tigrbl_auth 0.3.0.dev2

A Tigrbl Multi‑tenant OpenID‑Connect / OAuth2 Identity‑Provider server by Swarmauri.

---

Tigrbl Auth

Terminology

• Tenant – a namespace used to group related resources such as repositories or clients.
• Principal – an owner of resources, for example an individual user or an organization.

---

Auto Authn: Multi-Tenant OpenID Connect Provider

Auto Authn is an async, SQL-backed Identity Provider for OpenID Connect 1.0 and OAuth 2.1. It provides per-tenant isolation and is designed to scale for SaaS deployments.

Features

• Per-tenant issuer URLs with isolated user and client tables.
• RSA-based JWT signing with helpers for key rotation.
• FastAPI and SQLAlchemy 2.0 async stack.
• OIDC discovery endpoints and JWKS generation.
• Configurable PostgreSQL or SQLite storage with optional Redis support.

Installation

pip install tigrbl_auth

Extras are available for common database drivers:

# PostgreSQL
pip install tigrbl_auth[postgres]

# SQLite
pip install tigrbl_auth[sqlite]

Quick Start

from tigrbl_auth.app import create_app

app = create_app()

The embedded surface_api exposes resource and flow operations for in-process usage via namespaces like surface_api.core.User.create.

Check the documentation for detailed setup and configuration.

To run the API locally with Uvicorn:

uvicorn tigrbl_auth.app:app --reload

The service exposes an OpenID Connect discovery document at /.well-known/openid-configuration and publishes its JSON Web Key Set at /.well-known/jwks.json.

Configuration

Auto Authn reads settings from environment variables. Common options include:

• PG_DSN or the combination of PG_HOST, PG_PORT, PG_DB, PG_USER, PG_PASS for database connectivity.
• REDIS_HOST, REDIS_PORT, REDIS_DB, and REDIS_PASSWORD for Redis session storage (optional).
• JWT_SECRET for token signing and LOG_LEVEL to control logging verbosity.

Docker

A lightweight Dockerfile is provided. Build and run the service with:

docker build -t tigrbl-auth .
docker run -p 8000:8000 tigrbl-auth

Visit http://localhost:8000/docs to explore the interactive API documentation.

Contributing

Contributions are welcome! Please open an issue or submit a pull request to discuss improvements.

License

Apache-2.0