oauthenticator
OAuthenticator: Authenticate JupyterHub users with common OAuth providers
Decision gist · record as of 2026-08-14
Yes, if you run JupyterHub and need OAuth2 authentication. The package is actively maintained, has low install friction, supports many common providers out of the box, and carries no known vulnerabilities. It is the standard way to integrate OAuth identity providers with JupyterHub. Install only if you have a JupyterHub instance and an OAuth provider to configure.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires Python >=3.10 and a running JupyterHub instance configured with OAuth provider credentials.
- Low install friction with a pure-Python wheel distribution.
- Active maintenance with a recent release and ongoing commits; last commit 2026-08-03 indicates current development activity.
License · maintenance · safety
BSD-3-Clause (permissive) — BSD-3-Clause is a permissive open-source license with minimal restrictions on use, modification, and distribution in both open and proprietary contexts.
last release 2026-03-26 (141 days) · last repo commit 2026-08-03 · 444 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 90,218 downloads/mo, #13,611 on PyPI
Alternatives
Verify before relying
pip install oauthenticator
In jupyterhub_config.py:
from oauthenticator.github import GitHubOAuthenticator
c.JupyterHub.authenticator_class = GitHubOAuthenticator- Whether all listed OAuth providers (Auth0, Azure AD, Bitbucket, CILogon, GitHub, GitLab, Globus, Google, MediaWiki, OpenShift) are equally well-maintained and documented.
- Performance characteristics and scalability limits when handling large numbers of concurrent authentication requests.
- Whether the GenericAuthenticator can be reliably used with arbitrary OAuth2 providers not explicitly listed.
What it is and what it does
OAuthenticator bridges OAuth2 identity providers and JupyterHub by overriding the login handlers to support token-based authentication instead of username/password mapping. It ships with authenticators for major providers like GitHub, Google, Azure AD, GitLab, Globus, and others, plus a GenericAuthenticator for custom OAuth2 setups.
The package depends on JupyterHub, Tornado, requests, PyJWT, and related utilities to handle OAuth flows, token validation, and user session management. It is designed for administrators deploying JupyterHub in environments where centralized identity management through OAuth2 is preferred, such as institutional deployments, cloud platforms, or organizations already using services like GitHub or Google Workspace.
Use it for
- Deploy JupyterHub with GitHub OAuth so users log in via their GitHub account without separate credentials.
- Configure institutional Azure AD authentication for a JupyterHub instance serving a university or enterprise.
- Set up Globus authentication for a research computing environment requiring federated identity management.
- Use GenericAuthenticator to integrate JupyterHub with a custom or less common OAuth2 provider.
- Migrate from local JupyterHub authentication to Google OAuth for simplified user management.
- Enable single sign-on across multiple JupyterHub deployments using a shared OAuth identity provider.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you run JupyterHub and need OAuth2 authentication.
The package is actively maintained, has low install friction, supports many common providers out of the box, and carries no known vulnerabilities. It is the standard way to integrate OAuth identity providers with JupyterHub. Install only if you have a JupyterHub instance and an OAuth provider to configure.
Install
oauthenticator on PyPI
Before you install
Low install friction with a pure-Python wheel distribution. Active maintenance with a recent release and ongoing commits; last commit 2026-08-03 indicates current development activity.
Requires Python >=3.10 and a running JupyterHub instance configured with OAuth provider credentials.
License in practice
BSD-3-Clause is a permissive open-source license with minimal restrictions on use, modification, and distribution in both open and proprietary contexts.
Quickstart
pip install oauthenticator
In jupyterhub_config.py:
from oauthenticator.github import GitHubOAuthenticator
c.JupyterHub.authenticator_class = GitHubOAuthenticatorVerify before relying
- Whether all listed OAuth providers (Auth0, Azure AD, Bitbucket, CILogon, GitHub, GitLab, Globus, Google, MediaWiki, OpenShift) are equally well-maintained and documented.
- Performance characteristics and scalability limits when handling large numbers of concurrent authentication requests.
- Whether the GenericAuthenticator can be reliably used with arbitrary OAuth2 providers not explicitly listed.
Package facts
| License | BSD-3-Clause permissive |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 7 packagesjsonschemajupyterhubpyjwtrequestsruamel-yamltornadotraitlets |
| Maintenance | Actively maintained 141 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 90,218 / month, #13,611 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Intended Audience :: DevelopersIntended Audience :: Science/ResearchIntended Audience :: System AdministratorsLicense :: OSI Approved :: BSD LicenseProgramming Language :: PythonProgramming Language :: Python :: 3 |
Evidence: oauthenticator-17.4.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “jupyterhub oauth authentication”
- oauthenticatorOAuthenticator provides OAuth2 login handlers for JupyterHub,…
- jupyterhubJupyterHub is a multi-user server that spawns, manages, and proxies…
- pamelaPamela provides a Python interface to the Linux/Unix PAM (Pluggable…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also streamlit-authenticator · fastapi-sso · django-oidc-provider · Flask-OAuthlib · jupyterhub · Flask-Dance · flask-oidc · google-auth-oauthlib · oauth2 · ssh-import-id