quart-auth

Quart-Auth is an extension for Quart to provide for secure cookie authentication (session management). It allows for a session to be logged in, authenticated and logged out.

Usage

To use Quart-Auth with a Quart app you have to create an QuartAuth and initialise it with the application,

app = Quart(__name__)
QuartAuth(app)

or via the factory pattern,

auth_manager = QuartAuth()

def create_app():
    app = Quart(__name__)
    auth_manager.init_app(app)
    return app

In addition you will need to configure Quart-Auth, which defaults to the most secure. At a minimum you will need to set secret key,

app.secret_key = "secret key"  # Do not use this key

which you can generate via,

>>> import secrets
>>> secrets.token_urlsafe(16)

You may also need to disable secure cookies to use in development, see configuration below.

With QuartAuth initialised you can use the login_required function to decorate routes that should only be accessed by authenticated users,

from quart_auth import login_required

@app.route("/")
@login_required
async def restricted_route():
    ...

If no user is logged in, an Unauthorized exception is raised. To catch it, install an error handler,

@app.errorhandler(Unauthorized)
async def redirect_to_login(*_: Exception) -> ResponseReturnValue:
    return redirect(url_for("login"))

You can also use the login_user, and logout_user functions to start and end sessions for a specific AuthenticatedUser instance,

from quart_auth import AuthUser, login_user, logout_user

@app.route("/login")
async def login():
    # Check Credentials here, e.g. username & password.
    ...
    # We'll assume the user has an identifying ID equal to 2
    login_user(AuthUser(2))
    ...

@app.route("/logout")
async def logout():
    logout_user()
    ...

The user (authenticated or not) is available via the global current_user including within templates,

from quart import render_template_string
from quart_auth import current_user

@app.route("/")
async def user():
    return await render_template_string("{{ current_user.is_authenticated }}")

Contributing

Quart-Auth is developed on GitHub. You are very welcome to open issues or propose pull requests.

Testing

The best way to test Quart-Auth is with Tox,

$ pip install tox
$ tox

this will check the code style and run the tests.

Help

The Quart-Auth documentation is the best places to start, after that try searching stack overflow or ask for help on gitter. If you still can’t find an answer please open an issue.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

quart_auth-0.12.0.tar.gz (11.0 kB view details)

Uploaded Aug 29, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

quart_auth-0.12.0-py3-none-any.whl (9.8 kB view details)

Uploaded Aug 29, 2026 Python 3

File details

Details for the file quart_auth-0.12.0.tar.gz.

File metadata

Download URL: quart_auth-0.12.0.tar.gz
Upload date: Aug 29, 2026
Size: 11.0 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.12.9

File hashes

Hashes for quart_auth-0.12.0.tar.gz
Algorithm	Hash digest
SHA256	`245e0e52417f29a344cbbd59028b0728a43c035b0795eeab08acb1e84ae1e728`
MD5	`8c6723708e72053834ea8f9ad6af78e1`
BLAKE2b-256	`817d85fd311098ad8797b95980afe635b9705ddd499442951f5cc03227af0f19`

See more details on using hashes here.

Provenance

The following attestation bundles were made for quart_auth-0.12.0.tar.gz:

Publisher: publish.yml on pgjones/quart-auth

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: quart_auth-0.12.0.tar.gz
- Subject digest: 245e0e52417f29a344cbbd59028b0728a43c035b0795eeab08acb1e84ae1e728
- Sigstore transparency entry: 2636275253
- Sigstore integration time: Aug 29, 2026
Source repository:
- Permalink: pgjones/quart-auth@4e159c70d134bf2bd01cbd334027018bc18b7535
- Branch / Tag: refs/tags/0.12.0
- Owner: https://github.com/pgjones
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish.yml@4e159c70d134bf2bd01cbd334027018bc18b7535
- Trigger Event: push