🔒 DJ-Auth

A production-ready Python authentication engine — OAuth 2.1, OIDC, JWT, Argon2, token rotation, and JWKS out of the box.

✨ Features

• 🔐 OAuth 2.1 — RFC 9068 compliant JWT access tokens
• 🪪 OIDC — OpenID Connect compliant ID tokens
• 🔄 Token Rotation — Automatic refresh token rotation with revocation
• 🔑 EdDSA + RS256 — Modern Ed25519 keys with RSA fallback
• 🛡️ Argon2 — Industry-leading password hashing via pwdlib
• 📋 JWKS — Built-in JSON Web Key Set endpoint support
• 🗄️ SQLAlchemy — PostgreSQL-backed user & token storage
• ⚙️ Pydantic — Type-safe configuration from environment

📦 Installation

pip install dj-auth

🚀 Quick Start

1. Initialize

import dj_auth

# Initialize with default settings (reads from .env)
dj_auth.initiate()

# Or pass settings explicitly
dj_auth.initiate(
    DB_HOST="localhost",
    DB_PORT="5432",
    DB_NAME="mydb",
    DB_USER="postgres",
    DB_PASSWORD="password",
)

2. Sign Up

user = await dj_auth.signup({
    "email": "user@example.com",
    "password": "secure_password",
})

3. Log In

tokens = await dj_auth.login("user@example.com", "secure_password")
# Returns: { access_token, id_token, refresh_token, token_type, expires_in }

4. Validate Token

payload = dj_auth.validate_token(tokens["access_token"])
# Returns decoded JWT claims: { sub, iss, exp, iat, ... }

5. Refresh Tokens

new_tokens = await dj_auth.refresh_tokens(tokens["refresh_token"])
# Rotates the refresh token and issues new access + id tokens

6. Log Out

await dj_auth.logout(user_id)
# Revokes all active refresh tokens for the user

⚙️ Environment Variables

🖥️ CLI

After installation, run dj-auth in your terminal:

dj-auth          # Show banner + features
dj-auth guide    # Step-by-step quickstart
dj-auth api      # API reference table
dj-auth env      # Environment variable reference
dj-auth info     # All of the above
dj-auth --help   # Available commands

📋 API Reference

📄 License

MIT © DJ