gotrue
Python Client Library for Supabase Auth
What it is and what it does
Gotrue is a Python client library for Supabase Auth that provides authentication functionality including user sign-up, sign-in, token refresh, and JWT management. It wraps HTTP requests to Supabase's authentication endpoints using httpx, validates data with pydantic, and handles JWT tokens via pyjwt. The library supports modern Python versions (3.9 through 3.13) and has low installation friction with only three runtime dependencies.
However, this package is deprecated and abandoned. The maintainers replaced it with supabase_auth in December 2024 and ceased updates as of August 7, 2025. The repository is archived and will not receive bug fixes, security patches, or new features. Any new projects should use supabase_auth instead; existing projects using gotrue should plan a migration.
Use it for:
- Authenticate users against a Supabase backend in a Python application.
- Manage JWT tokens and session state for Supabase Auth-protected APIs.
- Integrate Supabase authentication into a Python web service or CLI tool.
- Refresh and validate authentication tokens for long-running processes.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Python client library for Supabase Auth that handles authentication and JWT token management via HTTP requests.
No. The package is explicitly deprecated and abandoned as of August 2025 with no further updates planned. While it has low install friction and permissive licensing, installing a package known to be unmaintained introduces technical debt and security risk. Use supabase_auth instead, which is the actively maintained replacement.
Install
gotrue on PyPI
pip
pip install gotrueuv
uv add gotruepoetry
poetry add gotrueInstalling gotrue
Before you install
Low install friction with three lightweight runtime dependencies (httpx, pydantic, pyjwt). However, the package is abandoned as of August 2025 and will receive no further updates; the maintainers have explicitly directed users to migrate to supabase_auth instead.
License in practice
MIT license permits commercial and private use with minimal restrictions, requiring only attribution and inclusion of the license text.
Quickstart
pip install gotrue
from gotrue import Client
client = Client(url="https://your-supabase-url/auth/v1")
user = client.sign_up(email="user@example.com", password="password")
Requires Python 3.9 or later. Package is deprecated and no longer maintained; use supabase_auth instead.
Verify before relying
- Whether existing projects using gotrue will continue to work with future Python versions or dependency updates after August 2025.
- Whether dependencies (httpx, pydantic, pyjwt) will receive security updates that gotrue will not backport.
Package facts
| License | MIT (permissive) |
| Python support | supports the current Python release (<4.0,>=3.9) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 3 — httpx, pydantic, pyjwt |
| Maintenance | abandoned — 371 days since the last release |
| Last repo commit | (repository archived) |
| First released | |
| Downloads | 4,115,414/month — #2,378 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: gotrue-2.12.4-py3-none-any.whl
Tags
More WWW/HTTP packages
urllib3 is an HTTP client library that provides…
permissive · top 100 on PyPI
requestsRequests is a Python HTTP library that…
permissive · top 100 on PyPI
h11h11 is a pure-Python HTTP/1.1 protocol…
permissive · top 100 on PyPI
httpxHTTPX is a fully featured HTTP client library…
permissive · top 100 on PyPI
httpcoreA minimal low-level HTTP client library that…
permissive · top 100 on PyPI
aiohttpaiohttp is an async HTTP client and server…
permissive · top 100 on PyPI
supabase-authA Python client library for Supabase Auth that…
permissive · top 1,000 on PyPI
supafuncSupafunc provides a Python client library for…
permissive · top 5,000 on PyPI
supabasePython client library for Supabase that…
permissive · top 1,000 on PyPI
vonage-http-clientProvides a synchronous HTTP client for…
permissive · top 15,000 on PyPI
djangorestframework-jwtAdds JSON Web Token (JWT) authentication…
permissive · top 15,000 on PyPI
storage3Async Python client library for uploading,…
permissive · top 1,000 on PyPI
fastapi-cognitoDecodes, validates, and parses AWS Cognito JWT…
permissive · top 15,000 on PyPI
supertokens-pythonInterfaces a Python API with the SuperTokens…
permissive · top 15,000 on PyPI
drf-jwtAdds JSON Web Token (JWT) authentication to…
permissive · top 15,000 on PyPI
supabase-functionsProvides Python clients to invoke Supabase Edge…
permissive · top 1,000 on PyPI