django-oauth-toolkit
OAuth2 Provider for Django
Decision gist · record as of 2026-08-14
Yes. The package is actively maintained, production-stable, has no known vulnerabilities, installs with low friction, and solves a well-defined problem—adding OAuth2 provider capabilities to Django. It is RFC-compliant and widely used (top 5000 PyPI packages). Install it if you need to add OAuth2 authentication or token management to a Django application.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Django 4.2, 5.0, 5.1, 5.2 or 6.0; Python 3.10 or later; oauthlib 3.2.2 or later.
- Low friction installation with a pure-Python wheel.
- Actively maintained with a release 21 days ago and ongoing repository activity.
License · maintenance · safety
permissive license (permissive) — BSD license (permissive) allows commercial and private use with minimal restrictions—you must retain copyright notices and disclaimers in distributions.
last release 2026-07-24 (21 days) · last repo commit 2026-08-09 · 3,333 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 5,223,762 downloads/mo, #2,136 on PyPI
Alternatives
Verify before relying
pip install django-oauth-toolkit
# In settings.py
INSTALLED_APPS = [
...,
'django_oauth_toolkit',
]
# In urls.py
from django_oauth_toolkit import urls
urlpatterns = [
path('o/', include(urls)),
]- Whether the package supports custom OAuth2 grant types beyond standard flows.
- Performance characteristics under high token request volume.
- Specific token storage backend options and scalability trade-offs.
- Full scope of token refresh and revocation capabilities.
What it is and what it does
Django OAuth Toolkit is an OAuth2 provider library that integrates into Django projects to add standards-compliant OAuth2 authorization and token management. It builds on oauthlib to handle RFC-compliant specification and provides pre-built endpoints, data models, and business logic so you don't have to implement OAuth2 from scratch. The package is designed for two main scenarios: protecting your Django REST API with OAuth2 authentication, or running a full OAuth2 authorization server to issue tokens for your infrastructure.
The toolkit handles the core OAuth2 flows and token lifecycle through Django models and views. You configure it by adding the app to INSTALLED_APPS and including its URL patterns, then your Django project becomes an OAuth2 provider. It relies on django, requests, urllib3, oauthlib, and jwcrypto to manage HTTP communication, cryptographic operations, and standards compliance.
Use it for
- Protect a Django REST API by requiring OAuth2 bearer tokens from client applications.
- Build an OAuth2 authorization server to issue and manage tokens for multiple services in your infrastructure.
- Implement delegated authentication so third-party apps can request access to user data without storing passwords.
- Add token endpoints to a Django application for secure session management.
- Integrate OAuth2 scopes and permissions into Django's permission system for fine-grained access control.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
The package is actively maintained, production-stable, has no known vulnerabilities, installs with low friction, and solves a well-defined problem—adding OAuth2 provider capabilities to Django. It is RFC-compliant and widely used (top 5000 PyPI packages). Install it if you need to add OAuth2 authentication or token management to a Django application.
Install
django-oauth-toolkit on PyPI
Before you install
Low friction installation with a pure-Python wheel. Actively maintained with a release 21 days ago and ongoing repository activity. Depends on well-established packages: django, requests, urllib3, oauthlib, and jwcrypto.
Requires Django 4.2, 5.0, 5.1, 5.2 or 6.0; Python 3.10 or later; oauthlib 3.2.2 or later.
License in practice
BSD license (permissive) allows commercial and private use with minimal restrictions—you must retain copyright notices and disclaimers in distributions.
Quickstart
pip install django-oauth-toolkit
# In settings.py
INSTALLED_APPS = [
...,
'django_oauth_toolkit',
]
# In urls.py
from django_oauth_toolkit import urls
urlpatterns = [
path('o/', include(urls)),
]Verify before relying
- Whether the package supports custom OAuth2 grant types beyond standard flows.
- Performance characteristics under high token request volume.
- Specific token storage backend options and scalability trade-offs.
- Full scope of token refresh and revocation capabilities.
Package facts
| License | permissive license permissive |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 5 packagesdjangorequestsurllib3oauthlibjwcrypto |
| Maintenance | Actively maintained 21 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 5,223,762 / month, #2,136 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableEnvironment :: Web EnvironmentFramework :: DjangoFramework :: Django :: 4.2Framework :: Django :: 5.0Framework :: Django :: 5.1Framework :: Django :: 5.2Framework :: Django :: 6.0Intended Audience :: DevelopersLicense :: OSI Approved :: BSD LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet :: WWW/HTTP |
Evidence: django_oauth_toolkit-3.4.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “django oauth2 provider”
- django-oauth-toolkitAdds OAuth2 authorization server capabilities to Django applications,…
- django-oidc-providerProvides OpenID Connect and OAuth 2.0 server endpoints,…
- mozilla-django-oidcIntegrates Django applications with OpenID Connect identity providers…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also djangorestframework-api-key · requests-oauthlib · openfga-sdk · sanic-jwt · django-oidc-provider · django-scim2 · Flask-OAuthlib · requests-auth · oauth2-client · h2o-authn