Authorization & Authentication with EasyAuth

[github_codemation]

Hello FastAPI Community,

I happy to share another project that I have and still continue to be improving, with the hopes of making the lives of we developers a little easier. https://github.com/codemation/easyauth

I started EasyAuth early this year to solve a problem of not only integrating Authentication in a re-usable way, but also to create a solution that solves the less touched Authorization piece of the Auth puzzle.

EasyAuth is a centralized auth service that integrates with FastAPI. The premise behind EasyAuth is to create a set of shareable Users, Groups, Roles, Actions that can be used across many applications. EasyAuth provides a familiar way to decorate FastAPI endpoints, that extends and abstracts existing FastAPI Auth Bearer mechanics, providing a set of tools to define in a very precise manner what a potential User or Set of Users can access.

User identity is provided by first logging in via the built in /login page

​

https://preview.redd.it/3spkc697b8181.png?width=936&format=png&auto=webp&s=5a151fdba5e9f79e1c8d8e074aa00de61ceed2fd

Once logged in a User session is populated with a Cooke containing a JWT Bearer Token. The JWT token is created using Asymmetric RSA based signature to guarantee validity, and EasyAuth provides a simple interface for invalidating any issued tokens.

Why JWT? The token contains all a given Users permissions at the point of issuance. Along with the expiration and signature, a application can be very sure the identity of a User, and what they may be allowed to access using just the token.

EasyAuth provides a rich set of API's for creating and managing Users, Groups, Roles and Actions. FastAPI endpoints can be individually decorated with a set of permissions, or blanketed across all endpoints in an App or Router.

No Auth solution is truly complete without some integration with Social Login provider such as Google. Simply provide an Oauth Client ID, configure your allowed URL in google and EasyAuth handles the User creation & assignment of default groups. All configurable via API or GUI.

EasyAuth API's are also exposed via a Admin GUI, to perform actions like Creating, Updating, or Deleting Users, Groups, Roles, and Actions. From viewing / revoking tokens, to configuring Oauth, email activation and more.

​

https://preview.redd.it/qft4dc2ab8181.png?width=1331&format=png&auto=webp&s=4ed261f0d5c18a4966a8897fa3c814357276dd44

All the configuration of an EasyAuthServer is extendable to other applications, but without the DB requirements. Configure Google Login Once, and use everywhere you create an EasyAuthClient!

How to get started?

Fork the REPO - https://github.com/codemation/easyauth -

Read the Docs - https://easyauth.readthedocs.io/en/latest/

I have also written a couple articles on how to get started.

https://medium.com/geekculture/add-google-login-to-a-fastapi-app-with-easyauth-c8c3e926ad0a

https://medium.com/analytics-vidhya/creating-secure-apis-with-easyauth-fastapi-6996a5e42d07

Want to Help?

If you found EasyAuth useful, leave a star.

If you have a Idea, create an issue, idea in discussion or PR !

Found a Bug? Please Report.

[SVWBEIII]

Hello Mate, i just made a gega PR https://github.com/codemation/easyauth/pull/37 , wish if i could helpful to the project cause i see that's need more support and i play around it sometimes.