf8ef1f295e0e6e43867dfb2b65d
- Branch / Tag: refs/tags/8.0.0
- Owner: https://github.com/ZYLVEXT
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: 3_release.yml@407607d5e0dbcf8ef1f295e0e6e43867dfb2b65d
- Trigger Event: workflow_dispatch