gcl_iam

gcl_iam is a Python library for adding JWT authentication and policy-based authorization to RESTAlchemy services. It provides:

HS256 and RS256 token verification, including previous-key fallback during key rotation;
remote JWKS discovery and token introspection through an IAM service;
request-scoped identity, project and permission data;
wildcard permissions in the service.resource.action format;
project-aware, nested, projectless and OTP-aware RESTAlchemy controllers;
permission-driven field visibility; and
OAuth-style HTTP error responses.

The library requires Python 3.10 or newer and is licensed under Apache 2.0.

Documentation

The complete documentation is available in four languages. Every language has the same files, section order and code examples:

New users should start with installation and the getting-started guide.

Quick example

from gcl_iam import drivers
from gcl_iam import middlewares as iam_middlewares
from restalchemy.api import middlewares

iam_driver = drivers.HttpDriver(
    iam_endpoint="https://iam.example.com/v1/iam/clients/my-service",
    audience="my-service",
    hs256_jwks_decryption_key="<32-byte A256GCM key>",
)

application = middlewares.attach_middlewares(
    application,
    [
        middlewares.configure_middleware(
            iam_middlewares.GenesisCoreAuthMiddleware,
            iam_engine_driver=iam_driver,
        ),
        iam_middlewares.ErrorsHandlerMiddleware,
    ],
)

Use real secret management for IAM credentials and encryption keys. Never put them in source code.

Development

Create the standard development environment and run the unit tests:

tox -e develop
tox -e py310

Additional checks are available as tox -e ruff-check and tox -e mypy.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

gcl_iam-1.4.0.tar.gz (162.9 kB view details)

Uploaded Sep 2, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

gcl_iam-1.4.0-py3-none-any.whl (93.3 kB view details)

Uploaded Sep 2, 2026 Python 3

File details

Details for the file gcl_iam-1.4.0.tar.gz.

File metadata

Download URL: gcl_iam-1.4.0.tar.gz
Upload date: Sep 2, 2026
Size: 162.9 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for gcl_iam-1.4.0.tar.gz
Algorithm	Hash digest
SHA256	`7888e63b295ae1e54f6a43b22f51dbeeb0b69f2c155895d556c68873af1eb2e7`
MD5	`1bd12bab2058406fb435a97b106bd991`
BLAKE2b-256	`937bbb547b0d5e8609985828a8e4a700e7e2608ddef8218f5fe5e4bf2e1975dc`

See more details on using hashes here.

Provenance

The following attestation bundles were made for gcl_iam-1.4.0.tar.gz:

Publisher: publish-to-pypi.yml on exordos/gcl_iam

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: gcl_iam-1.4.0.tar.gz
- Subject digest: 7888e63b295ae1e54f6a43b22f51dbeeb0b69f2c155895d556c68873af1eb2e7
- Sigstore transparency entry: 2684357915
- Sigstore integration time: Sep 2, 2026
Source repository:
- Permalink: exordos/gcl_iam@615a3c2a2eb4cc0e678332a798f0c2ebb2b4f0c5
- Branch / Tag: refs/tags/1.4.0
- Owner: https://github.com/exordos
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish-to-pypi.yml@615a3c2a2eb4cc0e678332a798f0c2ebb2b4f0c5
- Trigger Event: push