OQTOPUS Auth

Overview

OQTOPUS Auth is a framework-agnostic authentication and authorization library for the OQTOPUS ecosystem. It ships pluggable authentication providers:

• none — authentication disabled (local development).
• header — trust a JWT injected by a trusted reverse proxy (e.g. oauth2-proxy, Cloudflare Access).
• oidc — verify an Authorization: Bearer token directly against the issuer's JWKS (iss/exp/aud or client_id) and optionally enforce an OAuth2 scope; for services that are the resource server (M2M / client-credentials, or an API with no edge authorizer).

It also provides a role/permission model, an optional FastAPI integration, and a client-credentials token provider for the calling side of an oidc-protected service.

pip install oqtopus-auth
# with the FastAPI middleware and dependencies:
pip install "oqtopus-auth[fastapi]"
# with the client-credentials token provider (ClientCredentialsTokenProvider):
pip install "oqtopus-auth[client]"

Documentation

• Documentation Home

Citation

You can use the DOI to cite oqtopus-auth in your research.

Citation information is also available in the CITATION file.

Contact

You can contact us by creating an issue in this repository or by email:

• oqtopus-team[at]googlegroups.com

License

oqtopus-auth is released under the Apache License 2.0.