Welcome to aiohttp_auth_autz’s documentation!¶
This library provides authorization and authentication middleware plugins for aiohttp servers.
These plugins are designed to be lightweight, simple, and extensible, allowing the library to be reused regardless of the backend authentication mechanism. This provides a familiar framework across projects.
There are three middleware plugins provided by the library. The
plugin provides a simple system for authenticating a users credentials, and
ensuring that the user is who they say they are.
autz_middleware plugin provides a generic way of authorization using
different authorization policies. There is the ACL authorization policy as a
part of the plugin.
acl_middleware plugin provides a simple access control list authorization
mechanism, where users are provided access to different view handlers depending
on what groups the user is a member of. It is recomended to use
with ACL policy instead of this middleware.
This is a fork of aiohttp_auth
library that fixes some bugs and security issues and also introduces a generic
autz middleware with built in ACL authorization policy.
$ pip install aiohttp_auth_autz