fastapi-topaz 1.0

Topaz integration for FastAPI

FastAPI-Topaz

FastAPI middleware for Topaz authorization.

Full documentation following the Diataxis framework available at jmanteau.github.io/fastapi-topaz.

Installation

pip install fastapi-topaz

Quick Start

from fastapi import Depends, FastAPI, Request
from fastapi_topaz import (
    AuthorizerOptions,
    Identity,
    IdentityType,
    TopazConfig,
    require_policy_allowed,
)

config = TopazConfig(
    authorizer_options=AuthorizerOptions(url="localhost:8282"),
    policy_path_root="myapp",
    identity_provider=lambda req: Identity(
        type=IdentityType.IDENTITY_TYPE_SUB,
        value=req.state.user_id,
    ),
    policy_instance_name="myapp",
)

app = FastAPI()

@app.get("/documents")
async def list_documents(
    request: Request,
    _: None = Depends(require_policy_allowed(config, "myapp.GET.documents")),
):
    return {"documents": [...]}

Features

Feature	Description
Policy-based authorization	require_policy_allowed()
ReBAC (relationship-based)	require_rebac_allowed()
Fetch + authorize	get_authorized_resource()
Bulk filtering	filter_authorized_resources()
Decision caching	Configurable TTL cache
Circuit breaker	Graceful degradation
Audit logging	Structured JSON logging
Observability	Prometheus metrics, OpenTelemetry tracing

Documentation

Section	Focus	Description
Tutorials	Learning-Oriented	Step-by-step guides to get started
How-To Guides	Task-Oriented	Solve specific problems
Reference	Information-Oriented	API and CLI specifications
Explanation	Understanding-Oriented	Architecture and concepts

Requirements

• Python 3.9+
• FastAPI 0.100+
• Running Topaz instance

Links

• Topaz Documentation
• FastAPI Documentation

License

Apache 2.0