Starlette Authlib Middleware
Introduction
A drop-in replacement for Starlette session middleware, using authlib's jwt.
Rationale
It is sometimes necessary to integrate a Starlette-based application into more complex scenarios where other actors need to make decisions based on session data. This middleware makes this possible by using a standard JWT token instead of the Starlette-encrypted one, thus simplifying interaction with third-party components.
Requirements
- Python 3.10+
- Starlette 0.9+
Installation
pip install starlette-authlib
Usage
A complete example where we drop-in replace standard session middleware:
from starlette.applications import Starlette
from starlette_authlib.middleware import AuthlibMiddleware as SessionMiddleware
app = Starlette()
app.add_middleware(SessionMiddleware, secret_key='secret')
Other things you can configure either via environment variables or .env file:
DOMAIN- declare cookie domain. App must be under this domain. If empty, the cookie is restricted to the subdomain of the app (this is useful when you write eg. SSO portals)JWT_ALG- one of authlib JWT supported algorithmsJWT_SECRET- jwt secret. Only useful for HS* algorithms, see thesample_appfolder for middleware usage w/ crypto keys.
See it in action: sample application
A sample application is included, and you can run it with either Starlette-based session middleware or this one, just by setting a variable:
# run with vanilla Starlette-based session middleware
VANILLA=1 uvicorn sample_app.app:app
# run with this drop-in replacement
uvicorn sample_app.app:app
As you can notice in code here, the only difference is an
import name, based on this VANILLA env var.
Contributing
This project is absolutely open to contributions so if you have a nice idea, create an issue to let the community discuss it.
1 maintainer
Metadata
1 maintainer
Release files for starlette-authlib 0.3.27
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| starlette_authlib-0.3.27.tar.gz | 4.2 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| starlette_authlib-0.3.27-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 8.5 kB
Release files / starlette_authlib-0.3.27.tar.gz
| Download URL | starlette_authlib-0.3.27.tar.gz |
|---|---|
| Size | 4.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d1c8eaf2fc53298c6e9e5599c8204878ae3e0b72934199d842b61580c9681254
|
|
BLAKE2b-256 checksum How to use checksums |
3280a440cfd7c88281f7bc6b381c3a59cd386bc2281098195df9695c49b06b13
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 14, 2026.
Transparency logRelease files / starlette_authlib-0.3.27-py3-none-any.whl
| Download URL | starlette_authlib-0.3.27-py3-none-any.whl |
|---|---|
| Size | 4.3 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b664d615e9e89a94eb80db29ff58c43d614a3e74e407977542c67d4db61380db
|
|
BLAKE2b-256 checksum How to use checksums |
e8f792d59646b2a3904c3b19d8fef41c829a3791f724b3af2f46f8d4e16e800d
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 14, 2026.
Transparency log
