FastAPI SDK

A powerful SDK for building FastAPI applications with built-in authentication, authorization, and CRUD operations.

Features

🔐 Authentication & Authorization
- JWT-based authentication
- Role-based access control
- Fine-grained permissions
- User claims management
🗄️ Database Operations
- Automatic CRUD operations
- Soft delete support
- Pagination
- Relationship handling
🛡️ Security
- Ownership-based access control
- Permission-based authorization
- Role-based access control
- Secure token handling
📝 Type Safety
- Pydantic model integration
- Type hints throughout
- Automatic validation
- OpenAPI documentation

Documentation

Route Controller Documentation - Learn how to create CRUD routes with authentication and permissions
Model Controller Documentation - Understand how to implement database operations and relationships

Quick Start

Using UV, start a new project from within the folder you wish to create it.

The project requires Python 3.13 or above.

uv init
uv venv
source .venv/bin/activaye
uv add fastapi-sdk

In order to test authentication, we need a set of asymmetric encryption keys for test access tokens. Generate the two keys using the command below:

openssl genrsa -des3 -out test_private_encrypted.pem 2048
openssl rsa -pubout -in test_private_encrypted.pem -out test_public_key.pem
openssl rsa -in test_private_encrypted.pem -out test_private_key.pem -outform PEM

This will create three keys:

test_private_encrypted.pem (keep safe somewhere)
test_private_key.pem
test_public_key.pem

We will use the test_private_key.pem key to encrypt our JWT tokens and test_public_key.pem to decrypt them (asymmetric encryption).

Those test keys can added to the repository for ease of setup and running CI/CD testing.

Add the value of each key to your environment:

# .env.local
export TEST_PRIVATE_KEY_PATH="test_private_key.pem"
export TEST_PUBLIC_KEY_PATH="test_public_key.pem"

For the API to work in the real world, you will need settings for Fauthy authentication. Create a new tenant and use the client_id which will be required to get the public JWKs.

# .env.local
export AUTH_ISSUER="https://fauthy.com"
export AUTH_CLIENT_ID="test_client_id" # Replace with real client_id for production

Then some api settings:

# .env.local
export PUBLIC_ROUTES="/public/*,/other"
export ENVIRONMENT="development" # Replace with production when deploying to live server

A full .env.local complete included the MongoDB connection string:

export AUTH_PRIVATE_KEY="test_private_key.pem"
export AUTH_PUBLIC_KEY="test_public_key.pem"
export AUTH_ISSUER="https://fauthy.com"
export AUTH_CLIENT_ID="test_client_id" # Replace with real client_id for production
export PUBLIC_ROUTES="/public/*,/other"
export ENVIRONMENT="development" # Replace with production when deploying to live server
export MONGO_DATABASE_URI="mongodb://localhost:27017"
export MONGO_DATABASE_NAME="fastapi_sdk_test"

from fastapi import FastAPI
from fastapi_sdk.controllers.route import RouteController
from fastapi_sdk.middleware.auth import AuthMiddleware
from fastapi_sdk.controllers import ModelController
from fastapi_sdk.controllers.model import OwnershipRule
from tests.models import AccountModel
from tests.schemas import (
    AccountCreate,
    AccountResponse,
    AccountUpdate,
)


class Account(ModelController):
    """Account controller."""

    model = AccountModel
    schema_create = AccountCreate
    schema_update = AccountUpdate
    schema_response = AccountResponse
    cascade_delete = True  # Will delete related projects and tasks
    ownership_rule = OwnershipRule(
        claim_field="account_id",
        model_field="uuid",
        allow_public=False,
    )

    relationships = {
        "projects": {
            "type": "one_to_many",
            "controller": "Project",
            "foreign_key": "account_id",
        }
    }

app = FastAPI()

# Add authentication middleware
app.add_middleware(
    AuthMiddleware,
    public_routes=["/docs", "/openapi.json"],  # Routes that don't require authentication
    auth_issuer="https://your-auth-server.com",  # The issuer of the JWT tokens
    auth_client_id="your-client-id",  # Your application's client ID
    env="prod",  # Environment: "test" or "prod"
    # Optional: Test environment keys
    test_private_key_path="path/to/private.key",  # Only needed for test environment
    test_public_key_path="path/to/public.key",  # Only needed for test environment
)

# Create a route controller
account_routes = RouteController(
    prefix="/accounts",
    tags=["accounts"],
    controller=AccountController,
    get_db=get_db,
    schema_response=AccountResponse,
    schema_response_paginated=BaseResponsePaginated[AccountResponse],
    schema_create=AccountCreate,
    schema_update=AccountUpdate,
)

# Include routes
app.include_router(account_routes.router)

Development

Setup

Clone the repository
Install dependencies:

uv sync

Running Tests

pytest

License

MIT License - see LICENSE file for details

Metadata

Release files for fastapi-sdk 0.12.10

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for fastapi-sdk 0.12.10
File	Size	Uploaded
fastapi_sdk-0.12.10.tar.gz	33.8 kB	Jul 23, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for fastapi-sdk 0.12.10
File	Interpreter	ABI	Platform	Reset
fastapi_sdk-0.12.10-py3-none-any.whl 37.0 kB Jul 23, 2026	Python 3	none	any	Details

Total release size: 70.7 kB

Release files / fastapi_sdk-0.12.10.tar.gz

Download URL	fastapi_sdk-0.12.10.tar.gz
Size	33.8 kB
Tags	Source
SHA-256 checksum How to use checksums	`768c7c420d13d3ed138f52f3b4afbf39aaab717ff67bd1bae65cd9ee0284a3f5`
BLAKE2b-256 checksum How to use checksums	`dc7b1602c87be00767fef055ea061d6767e7f7cdf956749a2e60d8484210d7bf`
Upload date	Jul 23, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Studio-Piot/fastapi-sdk
Publishing commit: github.com/Studio-Piot/fastapi-sdk/tree/66225d129c92cfa6aa98ae799cd7bd0f4cdc7c12

Workflow

Publishing configuration: github.com/Studio-Piot/fastapi-sdk/blob/66225d129c92cfa6aa98ae799cd7bd0f4cdc7c12/.github/workflows/python-publish.yml
Publishing logs: github.com/Studio-Piot/fastapi-sdk/actions/runs/30011425251/attempts/1

Artifact

Subject: fastapi_sdk-0.12.10.tar.gz
SHA-256 checksum: 768c7c420d13d3ed138f52f3b4afbf39aaab717ff67bd1bae65cd9ee0284a3f5 Verifying attestations

Release files / fastapi_sdk-0.12.10-py3-none-any.whl

Download URL	fastapi_sdk-0.12.10-py3-none-any.whl
Size	37.0 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`f17a4dfe8d81a7a20def90b847a7ec4c9854da34ab619b010148295f40752604`
BLAKE2b-256 checksum How to use checksums	`256b41cec13b07ba6f6d8e7f54f78f37eb6c9245e80c1d509ad2a2fd1d8b5396`
Upload date	Jul 23, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/6.1.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/Studio-Piot/fastapi-sdk
Publishing commit: github.com/Studio-Piot/fastapi-sdk/tree/66225d129c92cfa6aa98ae799cd7bd0f4cdc7c12

Workflow

Publishing configuration: github.com/Studio-Piot/fastapi-sdk/blob/66225d129c92cfa6aa98ae799cd7bd0f4cdc7c12/.github/workflows/python-publish.yml
Publishing logs: github.com/Studio-Piot/fastapi-sdk/actions/runs/30011425251/attempts/1

Artifact

Subject: fastapi_sdk-0.12.10-py3-none-any.whl
SHA-256 checksum: f17a4dfe8d81a7a20def90b847a7ec4c9854da34ab619b010148295f40752604 Verifying attestations