stac-auth-proxy 0.8.0

STAC authentication proxy with FastAPI

stac auth proxy

Reverse proxy to apply auth*n to your STAC API.

---

STAC Auth Proxy is a proxy API that mediates between the client and your internally accessible STAC API to provide flexible authentication, authorization, and content-filtering mechanisms.

[!IMPORTANT]

We would :heart: to hear from you! Please join the discussion and let us know how you're using eoAPI! This helps us improve the project for you and others. If you prefer to remain anonymous, you can email us at [e-mail], and we'll be happy to post a summary on your behalf.

✨Features✨

• 🔐 Authentication: Apply OpenID Connect (OIDC) token validation and optional scope checks to specified endpoints and methods
• 🛂 Content Filtering: Use CQL2 filters via the Filter Extension to tailor API responses based on request context (e.g. user role)
• 🤝 External Policy Integration: Integrate with external systems (e.g. Open Policy Agent (OPA)) to generate CQL2 filters dynamically from policy decisions
• 🧩 Authentication Extension: Add the Authentication Extension to API responses to expose auth-related metadata
• 📘 OpenAPI Augmentation: Enhance the OpenAPI spec with security details to keep auto-generated docs and UIs (e.g., Swagger UI) accurate
• 🗜️ Response Compression: Optimize response sizes using starlette-cramjam

Documentation

Full documentation is available on the website.

Head to Getting Started to dig in.