bluefox-auth 0.9.0

JWT authentication, user management, and authorization for Bluefox apps

bluefox-auth

JWT authentication, user management, and authorization for Bluefox apps.

Part of the Bluefox Stack.

Documentation · PyPI

---

Install

uv add bluefox-auth

---

One-liner setup

from bluefox_core import BluefoxSettings, create_bluefox_app
from bluefox_auth import BluefoxAuth

settings = BluefoxSettings()
app = create_bluefox_app(settings)
BluefoxAuth(app, settings)

This mounts all auth routes under /auth, configures JWT tokens, sets up cookie + Bearer authentication, and wires CSRF protection.

---

Protect routes

from fastapi import Depends
from bluefox_auth import current_active_user, BluefoxUser

@app.get("/dashboard")
async def dashboard(user: BluefoxUser = Depends(current_active_user)):
    return {"message": f"Hello, {user.email}"}

---

What you get

• User registration and login — bcrypt password hashing with timing-safe verification
• JWT access + refresh tokens — jti, iat, audience claims, configurable expiry
• Dual transport — Bearer header and HttpOnly cookies, auto-detected per request
• Refresh token rotation — family-based reuse detection revokes entire session on replay
• CSRF protection — plain double-submit cookie pattern, skipped for Bearer requests
• Password reset — stateless one-time-use tokens via async email hook
• Email verification — stateless one-time-use tokens via async email hook
• One-liner setup — BluefoxAuth(app, settings) wires everything

Endpoints

Endpoint	Method	Description
/auth/register	POST	Create a new user
/auth/login	POST	Authenticate and get tokens
/auth/refresh	POST	Rotate refresh token
/auth/logout	POST	Revoke token family
/auth/me	GET	Current user profile
/auth/password-reset	POST	Request password reset email
/auth/password-reset/confirm	POST	Confirm password reset
/auth/email-verification	POST	Request verification email
/auth/email-verification/confirm	POST	Confirm email verification

---

Documentation

Full docs at bluefox-auth.bluefox.software/docs/

• Getting started — install and configure
• Security — how authentication and authorization work
• API auth guide — Bearer token flow
• Cookie auth guide — browser cookie flow
• Reference — API documentation