fastapi-enciphers 0.1.0

Encrypted session middleware for FastAPI using enciphers

fastapi-enciphers

Encrypted session middleware for FastAPI using enciphers.

Replaces Starlette's default signed cookie session with a fully encrypted one.

Installation

pip install fastapi-enciphers

Usage

from fastapi import FastAPI, Request
from fastapi_enciphers import EnciphersMiddleware

app = FastAPI()
app.add_middleware(EnciphersMiddleware, step=7, key=42)

@app.get("/login")
async def login(request: Request):
    request.session["user_id"] = 1
    return {"status": "logged in"}

@app.get("/profile")
async def profile(request: Request):
    return {"user_id": request.session.get("user_id")}

Configuration

Parameter	Type	Default	Description
step	int	random	Encryption step
key	int	random	Secret key
key_env	str	None	Environment variable for key
session_cookie	str	"session"	Cookie name
max_age	int	1209600	Cookie lifetime in seconds
path	str	"/"	Cookie path
same_site	str	"lax"	SameSite flag
https_only	bool	False	Secure flag
domain	str	None	Cookie domain

If step and key are not provided, random values are generated at startup.

Warning: Do not use EnciphersMiddleware together with Starlette's SessionMiddleware.

License

Apache-2.0 — Copyright 2026 Mejlad Alsubaie