gotrue
Python Client Library for Supabase Auth
Decision gist · record as of 2026-08-14
No. The package is explicitly deprecated and abandoned as of August 2025 with no further updates planned. While it has low install friction and permissive licensing, installing a package known to be unmaintained introduces technical debt and security risk. Use supabase_auth instead, which is the actively maintained replacement.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python 3.9 or later.
- Package is deprecated and no longer maintained; use supabase_auth instead.
- Low install friction with three lightweight runtime dependencies (httpx, pydantic, pyjwt).
License · maintenance · safety
MIT (permissive) — MIT license permits commercial and private use with minimal restrictions, requiring only attribution and inclusion of the license text.
last release 2025-08-08 (371 days) · last repo commit 2025-09-08 · 118 stars · archived
0 known vulnerabilities (OSV.dev, 2026-08-14) · 4,115,414 downloads/mo, #2,378 on PyPI
Alternatives
Verify before relying
pip install gotrue
from gotrue import Client
client = Client(url="https://your-supabase-url/auth/v1")
user = client.sign_up(email="user@example.com", password="password")- Whether existing projects using gotrue will continue to work with future Python versions or dependency updates after August 2025.
- Whether dependencies (httpx, pydantic, pyjwt) will receive security updates that gotrue will not backport.
What it is and what it does
Gotrue is a Python client library for Supabase Auth that provides authentication functionality including user sign-up, sign-in, token refresh, and JWT management. It wraps HTTP requests to Supabase's authentication endpoints using httpx, validates data with pydantic, and handles JWT tokens via pyjwt. The library supports modern Python versions (3.9 through 3.13) and has low installation friction with only three runtime dependencies.
However, this package is deprecated and abandoned. The maintainers replaced it with supabase_auth in December 2024 and ceased updates as of August 7, 2025. The repository is archived and will not receive bug fixes, security patches, or new features. Any new projects should use supabase_auth instead; existing projects using gotrue should plan a migration.
Use it for
- Authenticate users against a Supabase backend in a Python application.
- Manage JWT tokens and session state for Supabase Auth-protected APIs.
- Integrate Supabase authentication into a Python web service or CLI tool.
- Refresh and validate authentication tokens for long-running processes.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
No.
The package is explicitly deprecated and abandoned as of August 2025 with no further updates planned. While it has low install friction and permissive licensing, installing a package known to be unmaintained introduces technical debt and security risk. Use supabase_auth instead, which is the actively maintained replacement.
Install
gotrue on PyPI
Before you install
Low install friction with three lightweight runtime dependencies (httpx, pydantic, pyjwt). However, the package is abandoned as of August 2025 and will receive no further updates; the maintainers have explicitly directed users to migrate to supabase_auth instead.
Requires Python 3.9 or later. Package is deprecated and no longer maintained; use supabase_auth instead.
License in practice
MIT license permits commercial and private use with minimal restrictions, requiring only attribution and inclusion of the license text.
Quickstart
pip install gotrue
from gotrue import Client
client = Client(url="https://your-supabase-url/auth/v1")
user = client.sign_up(email="user@example.com", password="password")Verify before relying
- Whether existing projects using gotrue will continue to work with future Python versions or dependency updates after August 2025.
- Whether dependencies (httpx, pydantic, pyjwt) will receive security updates that gotrue will not backport.
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release <4.0,>=3.9 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 3 packageshttpxpydanticpyjwt |
| Maintenance | Abandoned 371 days since the last release |
| Last repo commit | repository archived |
| First released | |
| Downloads | 4,115,414 / month, #2,378 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 7 - InactiveLicense :: OSI Approved :: MIT LicenseOperating System :: OS IndependentProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.9 |
Evidence: gotrue-2.12.4-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “supabase authentication client”
- gotruePython client library for Supabase Auth that handles authentication…
- supabase-authA Python client library for Supabase Auth that handles user…
- supabasePython client library for Supabase that provides unified access to…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also supabase-auth · supafunc · supabase · vonage-http-client · djangorestframework-jwt · storage3 · fastapi-cognito · supertokens-python · drf-jwt · supabase-functions