{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/18"},{"label":"Security","url":"https://skillfed.io/packages/category/security/2"}],"enrichment":{"capability":"Adds OAuth2/OIDC JWT token validation and claim-based authorization (scopes, roles, permissions) to FastAPI APIs, with support for tokens from AWS Cognito, Auth0, Okta, Microsoft Entra, and other standard providers.","skillfed_tags":["oauth2-oidc","jwt-validation","fastapi-middleware"],"use_cases":["Protect FastAPI routes with JWT tokens issued by AWS Cognito, Auth0, or Okta without writing custom validation logic.","Enforce role-based access control (RBAC) by checking token claims for specific roles before allowing route access.","Implement permission-based authorization for fine-grained resource access (e.g., admin:write, user:read).","Validate token signatures and issuer claims to prevent token substitution and algorithm confusion attacks.","Build a multi-tenant API where different clients authenticate via a shared OAuth2 provider and are isolated by audience claim."],"what_it_does":"axioms-fastapi is a FastAPI middleware and dependency-injection library that validates JWT access tokens issued by OAuth2/OIDC providers and enforces claim-based authorization rules. It fetches and caches the issuer's public key set (JWKS), validates token signatures and claims (audience, issuer, expiration), and provides decorators to protect routes by requiring specific scopes, roles, or permissions. The package is built on fastapi, pyjwt, jwcrypto, python-box, and pydantic-settings, and it handles the token validation layer so your API can focus on business logic.\n\nThe library is designed for resource servers that trust an external authorization provider to issue tokens. It supports flexible configuration (environment variables or direct initialization), custom claim names to work with different providers, and both OR and AND logic for permission checks. It also includes optional middleware for automatic token extraction and validation on all requests, setting the token payload on the request state for access in route handlers.","worth_installing":"Yes, with conditions. The package solves a real problem (JWT validation for FastAPI) with low install friction and no security vulnerabilities. However, it is very new (first release 2025-11-09) with minimal adoption (139638 monthly downloads but only 14 GitHub stars), so production use should be preceded by thorough testing against your specific authorization server and load profile. The MIT license and support for modern Python versions (3.8\u20133.13) are strengths; the aging maintenance status reflects its infancy, not neglect."},"id":"axioms-fastapi","links":{"html":"https://skillfed.io/packages/axioms-fastapi","md":"https://skillfed.io/packages/axioms-fastapi.md","pypi":"https://pypi.org/project/axioms-fastapi/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-11-15","license_spdx":null,"license_treatment":"permissive","name":"axioms-fastapi","python_support":"supports_current","summary":"OAuth2/OIDC authentication and authorization for FastAPI APIs"},"popularity":{"monthly_downloads":139638,"position":11294,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.0.13"}