fastapi-cloudauth

What it is and what it does

fastapi-cloudauth is a FastAPI integration library that standardizes JWT token verification and user claim extraction for three major cloud authentication providers: AWS Cognito, Auth0, and Firebase Authentication. It wraps the token validation logic (signature verification, expiration checks, audience claims) and provides FastAPI dependency injection helpers to protect endpoints with scope-based authorization and to inject authenticated user information into route handlers.

The package depends on fastapi, python-jose (for JWT handling), and requests (for fetching public keys). It supports extracting both access tokens (for scope-based authorization) and ID tokens (for full user profile data), and allows custom Pydantic models to extend the default claims. However, the package has been abandoned since January 2022 with no maintenance activity, meaning it will not receive updates for breaking changes in FastAPI, security patches, or new authentication standards.

Use it for:

• Protect FastAPI endpoints with AWS Cognito access tokens and scope-based authorization.
• Integrate Auth0 authentication into FastAPI applications with custom claim extraction via Pydantic models.
• Verify Firebase ID tokens in FastAPI routes and extract user identity information.
• Implement scope-based access control (all-scopes or any-scope matching) across multiple cloud providers.
• Extract and validate user profile data (email, username, custom fields) from JWT claims in dependency injection.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Integrates FastAPI applications with cloud authentication services (AWS Cognito, Auth0, Firebase Authentication) to verify JWT tokens, validate scopes, and extract user claims.

No. While the package is low-friction to install and permissively licensed, it is abandoned (last release January 2022, no commits since May 2023). FastAPI, python-jose, and authentication standards have evolved; the package will not receive security patches or compatibility fixes. For new projects, use actively maintained alternatives or implement token verification directly with current versions of FastAPI and python-jose.

Install

fastapi-cloudauth on PyPI

pip install fastapi-cloudauth

uv add fastapi-cloudauth

poetry add fastapi-cloudauth

Installing fastapi-cloudauth

Before you install

Low install friction with three straightforward runtime dependencies. However, the package is abandoned—last release was 2022-01-06, over 1681 days ago, with no recent commits. Security patches and compatibility updates for FastAPI or authentication standards will not be forthcoming.

License in practice

MIT license is permissive; you may use, modify, and distribute this package freely in commercial or private projects without restriction.

Quickstart

pip install fastapi-cloudauth

from fastapi import FastAPI, Depends
from fastapi_cloudauth.cognito import Cognito

app = FastAPI()
auth = Cognito(region="us-east-1", userPoolId="pool-id", client_id="client-id")

@app.get("/", dependencies=[Depends(auth.scope(["read:users"]))])
def secure():
    return "Hello"

Requires environment variables (REGION, USERPOOLID, APPCLIENTID for Cognito; DOMAIN, CUSTOMAPI for Auth0; PROJECT_ID for Firebase) and valid tokens from the respective cloud authentication service.

Verify before relying

• Whether the package remains compatible with current versions of FastAPI, python-jose, and requests given its abandoned status.
• Whether dependency versions are pinned or if breaking changes in FastAPI's dependency injection have affected the package since 2022.

Package facts

Evidence: fastapi_cloudauth-0.4.3-py3-none-any.whl

Keywords: FastAPI, authentication, Auth0, AWS Cognito, Firebase Authentication

Tags

More Security packages