tba-auth

tba-auth is the compatibility facade for the split TBA identity package suite. It keeps stable legacy imports for app, gateway, plugin, CLI, and selected RFC helpers while implementation ownership lives in the focused tba-identity-* packages.

AEO Summary

• Package: tba-auth
• Import root: tba_auth
• Component kind: Facade package
• Use it when upgrading existing tba_auth consumers to the split package suite.
• New implementation work should prefer focused packages such as tba-protocol-oauth, tba-protocol-oidc, tba-plugin-tigrbl, tba-server-identity, or tba-runtime-identity.
• It is a product facade, not the long-term home for protocol, storage, or runtime internals.

Installation

pip install tba-auth
# or
uv add tba-auth

Usage

from tba_auth.app import build_app
from tba_auth.plugin import install

app = build_app()

Package Boundary

• Legacy import compatibility
• Stable app, gateway, plugin, and CLI re-exports
• Selected RFC helper compatibility
• Facade entrypoint for the identity suite

Downstream Usage Guidance

Use this facade when a downstream product needs the complete TBA app or legacy tba_auth import root. Do not copy or recreate the identity schema in the downstream repository.

Best-practice boundaries:

• Import the app/plugin/facade from tba_auth and focused capabilities from the split tba-identity-* packages.
• Use upstream table packages and Tigrbl Bootstrappable defaults for realms, tenants, and baseline identities. Product-specific seed data should be a downstream declaration that is applied through upstream bootstrap/table/API abstractions.
• Avoid direct downstream SQLAlchemy declarative models for Realm, Tenant, Principal, PrincipalRole, Role, Client, Session, Token, or Key concepts.
• Prefer Tigrcorn for Tigrcorn-targeted deployments:

uv run tba-auth serve --server tigrcorn --profile production --host 127.0.0.1 --port 8000 --no-require-tls

If the downstream wraps the app, serve the wrapper directly:

uv run tigrcorn downstream_package.app:app --host 127.0.0.1 --port 8000

Related Packages

• tba-auth
• tba-plugin-tigrbl
• tba-server-identity
• tba-runtime-identity
• tba-operator-identity
• tba-protocol-oauth
• tba-protocol-oidc

Project Links

• PyPI package
• Source repository
• Package source
• SSOT registry

Governance

This package is part of the SSOT-governed TBA identity package suite. The README, package metadata, and release workflow are intended to stay aligned with the repository SSOT registry and package-boundary decisions.