EmpowerID Identity Fabric SDK – Python & React packages

EmpowerID Identity Fabric provides a secure‐by‐default toolkit for building apps on top of the EmpowerID Identity Fabric Platform. The SDK is split into two families:

Package	Runtime	Purpose
`empowernow-common`	Python 3.10 – 3.12	Shared cryptography, OAuth helpers, AuthZEN PDP client, Redis/metrics utilities.
`@empowernow/bff-auth-react`	React 18	Hooks & components for the Backend-for-Frontend (BFF) cookie-based auth model.
`@empowernow/ui`	React 18	Headless UI-component library used by all EmpowerID Identity Fabric SPAs. (Depends on either `@empowernow/bff-auth-react` or the legacy shim `@empowernow/react`.)

Why no browser-side OAuth client? EmpowerID Identity Fabric moved to a BFF architecture to comply with FAPI 2.0 Baseline / Advanced and to keep tokens out of the browser. The legacy @empowernow/react library now acts as a thin re-export of @empowernow/bff-auth-react for backward compatibility. It no longer handles tokens.

Installation

Python (server-side services)

pip install "empowernow-common>=2.3,<3"

Optional extras:

empowernow-common[fips] – Use when running under an OpenSSL FIPS provider.
empowernow-common[redis], empowernow-common[kafka], etc. – Feature-scoped extras, see pyproject.toml.

React (front-end SPAs)

npm install @empowernow/bff-auth-react @empowernow/ui

If you still have code importing @empowernow/react, update it at your own pace – the alias re-exports the new package so nothing breaks at runtime.

Quick start

Using the Python OAuthClient

from empowernow_common.oauth import OAuthClient

oauth = OAuthClient(
    issuer="https://idp.example.com",
    client_id="python-client",
    client_secret="…",  # confidential client
    redirect_uri="https://bff.example.com/auth/callback",
    scopes=["openid", "profile"]
)

auth_url = oauth.create_authorization_url(state="xyz")
print("Open browser to", auth_url)

React – wrap your SPA in the AuthProvider

import { AuthProvider } from '@empowernow/bff-auth-react';
import { createRoot } from 'react-dom/client';
import App from './App';

createRoot(document.getElementById('root')!).render(
  <AuthProvider baseUrl={import.meta.env.VITE_BFF_BASE_URL}>
    <App />
  </AuthProvider>
);

useAuth() gives you isAuthenticated, user, session and convenience helpers like login() and logout(); apiClient is a fetch wrapper that automatically adds CSRF headers and credentials:"include".

Security & Compliance

FAPI 2.0 ready – private-key-JWT, PAR, JARM, DPoP and SameSite cookie model supported at the BFF layer.
FIPS option – When the host OpenSSL runs in FIPS 140-3 mode, empowernow-common can validate algorithms at start-up and periodically (opt-in via env FIPS_CONTINUOUS_VALIDATION=1).
No browser tokens – SPAs never see access- or refresh-tokens; they use HttpOnly cookies issued by the BFF.
Structured logging & Prometheus metrics built in.

Repository layout

client_sdk/empowernow-packages/
 ├── packages/
 │   ├── empowernow-common/            # Python package
 │   ├── @empowernow/bff-auth-react/   # React auth kit
 │   ├── @empowernow/ui/               # UI kit (optional peer)
 │   └── empowernow-react/             # Shim – re-exports BFF kit

Contributing

Pull requests are welcome. Please run pre-commit run -a and ensure pytest -q / pnpm test are green before opening a PR.

Development Status
- 4 - Beta
License
- OSI Approved :: Apache Software License
Operating System
- OS Independent
Programming Language
- Python :: 3
Topic
- Security :: Cryptography

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

empowernow_sdk-3.22.2.tar.gz (458.1 kB view details)

Uploaded Jul 25, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

empowernow_sdk-3.22.2-py3-none-any.whl (544.3 kB view details)

Uploaded Jul 25, 2026 Python 3

File details

Details for the file empowernow_sdk-3.22.2.tar.gz.

File metadata

Download URL: empowernow_sdk-3.22.2.tar.gz
Upload date: Jul 25, 2026
Size: 458.1 kB
Tags: Source
Uploaded using Trusted Publishing? No
Uploaded via: twine/6.2.0 CPython/3.12.10

File hashes

Hashes for empowernow_sdk-3.22.2.tar.gz
Algorithm	Hash digest
SHA256	`9f473d71b91eae4f64ff1f2bebba75ac78b2a948cefab28fb7d3bb0c2340d3ab`
MD5	`6aa04dcae494e9f3b2d07052adb36f91`
BLAKE2b-256	`c8e4aa28a853939960867bfa58cbb8993545cbcac94f6ce9b1cec94dc396ebca`

See more details on using hashes here.

File details

Details for the file empowernow_sdk-3.22.2-py3-none-any.whl.

File metadata

Download URL: empowernow_sdk-3.22.2-py3-none-any.whl
Upload date: Jul 25, 2026
Size: 544.3 kB
Tags: Python 3
Uploaded using Trusted Publishing? No
Uploaded via: twine/6.2.0 CPython/3.12.10

File hashes

Hashes for empowernow_sdk-3.22.2-py3-none-any.whl
Algorithm	Hash digest
SHA256	`5ab5ff1221f453fa89cc72807b363a93906132a6d179eb4d6f7ff578410ed01b`
MD5	`4a4ea4c6ac0e6355a2c2c061b2e57d30`
BLAKE2b-256	`ffa5971af493ca150fcdc7bf3f359cd3a7bab43daba73098873e5514efe7385c`