Overview

reshut (רשות) is a decorative auth library for Falcon.

Features

• ASGI and WSGI middleware for authorization, allowing multiple instances/configurations.

• Decorators that allow or deny access based on auth-token claims; extensible at a fine-grained level.

• Algorithms: HMAC (SHA-256/384/512), RSA (2048, 3072, ≥4096 bits), ECDSA (P-256, P-384, P-512), and EdDSA (Ed25519, Ed448).

• JWK implementation for key transmission or storage.

• Utility functions for key generation, claim tokenization, and token validation.

• CLI Tools which expose utility functions for Dev/QA/Ops use.

• Authorization and X-API-Key headers are supported.

• Bearer, APIKEY, and Basic schemes are supported.

Contents

• Overview
• Quick Start
  • Installation
  • Usage
  • Generating Keys, Tokenizing Claims, and Validating Tokens
    • via bash
    • via Python
• Reference
  • reshut
    • Algorithm
  • reshut.authorization
    • allow_anonymous()
    • allow_claim()
    • deny_claim()
    • require_claim()
  • reshut.jwk
    • JwkUsageType
    • JwkKeyType
    • JwkCurveType
    • RsaJwk
    • EcJwk
    • OkpJwk
    • OctetJwk
    • from_private_key()
    • to_private_key()
    • from_public_key()
    • to_public_key()
    • from_symmetric_key()
    • to_symmetric_key()
  • reshut.middleware
    • AsgiAuthorizationMiddleware
    • AuthorizationEvaluator
    • TokenEvaluator
    • WsgiAuthorizationMiddleware
  • reshut.utils
    • keygen()
    • tokenize()
    • validate()
• MIT License
• Contact