Authlib

The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included.

Authlib is compatible with Python3.11+.

Migrations

Authlib will deprecate authlib.jose module, please read:

• Migrating from authlib.jose to joserfc

Sponsors

Fund Authlib to access additional features

Features

Generic, spec-compliant implementation to build clients and providers:

• The OAuth 1.0 Protocol
  • RFC5849: The OAuth 1.0 Protocol
• The OAuth 2.0 Authorization Framework
  • RFC6749: The OAuth 2.0 Authorization Framework
  • RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
  • RFC7009: OAuth 2.0 Token Revocation
  • RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants
  • RFC7591: OAuth 2.0 Dynamic Client Registration Protocol
  • RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol
  • RFC7636: Proof Key for Code Exchange by OAuth Public Clients
  • RFC7662: OAuth 2.0 Token Introspection
  • RFC8414: OAuth 2.0 Authorization Server Metadata
  • RFC8628: OAuth 2.0 Device Authorization Grant
  • RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens
  • RFC9101: The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR)
  • RFC9207: OAuth 2.0 Authorization Server Issuer Identification
  • RFC9728: OAuth 2.0 Protected Resource Metadata
  • OAuth 2.0 Multiple Response Type Encoding Practices
  • OAuth 2.0 Form Post Response Mode
• Javascript Object Signing and Encryption
  • RFC7515: JSON Web Signature
  • RFC7516: JSON Web Encryption
  • RFC7517: JSON Web Key
  • RFC7518: JSON Web Algorithms
  • RFC7519: JSON Web Token
  • RFC7638: JSON Web Key (JWK) Thumbprint
  • RFC7797: JSON Web Signature (JWS) Unencoded Payload Option
  • RFC8037: ECDH in JWS and JWE
  • draft-madden-jose-ecdh-1pu-04: Public Key Authenticated Encryption for JOSE: ECDH-1PU
• OpenID Connect 1.0
  • OpenID Connect Core 1.0
  • OpenID Connect Discovery 1.0
  • OpenID Connect Dynamic Client Registration 1.0
  • OpenID Connect RP-Initiated Logout 1.0
  • OpenID Connect Back-Channel Logout 1.0
  • Initiating User Registration via OpenID Connect 1.0

Connect third party OAuth providers with Authlib built-in client integrations:

以上为 README 的开头部分。其余内容请阅读原文。 查看完整 README ↗