authweave-workload

Framework-neutral authentication for registered service applications and service, workload, or agent principals. Version 7 supports registered X.509 credentials, direct mTLS, and mTLS-bound access tokens issued by an external OAuth Authorization Server.

uv add 'authweave-workload[mtls,jwt]'

The base package never accepts or stores private keys and imports no web framework, ORM, or cryptography implementation.

Lifecycle mutations require a verified actor, a correlation ID, and an application recorder that writes the security event in the same transaction. X.509 registration accepts only opaque CertificateMetadata returned by validate_public_certificate; it cannot be built from unchecked fields.

The optional Litestar adapter accepts Envoy evidence only over an explicitly trusted TCP peer or permission-restricted Unix socket. Envoy's hex certificate fingerprint is normalized to canonical base64url, while revocation freshness comes from application-trusted CRL/control-plane metadata rather than an inbound request header.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

authweave_workload-7.0.0.tar.gz (46.3 kB view details)

Uploaded Jul 31, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

authweave_workload-7.0.0-py3-none-any.whl (33.8 kB view details)

Uploaded Jul 31, 2026 Python 3

File details

Details for the file authweave_workload-7.0.0.tar.gz.

File metadata

Download URL: authweave_workload-7.0.0.tar.gz
Upload date: Jul 31, 2026
Size: 46.3 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for authweave_workload-7.0.0.tar.gz
Algorithm	Hash digest
SHA256	`f877ad907a56d960ab2c9fbd354b4b4b13d2b48a4517e9c44dd7ff6c1057f038`
MD5	`925c5ea4e40115735276a301ef33ca80`
BLAKE2b-256	`6ce867128c0b6631b47318b38a7f8c4600177973b11b61f88941fae300b92840`

See more details on using hashes here.

Provenance

The following attestation bundles were made for authweave_workload-7.0.0.tar.gz:

Publisher: 3_release.yml on ZYLVEXT/litestar-auth

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: authweave_workload-7.0.0.tar.gz
- Subject digest: f877ad907a56d960ab2c9fbd354b4b4b13d2b48a4517e9c44dd7ff6c1057f038
- Sigstore transparency entry: 2298300347
- Sigstore integration time: Jul 31, 2026
Source repository:
- Permalink: ZYLVEXT/litestar-auth@a1968be76ff2bfbca1a10e71d07898db0c053a56
- Branch / Tag: refs/heads/main
- Owner: https://github.com/ZYLVEXT
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: 3_release.yml@a1968be76ff2bfbca1a10e71d07898db0c053a56
- Trigger Event: workflow_run