Verge Auth SDK

Enterprise Authentication & RBAC for FastAPI Applications

Turn your FastAPI routes into enterprise-grade permissions automatically.

Verge Auth provides centralized authentication, role-based access control (RBAC), audit logging, and permission management with minimal integration effort.

---

Why Verge Auth?

Traditional authentication platforms solve login.

Verge Auth solves authentication, authorization, and permission management.

Key Features

• Centralized Authentication
• Route-Based Permission Generation
• Enterprise RBAC
• Group-Based Access Control
• Audit Logging
• Multi-Tenant Support
• OIDC & SAML Ready
• AI-Powered Security Insights
• FastAPI Native Integration

---

Installation

pip install verge_auth_sdk

---

Quick Start

1. Add Verge Auth to Your Application

from fastapi import FastAPI
from verge_auth_sdk import add_central_auth

app = FastAPI()

# Your routes

add_central_auth(app)

2. Configure Environment Variables

AUTH_BASE_URL=https://api.vergeauth.in

VERGE_CLIENT_ID=<client-id>
VERGE_CLIENT_SECRET=<client-secret>
VERGE_SERVICE_SECRET=<service-secret>

SERVICE_NAME=hrms-service
SERVICE_BASE_URL=https://api.example.com
SERVICE_FRONTEND_URL=https://app.example.com

3. Start Your Application

When the application starts, Verge Auth automatically:

• Registers your service
• Discovers application routes
• Generates route permissions
• Synchronizes permissions with the Verge Auth platform
• Configures JWT validation

Your application is now protected.

---

How Permission Generation Works

Verge Auth automatically discovers routes in your application and converts them into assignable permissions.

Example:

@app.get("/api/employees")
def list_employees():
    pass

@app.post("/api/employees")
def create_employee():
    pass

Automatically generates permissions:

hrms-service:/api/employees:get
hrms-service:/api/employees:post

Administrators can assign these permissions through the Verge Auth dashboard without modifying application code.

---

Authentication Flow

1. User authenticates through Verge Auth.
2. Verge Auth issues an authorization code.
3. SDK exchanges the code for a secure access token.
4. User session is established.
5. Requests are automatically validated.
6. Permissions are enforced on every route.

---

User Context

Authenticated user information is available inside requests:

from fastapi import Request

@app.get("/auth/me")
def current_user(request: Request):
    return request.state.auth

Example response:

{
  "auth_user_id": 1,
  "roles": ["HR Manager"],
  "permissions": [
    "hrms-service:/api/employees:get"
  ]
}

---

Supported Authentication Features

• Local Authentication
• Multi-Factor Authentication (MFA)
• Passwordless Authentication
• OIDC Federation
• SAML Federation
• Microsoft Entra ID Integration
• Google Workspace Integration
• Custom Identity Providers

Feature availability depends on your Verge Auth plan.

---

Security

Verge Auth implements enterprise-grade security practices:

• RS256 JWT Verification
• Automatic Key Rotation Support
• HTTP-Only Secure Cookies
• Service-to-Service Authentication
• Fine-Grained Route Permissions
• Audit Logging
• Multi-Layer Access Control

---

Documentation

Platform Documentation:

https://vergeinfosoft.com/docs/

Product Guide:

https://vergeinfosoft.com/verge-auth-product-guide/

---

Support

Website:

https://vergeauth.in

Email:

contactus@vergeinfosoft.com

---

License

Copyright © Verge Infosoft.

All rights reserved.