{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Verifies Auth0-issued access tokens and secures Python APIs with Bearer and DPoP authentication schemes, automatically detecting and validating token types.","skillfed_tags":["auth0","oauth2","jwt-validation"],"use_cases":["Validate incoming Bearer tokens in a FastAPI or Django REST endpoint before processing requests.","Implement DPoP-enhanced security for sensitive API operations requiring proof-of-possession authentication.","Accept and verify access tokens from multiple Auth0 domains in a multi-tenant SaaS application.","Exchange legacy or external identity provider tokens for Auth0 access tokens during a migration.","Automatically fetch and cache Auth0 JWKS metadata per issuer to validate token signatures."],"what_it_does":"auth0-api-python is an SDK for validating Auth0-issued access tokens in Python server-side applications. It provides a unified entry point (`verify_access_token()`) that automatically detects and validates Bearer tokens (RS256) or DPoP-authenticated requests (ES256), with support for multiple Auth0 domains, automatic OIDC discovery, and per-issuer caching. The library is framework-agnostic and designed as a foundation for building integrations with FastAPI, Django, Flask, or any Python web framework.\n\nThe package handles the cryptographic and protocol details of JWT validation, DPoP proof verification (RFC 9449), and claim checking (iss, aud, exp, nbf). It also supports token exchange workflows via RFC 8693 for scenarios like migrating to Auth0 or integrating external identity providers. All operations are async-first, and the library provides detailed error handling with proper HTTP status codes and WWW-Authenticate headers.","worth_installing":"Yes. The package is actively maintained, has low install friction, carries a permissive MIT license, and solves a concrete problem\u2014Auth0 token verification\u2014with no known vulnerabilities. Install it if you are building a Python API that needs to validate Auth0 tokens; skip it if you use a different identity provider or do not require server-side token validation."},"id":"auth0-api-python","links":{"html":"https://skillfed.io/packages/auth0-api-python","md":"https://skillfed.io/packages/auth0-api-python.md","pypi":"https://pypi.org/project/auth0-api-python/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-03","license_spdx":null,"license_treatment":"permissive","name":"auth0-api-python","python_support":"supports_current","summary":"SDK for verifying access tokens and securing APIs with Auth0, using Authlib."},"popularity":{"monthly_downloads":248926,"position":8659,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.0b10"}