What is FastKit Auth?

FastKit Auth is part of the FastKit ecosystem. It provides ready-to-use authentication building blocks for FastAPI applications built on top of fastkit-core.

⚠️ Early release. The API may change before 1.0. Not recommended for production yet.

Features

• JWT Authentication — Access + refresh token flow
• User Registration — With email verification via OTP token
• Password Reset — Token-based reset flow via email
• Profile Management — Get and update authenticated user profile
• Password Hashing — Bcrypt via passlib
• Auth Dependencies — get_current_user, get_current_verified_user, get_current_superuser
• Email Sending — Integrated with mailbridge

Roadmap

• 2FA (TOTP + Backup codes)
• RBAC (Roles + Permissions)
• Decorators (@require_permission, @require_role)
• Audit Logging
• Rate Limiting + Account Locking

Requirements

• Python 3.12+
• PostgreSQL
• fastkit-core >= 0.4.0
• mailbridge >= 2.0.0

Installation

pip install fastkit-auth

Configuration

FastKit Auth reads configuration through fastkit-core's ConfigManager. You need app and auth config modules in your project.

config/auth.py (example):

JWT_ALGORITHM = "HS256"
JWT_TOKEN_SECRET = "your-secret"
JWT_LIFETIME_SECONDS = 3600
JWT_REFRESH_SECRET_KEY = "your-refresh-secret"
JWT_REFRESH_LIFETIME_SECONDS = 604800
PASSWORD_ENCRYPTION_SCHEMES = ["bcrypt"]

config/app.py (example):

MAIL_PROVIDER = "smtp"
MAIL_API_KEY = ""
MAIL_ENDPOINT = "smtp://localhost:1025"
MAIL_FROM = "noreply@example.com"

Quick Start

from fastapi import FastAPI
from fastkit_auth.authentication.router import router as auth_router
from fastkit_auth.users.router import registration_router, profile_router
from fastkit_core.database import init_async_database
from fastkit_core.config import ConfigManager
from fastkit_core.http.exception_handlers import register_exception_handlers

configuration = ConfigManager(modules=['app', 'database', 'auth'])
init_async_database(configuration)

app = FastAPI()
register_exception_handlers(app=app)

app.include_router(auth_router)
app.include_router(registration_router)
app.include_router(profile_router)

Endpoints

Auth Dependencies

Use these in your route dependencies:

from fastkit_auth.authentication.dependencies import (
    get_current_user,
    get_current_verified_user,
    get_current_superuser,
)

@router.get("/me")
async def me(user = Depends(get_current_user)):
    return user

@router.get("/admin")
async def admin_only(user = Depends(get_current_superuser)):
    ...

User Model

from fastkit_auth.users.models import User

Links

• fastkit-core
• PyPI