EmpowerID Identity Fabric SDK – Python & React packages
EmpowerID Identity Fabric provides a secure‐by‐default toolkit for building apps on top of the EmpowerID Identity Fabric Platform. The SDK is split into two families:
| Package | Runtime | Purpose |
|---|---|---|
empowernow-common |
Python 3.10 – 3.12 | Shared cryptography, OAuth helpers, AuthZEN PDP client, Redis/metrics utilities. |
@empowernow/bff-auth-react |
React 18 | Hooks & components for the Backend-for-Frontend (BFF) cookie-based auth model. |
@empowernow/ui |
React 18 | Headless UI-component library used by all EmpowerID Identity Fabric SPAs. (Depends on either @empowernow/bff-auth-react or the legacy shim @empowernow/react.) |
Why no browser-side OAuth client? EmpowerID Identity Fabric moved to a BFF architecture to comply with FAPI 2.0 Baseline / Advanced and to keep tokens out of the browser. The legacy
@empowernow/reactlibrary now acts as a thin re-export of@empowernow/bff-auth-reactfor backward compatibility. It no longer handles tokens.
Installation
Python (server-side services)
pip install "empowernow-common>=2.3,<3"
Optional extras:
empowernow-common[fips]– Use when running under an OpenSSL FIPS provider.empowernow-common[redis],empowernow-common[kafka], etc. – Feature-scoped extras, see pyproject.toml.
React (front-end SPAs)
npm install @empowernow/bff-auth-react @empowernow/ui
If you still have code importing @empowernow/react, update it at your own pace – the alias re-exports the new package so nothing breaks at runtime.
Quick start
Using the Python OAuthClient
from empowernow_common.oauth import OAuthClient
oauth = OAuthClient(
issuer="https://idp.example.com",
client_id="python-client",
client_secret="…", # confidential client
redirect_uri="https://bff.example.com/auth/callback",
scopes=["openid", "profile"]
)
auth_url = oauth.create_authorization_url(state="xyz")
print("Open browser to", auth_url)
React – wrap your SPA in the AuthProvider
import { AuthProvider } from '@empowernow/bff-auth-react';
import { createRoot } from 'react-dom/client';
import App from './App';
createRoot(document.getElementById('root')!).render(
<AuthProvider baseUrl={import.meta.env.VITE_BFF_BASE_URL}>
<App />
</AuthProvider>
);
useAuth() gives you isAuthenticated, user, session and convenience helpers like login() and logout(); apiClient is a fetch wrapper that automatically adds CSRF headers and credentials:"include".
Security & Compliance
- FAPI 2.0 ready – private-key-JWT, PAR, JARM, DPoP and SameSite cookie model supported at the BFF layer.
- FIPS option – When the host OpenSSL runs in FIPS 140-3 mode,
empowernow-commoncan validate algorithms at start-up and periodically (opt-in via envFIPS_CONTINUOUS_VALIDATION=1). - No browser tokens – SPAs never see access- or refresh-tokens; they use HttpOnly cookies issued by the BFF.
- Structured logging & Prometheus metrics built in.
Repository layout
client_sdk/empowernow-packages/
├── packages/
│ ├── empowernow-common/ # Python package
│ ├── @empowernow/bff-auth-react/ # React auth kit
│ ├── @empowernow/ui/ # UI kit (optional peer)
│ └── empowernow-react/ # Shim – re-exports BFF kit
Contributing
Pull requests are welcome. Please run pre-commit run -a and ensure pytest -q / pnpm test are green before opening a PR.
© 2025 EmpowerID Identity Fabric – Apache 2.0 licence.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file empowernow_sdk-3.23.1.tar.gz.
File metadata
- Download URL: empowernow_sdk-3.23.1.tar.gz
- Upload date:
- Size: 465.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5db562c80c2f9b4132419563bbd3e40ffa21d75acbd52d92a126ed803ac2e069
|
|
| MD5 |
28816c1cd7734def3e7b656c585861fa
|
|
| BLAKE2b-256 |
42f65a0b22646809132f1ae7c290fa842188906349d8de3744867d8d4ee0fad9
|
File details
Details for the file empowernow_sdk-3.23.1-py3-none-any.whl.
File metadata
- Download URL: empowernow_sdk-3.23.1-py3-none-any.whl
- Upload date:
- Size: 552.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.12.10
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
9a8022da525c6408fcf3cb112533beed22587eec6ece139dad847b80035bb4d4
|
|
| MD5 |
1feeaeaa10f45c708478a22e01e466c4
|
|
| BLAKE2b-256 |
6baa3cc3e20637e4857ee10bb4329f5890cc4c6fec2f477e09a898b3e7e466bf
|
