{"id":47765222,"url":"https://github.com/waqasbhatti/authnzerver","last_synced_at":"2026-04-03T06:13:38.983Z","repository":{"id":45993782,"uuid":"172417868","full_name":"waqasbhatti/authnzerver","owner":"waqasbhatti","description":"An authentication-authorization server built on Tornado.","archived":false,"fork":false,"pushed_at":"2022-01-29T16:49:30.000Z","size":1692,"stargazers_count":2,"open_issues_count":2,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-08-08T21:49:23.481Z","etag":null,"topics":["authentication","authorization","python","tornado"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/waqasbhatti.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-02-25T02:09:42.000Z","updated_at":"2021-12-02T03:16:07.000Z","dependencies_parsed_at":"2022-08-25T09:21:15.431Z","dependency_job_id":null,"html_url":"https://github.com/waqasbhatti/authnzerver","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/waqasbhatti/authnzerver","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waqasbhatti%2Fauthnzerver","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waqasbhatti%2Fauthnzerver/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waqasbhatti%2Fauthnzerver/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waqasbhatti%2Fauthnzerver/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/waqasbhatti","download_url":"https://codeload.github.com/waqasbhatti/authnzerver/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waqasbhatti%2Fauthnzerver/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31338526,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-03T06:12:52.500Z","status":"ssl_error","status_checked_at":"2026-04-03T06:12:08.917Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["authentication","authorization","python","tornado"],"created_at":"2026-04-03T06:13:34.438Z","updated_at":"2026-04-03T06:13:38.975Z","avatar_url":"https://github.com/waqasbhatti.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build\nStatus](https://ci.wbhatti.org/buildStatus/icon?job=authnzerver)](https://ci.wbhatti.org/job/authnzerver) [![Documentation Status](https://readthedocs.org/projects/authnzerver/badge/?version=latest)](https://authnzerver.readthedocs.io/en/latest/?badge=latest)\n\nThis is a small server meant to help add authentication (authn) and\nauthorization (authz) to other HTTP servers. It's built using\n[Tornado](http://www.tornadoweb.org), [SQLAlchemy](https://www.sqlalchemy.org/),\n[cryptography](https://cryptography.io),\n[argon2-cffi](https://argon2-cffi.readthedocs.io/en/stable/),\n[python-diskcache](http://www.grantjenks.com/docs/diskcache/),\n[sortedcontainers](http://www.grantjenks.com/docs/sortedcontainers/index.html),\nand [uvloop](https://github.com/MagicStack/uvloop).\n\nI wrote it to help with the login/logout/signup flows for the [Light Curve\nCollection Server](https://github.com/waqasbhatti/lcc-server) and extracted much\nof the code from there. It builds on the auth bits there and is eventually meant\nto replace them. It can do the following things:\n\n- Handle user sign-ups, logins, logouts, and locks/unlocks.\n- Handle user email verification, password changes, forgotten password\n  processes, and editing user properties.\n- Handle API key issuance and verification.\n- Handle access and rate-limit checks for arbitrary schemes of user roles,\n  permissions, and target items. There is a [default\n  scheme](https://github.com/waqasbhatti/authnzerver/blob/master/authnzerver/default-permissions-model.json)\n  of permissions and user roles, originally from the LCC-Server where this code\n  was extracted from. A custom permissions policy can be specified as JSON.\n\nAuthnzerver talks to a frontend server over HTTP. Communications are secured\nwith symmetric encryption using the [cryptography](https://cryptography.io)\npackage's [Fernet scheme](https://cryptography.io/en/latest/fernet/), so you'll\nneed a pre-shared key that both Authnzerver and your frontend server know.\n\nSee [the HTTP API docs](https://authnzerver.readthedocs.io/en/latest/api.html)\nfor details on how to call Authnzerver from a frontend service.\n\nSee\n[TODO.md](https://github.com/waqasbhatti/authnzerver/blob/master/docs/TODO.md) for\nfeatures that are planned for the future. See\n[CHANGELOG.md](https://github.com/waqasbhatti/authnzerver/blob/master/CHANGELOG.md)\nfor a version history.\n\nMore docs are available at Authnzerver's (in-progress) [Read The\nDocs](https://authnzerver.readthedocs.io/en/latest/) site.\n\n\n## Installation\n\nAuthnzerver is [available at PyPI](https://pypi.org/project/authnzerver/), but\nis very much a work in progress at the moment. Maybe hold off on installing it\nuntil we've reached v0.2 (beta).\n\nWith that said, it can be installed (preferably in a virtualenv) using `pip`:\n\n```bash\n(venv) $ pip install authnzerver\n\n# use pip install authnzerver --pre for unstable releases\n```\n\nThere's also a [Docker container for\nauthnzerver](https://hub.docker.com/r/waqasbhatti/authnzerver) available on\nDocker Hub. The command below pulls the master branch version for now; stable\nversions will be added to Docker Hub later:\n\n```\ndocker pull waqasbhatti/authnzerver:latest\n```\n\n## Running the server\n\n[See the docs](https://authnzerver.readthedocs.io/en/latest/running.html) on how\nto configure the server with environment variables or command-line options, and\nrun it either as a Docker container or as script executable from the Python\npackage.\n\n### Quick start\n\nIf you have authnzerver installed as a Python package in an activated virtualenv:\n\n```bash\nauthnzrv --autosetup --basedir=$(PWD)\n```\n\nIf you're running it as a Docker container:\n\n```bash\ndocker run -p 13431:13431 -v $(PWD):/home/authnzerver/basedir \\\n  --rm -it waqasbhatti/authnzerver:latest \\\n  --autosetup --basedir=/home/authnzerver/basedir\n```\n\n## License\n\nAuthnzerver is provided under the MIT License. See the LICENSE file for details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwaqasbhatti%2Fauthnzerver","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwaqasbhatti%2Fauthnzerver","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwaqasbhatti%2Fauthnzerver/lists"}