supaapps-platform93-auth
Strict Platform93 JWT verification plus a backend-only MachineClient. The machine
client uses OAuth client credentials and provides notification, invitation, user,
workspace, entitlement, billing-summary, and custom-event methods. Keep its client
secret in backend secret storage and never expose it to browser code.
Strict server-side verification for Platform93 application JWTs, including issuer, audience, actor type, application boundary, expiry, and JWKS rotation checks.
pip install supaapps-platform93-auth
Framework adapters are available through the fastapi, django, and flask extras.
See the Platform93 repository for contracts
and integration documentation.
Protected Resources
Ordinary Verifier.verify rejects resource tokens. Resource backends use
verifier.authorize_resource(token, resource="https://resource.example/api", capability="documents:read", machine_client=machine_client, workspace_id=workspace_id).
Omit workspace_id for personal access. The machine client needs the application's
resource_access:check permission. The helper verifies locally and performs a
fresh live check on every call; denial, malformed decisions, and service failures
raise rather than falling back to offline authorization.
protected_resource_metadata(resource, issuer, application_id, capabilities) builds
discovery metadata; resource_challenge(metadata_uri, error=None, description=None)
builds a validated and escaped WWW-Authenticate value. No authorization decisions
are cached. Resource JWTs are limited to 16 KiB.
1 maintainer
Metadata
1 maintainer
Release files for supaapps-platform93-auth 0.7.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| supaapps_platform93_auth-0.7.0.tar.gz | 12.8 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| supaapps_platform93_auth-0.7.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 25.6 kB
Release files / supaapps_platform93_auth-0.7.0.tar.gz
| Download URL | supaapps_platform93_auth-0.7.0.tar.gz |
|---|---|
| Size | 12.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
6c18451a3a90423587aad49680e00fc26173bf788ff5fba9eaa8ea4c7758aa31
|
|
BLAKE2b-256 checksum How to use checksums |
f713a879fdd89dcfe99882b4394af22e9d0181fd2758e653691c6d5832e47ac8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logRelease files / supaapps_platform93_auth-0.7.0-py3-none-any.whl
| Download URL | supaapps_platform93_auth-0.7.0-py3-none-any.whl |
|---|---|
| Size | 12.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
acd5a4dc8661381ca5971117fcee28dfe9dd4065ef06ee790f25eba8adaa0838
|
|
BLAKE2b-256 checksum How to use checksums |
13bd395772b5d3125fbe5511ddb4e74228f679e6befbf6e4f9d496f9cdd0164a
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logSecurity for supaapps-platform93-auth 0.7.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for supaapps_platform93_auth-0.7.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 22, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
