Authentication in Python

For OAuth, OAuthLib is a spec-level implementation with no ties to an HTTP library or web framework; other packages, including Django OAuth Toolkit, build on it. Authlib covers both clients and servers for OAuth 1, OAuth 2 and OpenID Connect, includes JWT and JOSE support, and integrates with Flask, Django, Starlette, Requests and HTTPX. In Django, django-allauth handles local accounts, email verification and social login with many providers, while Django OAuth Toolkit turns your Django project into an OAuth 2 authorization server.

PyJWT encodes and decodes JSON Web Tokens; always pass the expected algorithms when decoding instead of trusting the token header. For authorization in Django, django-guardian stores per-object permissions in the database, so you can grant a user access to one specific record. django-rules takes the opposite approach: permissions are Python predicates evaluated in code, with no extra database tables.