axioms-fastapi

What it is and what it does

axioms-fastapi is a FastAPI middleware and dependency-injection library that validates JWT access tokens issued by OAuth2/OIDC providers and enforces claim-based authorization rules. It fetches and caches the issuer's public key set (JWKS), validates token signatures and claims (audience, issuer, expiration), and provides decorators to protect routes by requiring specific scopes, roles, or permissions. The package is built on fastapi, pyjwt, jwcrypto, python-box, and pydantic-settings, and it handles the token validation layer so your API can focus on business logic.

The library is designed for resource servers that trust an external authorization provider to issue tokens. It supports flexible configuration (environment variables or direct initialization), custom claim names to work with different providers, and both OR and AND logic for permission checks. It also includes optional middleware for automatic token extraction and validation on all requests, setting the token payload on the request state for access in route handlers.

Use it for:

• Protect FastAPI routes with JWT tokens issued by AWS Cognito, Auth0, or Okta without writing custom validation logic.
• Enforce role-based access control (RBAC) by checking token claims for specific roles before allowing route access.
• Implement permission-based authorization for fine-grained resource access (e.g., admin:write, user:read).
• Validate token signatures and issuer claims to prevent token substitution and algorithm confusion attacks.
• Build a multi-tenant API where different clients authenticate via a shared OAuth2 provider and are isolated by audience claim.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Adds OAuth2/OIDC JWT token validation and claim-based authorization (scopes, roles, permissions) to FastAPI APIs, with support for tokens from AWS Cognito, Auth0, Okta, Microsoft Entra, and other standard providers.

Yes, with conditions. The package solves a real problem (JWT validation for FastAPI) with low install friction and no security vulnerabilities. However, it is very new (first release 2025-11-09) with minimal adoption (139638 monthly downloads but only 14 GitHub stars), so production use should be preceded by thorough testing against your specific authorization server and load profile. The MIT license and support for modern Python versions (3.8–3.13) are strengths; the aging maintenance status reflects its infancy, not neglect.

Install

axioms-fastapi on PyPI

pip install axioms-fastapi

uv add axioms-fastapi

poetry add axioms-fastapi

Installing axioms-fastapi

Before you install

Low install friction with a pure-Python wheel. Maintenance status is aging—the package is only days old (first release 2025-11-09, last commit 2025-11-15), so long-term stability and community adoption remain unproven despite active recent development.

License in practice

MIT license is permissive and imposes no restrictions on commercial or private use, modification, or redistribution as long as the license notice is retained.

Quickstart

pip install axioms-fastapi

from fastapi import FastAPI, Depends
from axioms_fastapi import init_axioms, require_auth

app = FastAPI()
init_axioms(app, AXIOMS_AUDIENCE="api.example.com", AXIOMS_ISS_URL="https://auth.example.com")

@app.get("/protected")
async def protected(payload=Depends(require_auth)):
    return {"user_id": payload.sub}

Verify before relying

• Whether the package has been tested against real-world authorization servers beyond documentation examples
• Performance characteristics when validating high request volumes or with slow JWKS endpoint responses
• Whether custom claim namespacing works reliably across different authorization server implementations

Package facts

Evidence: axioms_fastapi-0.0.13-py3-none-any.whl

Keywords: fastapi, oauth2, oidc, jwt, authentication, authorization, axioms, security

Tags

More Python Modules packages