simple_module_users
Email+password user management for simple_module apps. Replaces Keycloak/Auth0 for the common case: local accounts, admin invites, password reset, optional public signup. Built on fastapi-users.
Install
pip install simple_module_users
Pre-wired into any app scaffolded with smpy new.
What it provides
- Email + password registration, login, logout, password reset.
- Admin invite flow — admin enters an email, recipient clicks a link, sets a password, is logged in.
- Public signup toggle (
SM_USERS_ALLOW_SIGNUP, defaultfalse). - Bootstrap admin via env vars (
SM_USERS_BOOTSTRAP_EMAIL+SM_USERS_BOOTSTRAP_PASSWORD) — idempotent, only creates if the users table is empty. smpy users create-adminCLI for ad-hoc admin creation.- Inertia pages for login/register/invite-accept/admin-invite.
- Console mailer (logs to stdout) or SMTP mailer (
SM_USERS_MAILER=smtp).
Usage
CLI:
uv run smpy users create-admin --email admin@example.com --password 'change-me'
Bootstrap-on-boot (.env):
SM_USERS_BOOTSTRAP_EMAIL=admin@example.com
SM_USERS_BOOTSTRAP_PASSWORD=change-me
Program:
from auth.deps import CurrentUser # type: ignore[import-not-found]
@router.get("/profile")
async def profile(user: CurrentUser):
return {"email": user.email}
Depends on
simple_module_core,simple_module_db,simple_module_hosting,simple_module_settings,simple_module_authfastapi-users[sqlalchemy,oauth]>=15,<16,aiosmtplib,cachetools,typer
Social sign-in (Google, GitHub, Microsoft, OIDC)
OAuth providers are configured in the admin UI at /settings/modules → Users (no environment variables). Each provider activates once its client id and secret are set; the secret is masked in the UI. Changes apply live — no restart.
Microsoft (Entra ID). Register an app in the Entra admin center and set the
redirect URI to <base-url>/api/users/auth/microsoft/callback. Configure under
the Microsoft OAuth group:
oauth_microsoft_client_id,oauth_microsoft_client_secretoauth_microsoft_tenant—common(any work/school or personal account, the default),organizations(work/school only), or your tenant GUID to restrict sign-in to one tenant.
Each provider's callback URL is <base-url>/api/users/auth/<provider>/callback
(google, github, microsoft, oidc).
Note: for Microsoft guest/external accounts the identity email comes from the Graph
userPrincipalName, which may not be a plain email (e.g.user_ext.com#EXT#@tenant.onmicrosoft.com). For tenant members it is the user's email.
Migrating from SM_USERS_OAUTH_* env vars
Earlier versions read provider credentials from SM_USERS_OAUTH_* environment
variables. These are no longer read at runtime. Migrate existing values into the
settings store once with:
uv run smpy settings import-from-env
License
MIT — see LICENSE.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file simple_module_users-0.0.32.tar.gz.
File metadata
- Download URL: simple_module_users-0.0.32.tar.gz
- Upload date:
- Size: 109.7 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3784c73fcb2dcb4ca6f41db63084f4cb464b0fb2de88a47c2996bf38ba5a766f
|
|
| MD5 |
3ee86e3892b656348051230d367dc33d
|
|
| BLAKE2b-256 |
dcf53530881930622b74ed2a55998dc0e71af77c254e90a5fd882dc17c17ced5
|
Provenance
The following attestation bundles were made for simple_module_users-0.0.32.tar.gz:
Publisher:
release.yml on antosubash/simple_module_python
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
simple_module_users-0.0.32.tar.gz -
Subject digest:
3784c73fcb2dcb4ca6f41db63084f4cb464b0fb2de88a47c2996bf38ba5a766f - Sigstore transparency entry: 2549438329
- Sigstore integration time:
-
Permalink:
antosubash/simple_module_python@55e80006e656307a319e345b4b0efd81115cde6d -
Branch / Tag:
refs/heads/main - Owner: https://github.com/antosubash
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@55e80006e656307a319e345b4b0efd81115cde6d -
Trigger Event:
workflow_dispatch
-
Statement type:
File details
Details for the file simple_module_users-0.0.32-py3-none-any.whl.
File metadata
- Download URL: simple_module_users-0.0.32-py3-none-any.whl
- Upload date:
- Size: 106.8 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
2236d1ddf2d9633fc66b35f7742db9aef966d6a5777b07017366f90d5a731564
|
|
| MD5 |
c0664266635f78d00bd388af27718a05
|
|
| BLAKE2b-256 |
6eb0677bbf3e8814ab6f68c13429458f53c6e77d236a69a4e28c9d2c8a5720e8
|
Provenance
The following attestation bundles were made for simple_module_users-0.0.32-py3-none-any.whl:
Publisher:
release.yml on antosubash/simple_module_python
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
simple_module_users-0.0.32-py3-none-any.whl -
Subject digest:
2236d1ddf2d9633fc66b35f7742db9aef966d6a5777b07017366f90d5a731564 - Sigstore transparency entry: 2549438351
- Sigstore integration time:
-
Permalink:
antosubash/simple_module_python@55e80006e656307a319e345b4b0efd81115cde6d -
Branch / Tag:
refs/heads/main - Owner: https://github.com/antosubash
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@55e80006e656307a319e345b4b0efd81115cde6d -
Trigger Event:
workflow_dispatch
-
Statement type:
