warrant

What it is and what it does

Warrant is a Python wrapper around AWS Cognito user management, designed to simplify common authentication and user administration tasks. It provides a Cognito class that encapsulates operations like user registration, login (with SRP support), password reset, profile updates, and token handling, alongside an AWSSRP utility for Secure Remote Password authentication.

The package has no runtime dependencies and installs cleanly, but it is no longer maintained. Its last release was in December 2017 and the repository shows no commits since November 2022. It explicitly targets Python 2.7 and 3.6, both of which reached end-of-life years ago. While the code may still run on newer Python versions, there is no active support or testing to confirm compatibility, and any breaking changes in boto3 or AWS Cognito's API would not be addressed.

Use it for:

• Build a Python web application that needs to authenticate users against an AWS Cognito user pool without writing raw boto3 calls.
• Implement user self-service operations like password reset, profile updates, and email verification in a legacy Python 2.7 or 3.6 codebase.
• Perform admin operations on Cognito user pools, such as listing users or groups, from a Python backend.
• Integrate Cognito SRP authentication into a client application to avoid sending passwords in plain text.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Warrant wraps AWS Cognito user management operations into a Python class, handling user registration, authentication, password reset, profile updates, and token management.

No. While the package has no known vulnerabilities and installs without friction, it is abandoned and targets obsolete Python versions (2.7, 3.6). Modern AWS Cognito development should use boto3 directly or a maintained wrapper. Only consider it if you are maintaining legacy code already locked to Python 2.7 or 3.6 and cannot migrate.

Install

warrant on PyPI

pip install warrant

uv add warrant

poetry add warrant

Installing warrant

Before you install

Installation is frictionless with no runtime dependencies. However, the package is abandoned—last commit was 2022-11-07 and latest release 2017-12-11. It targets Python 2.7 and 3.6, both long out of support, so compatibility with modern Python versions is uncertain.

License in practice

Licensed under Apache License 2.0 (permissive), which allows commercial and private use with minimal restrictions, though you must include a copy of the license and state significant changes.

Quickstart

pip install warrant

from warrant import Cognito

u = Cognito('your-user-pool-id', 'your-client-id', username='bob')
u.authenticate(password='bobs-password')

Requires AWS Cognito user pool and client credentials; package targets Python 2.7 and 3.6, which are no longer supported.

Verify before relying

• Whether the package works reliably with Python versions newer than 3.6
• Current compatibility with modern versions of boto3 or AWS SDK dependencies
• Whether SRP authentication still functions with current AWS Cognito API

Package facts

Evidence: warrant-0.6.1-py2.py3-none-any.whl

Keywords: aws

Tags

More Python Modules packages