MBKAUTHEPY

mbkauthepy is a fully featured, secure, and extensible authentication system for Python Flask applications.
Ported from the Node.js version to provide seamless multi-language support for full-stack apps.

📚 Table of Contents

• ✨ Features
• 🧠 Multi-language Support
• 📦 Installation
• 🚀 Quickstart
• ⚙️ Configuration (.env)
• 🧩 Middleware & Decorators
• 🧪 API Endpoints
• 🗄️ Database Schema
• 🔐 Security Notes
• 📜 License
• 🙋 Contact & Support

✨ Features

🧠 Multi-language Support

This package is designed to work seamlessly with both Python and JavaScript applications.

• The JavaScript version is available on npm as mbkauthe.
• The Python version is available on PyPI as mbkauthepy.

Repositories:

• Python Version: mbkauthepy GitHub
• JavaScript Version: mbkauthe GitHub

Contact & Contributions:

• Maaz Waheed (Python Version)

  • GitHub: @42Wor
  • Email: maaz.waheed@mbktechstudio.com / wwork4287@gmail.com

• Muhammad Bin Khalid (JavaScript Version)

  • GitHub: @MIbnEKhalid
  • For questions or contributions:
    • Support Page: mbktechstudio.com/Support
    • Email: support@mbktechstudio.com / chmuhammadbinkhalid28@gmail.com

Issues / PRs:

We welcome issues and pull requests! Feel free to contribute or ask any questions.

Note: This project is developed and maintained by Maaz Waheed and Muhammad Bin Khalid.

📦 Installation

1. Python & Virtual Environment

python -m venv venv
source venv/bin/activate  # Linux/macOS
# .\venv\Scripts\activate  # Windows

2. Install Dependencies

pip install -r requirements.txt

3. Install mbkauthepy

pip install mbkauthepy

🚀 Quickstart Example

from flask import Flask, render_template, session
from dotenv import load_dotenv
from mbkauthepy import configure_mbkauthe, validate_session

load_dotenv()

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your-secret-key'

configure_mbkauthe(app)


@app.route('/')
def home():
    return render_template('index.html')


@app.route('/dashboard')
@validate_session
def dashboard():
    user = session['user']
    return f"Welcome {user['username']}!"


if __name__ == '__main__':
    app.run(debug=True)

⚙️ Configuration (.env)

FLASK_SECRET_KEY=my-flask-secret

mbkautheVar='{
    "APP_NAME": "MBKAUTH_PYTHON_DEMO",
    "IS_DEPLOYED": "false",
    "LOGIN_DB": "postgresql://username:password@host:port/database",
    "MBKAUTH_TWO_FA_ENABLE": "false",
    "COOKIE_EXPIRE_TIME": "2", # In days
    "DOMAIN": "mbktechstudio.com", # Use your actual domain in production
    "Main_SECRET_TOKEN": "your-secret-token-for-terminate-api", # Added for terminateAllSessions auth
    "loginRedirectURL": "/",
    "EncryptedPassword": "False"
}'

✅ You can override behavior by editing this JSON string directly in .env.

🧩 Middleware & Decorators

Example:

from src.mbkauthe import validate_session, check_role_permission, validate_session_and_role, authenticate_token


@app.route('/admin')
@validate_session_and_role("SuperAdmin")
def admin_panel():
    return "Welcome to the admin panel"


@app.route('/dashboard')
@validate_session
def dashboard():
    user = session['user']
    return f"Welcome {user['username']}"


@app.route('/secured-admin')
@validate_session_and_role("SuperAdmin")
def secured_admin():
    return "Secured Area"


@app.route('/terminate-sessions')
@authenticate_token
def terminate_sessions():
    return {"success": True}


# Example of fetching user data
data = get_user_data("johndoe", ["FullName", "email"])

🧪 API Endpoints

These are available by default after calling configure_mbkauthe(app):

🗄️ Database Schema

👉 See docs/db.md for schema & setup scripts.

🔐 Security Notes

• 🔐 Set EncryptedPassword: "true" for production use.
• ✅ Always use long random SESSION_SECRET_KEY.
• 🔒 Use HTTPS in deployment (IS_DEPLOYED: "true").
• 🚫 Avoid plaintext passwords outside dev/testing.

Note: Encrypted password support is under development. Stay tuned for updates!

📜 License

Mozilla Public License 2.0
See LICENSE for full legal text.

🙋 Contact & Support

Developed by Maaz Waheed

• GitHub: @42Wor
• Email: maaz.waheed@mbktechstudio.com / wwork4287@gmail.com
• Issues / PRs welcome!

Would you like me to generate:

• ✅ A requirements.txt
• ✅ The .env template
• ✅ Diagrams (e.g., session flow, DB schema)
• ✅ Frontend login template in HTML?

Let me know which extras you want!