invenio-accounts 9.0.1

Invenio user management and authentication.

Invenio user management and authentication.

Features:

• User and role management.

• User registration, password reset/recovery and email verification.

• Administration interface and CLI for managing users.

• Session based authentication with session theft protection support.

• Strong cryptographic password hashing with support for migrating password hashes (including Invenio v1.x) to new stronger algorithms.

• Session activity tracking allowing users to e.g. logout of all devices.

• Server-side session management.

• JSON Web Token encoding and decoding support useful for e.g. CSRF-protection in REST APIs.

Invenio-Accounts relies on the following community packages to do all the heavy-lifting:

• Flask-Security

• Flask-Login

• Flask-Principal

• Flask-KVSession

• Passlib

Further documentation is available on https://invenio-accounts.readthedocs.io/