LogoAuthlib
Logo Authlib
The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWE, JWK, JWA, JWT are included.
-stars -forks
  • Get Started
  • OAuth Clients
  • JOSE Guide
  • Flask OAuth Providers
  • Django OAuth Providers
  • Specifications
    • RFC5849: The OAuth 1.0 Protocol
    • RFC6749: The OAuth 2.0 Authorization Framework
    • RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
    • RFC7009: OAuth 2.0 Token Revocation
    • RFC7515: JSON Web Signature
    • RFC7516: JSON Web Encryption
    • RFC7517: JSON Web Key
    • RFC7518: JSON Web Algorithms
    • RFC7519: JSON Web Token
    • RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants
    • RFC7591: OAuth 2.0 Dynamic Client Registration Protocol
    • RFC7636: Proof Key for Code Exchange by OAuth Public Clients
    • RFC7662: OAuth 2.0 Token Introspection
    • RFC8628: OAuth 2.0 Device Authorization Grant
    • OpenID Connect 1.0
  • Community
  • Changelog

Useful Links

  • Homepage
  • Read Blog
  • Commercial License
  • Star on GitHub
  • Follow on Twitter
  • Help on StackOverflow
  • Loginpass
Sponsor
Professionally-supported Authlib is available with the Tidelift Subscription.

Specifications¶

Guide on specifications. You don’t have to read this section if you are just using Authlib. But it would be good for you to understand how Authlib works.

  • RFC5849: The OAuth 1.0 Protocol
    • Servers
    • Models Mixin
  • RFC6749: The OAuth 2.0 Authorization Framework
    • API References
  • RFC6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
    • Guide on Bearer Token
    • API Reference
  • RFC7009: OAuth 2.0 Token Revocation
    • Register Revocation Endpoint
    • API Reference
  • RFC7515: JSON Web Signature
    • API Reference
  • RFC7516: JSON Web Encryption
    • API Reference
  • RFC7517: JSON Web Key
    • API Reference
  • RFC7518: JSON Web Algorithms
    • Algorithms for JWS
    • Algorithms for JWE
    • Algorithms for JWK
  • RFC7519: JSON Web Token
    • API Reference
  • RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants
    • Using JWTs as Authorization Grants
    • Using JWTs for Client Authentication
    • Using JWTs Client Assertion in OAuth2Session
    • API Reference
  • RFC7591: OAuth 2.0 Dynamic Client Registration Protocol
    • Client Registration Endpoint
    • API Reference
  • RFC7636: Proof Key for Code Exchange by OAuth Public Clients
    • Using RFC7636 in Authorization Code Grant
    • Using code_challenge in Client
    • API Reference
  • RFC7662: OAuth 2.0 Token Introspection
    • Register Introspection Endpoint
    • API Reference
  • RFC8628: OAuth 2.0 Device Authorization Grant
    • Device Authorization Endpoint
    • Device Code Grant
    • Verification Endpoint
    • API Reference
  • OpenID Connect 1.0
    • OpenID Grants
    • OpenID Claims
← API References of Django... RFC5849: The OAuth 1.0 Protocol →
© Copyright 2017, Hsiaoming Ltd.
A typlog sphinx theme, designed by Hsiaoming Yang.