Macrostrat authentication system
This module contains tools to manipulate Macrostrat's user authentication system. It is divided into two submodules:
macrostrat.auth_system.legacy: A JWT-based authentication system relying on local storage of hashed passwords. This system was created as part of Sparrow and is being phased out in favor of a more modern system based on ORCID.macrostrat.auth_system.core: An ORCID-based user authentication system. This system will become the primary authentication system for Macrostrat, but it is still in development.
We plan to gradually converge the functionality of both versions while phasing out the legacy system.
The system has tests that can be run with poetry run pytest auth-system
(currently, only the legacy system is covered).
Key planned functionality
- Allow many Macrostrat-hosted services to easily integrate with Macrostrat's login and token flow
- Allow APIs to easily validate user credentials and tokens with minimum overhead
- Allow access to be checked in multiple ways:
- Cookies and headers
- Limited-time JWT tokens and long-duration, cancelable API tokens
- Verify against Macrostrat "user group" or application-specific criteria ( e.g., a list of authorized ORCID IDs)
1 maintainer
Metadata
1 maintainer
Release files for macrostrat.auth_system 1.1.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| macrostrat_auth_system-1.1.1.tar.gz | 8.9 kB | Without provenance | Details for macrostrat_auth_system-1.1.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| macrostrat_auth_system-1.1.1-py3-none-any.whl | Python 3 | none | any | Details for macrostrat_auth_system-1.1.1-py3-none-any.whl |
Total release size: 21.9 kB
Release files / macrostrat_auth_system-1.1.1.tar.gz
| Download URL | macrostrat_auth_system-1.1.1.tar.gz |
|---|---|
| Size | 8.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ef54b33e59f8f193be9e2a60cf4f8dbe5138949b51e9244d50c9acd65db016a6
|
|
BLAKE2b-256 checksum How to use checksums |
c9d54a9c945ef7c0d8703e6741c124d8a290081b07090b7eea222fc184a41769
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.18 {"installer":{"name":"uv","version":"0.12.18","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / macrostrat_auth_system-1.1.1-py3-none-any.whl
| Download URL | macrostrat_auth_system-1.1.1-py3-none-any.whl |
|---|---|
| Size | 13.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ab790df20a9681e063f6fbd44faf69ec9ed8dfafcf5288b0c29055af4414b51c
|
|
BLAKE2b-256 checksum How to use checksums |
a7396c9ff99c31164e5ba1ed632d879d81b6c0ebcfd963dae89e0fbfb5783f95
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.18 {"installer":{"name":"uv","version":"0.12.18","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for macrostrat.auth_system 1.1.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
