intflow-auth-sdk 0.1.1

Intflow Auth relying application SDK.

Intflow Auth SDK

Python SDK for relying applications that integrate with Intflow Auth.

This package is for application backends that need to validate Intflow-issued tokens and enforce application roles. It does not provide operator credential storage, service runtime components, or Admin API automation.

Install

python -m pip install intflow-auth-sdk

Current Status

This package provides PKCE helpers, authorization URL construction, OIDC discovery/JWKS caching, Intflow access-token verification, and application-role checks.

from intflow_auth_sdk import create_token_verifier, require_app_role

with create_token_verifier(audience="your-oauth-client-id") as verifier:
    verified = verifier.verify_access_token(access_token)
    require_app_role(verified.payload, "admin")

print(verified.payload["sub"])

Long-running services should create one IntflowTokenVerifier or AsyncIntflowTokenVerifier during startup, reuse it for request handling, and call close() or aclose() during shutdown. One-shot helper functions remain available for scripts and tests.

For local fake-token examples, see examples/python-sdk-consumer.