AuthLoom is a reusable authentication package for FastAPI applications, designed around secure defaults and async database access.
Key Features
- Email/password authentication with normalized email handling
- Argon2 password hashing
- Cookie-backed sessions with hashed session tokens
- Strict session expiry and revocation checks
- Session cleanup and CSRF protection
- Async SQLAlchemy integration with PostgreSQL and SQLite support
Developer Experience
- Example applications demonstrating the package integration
- MkDocs documentation and Alembic integration guidance
- GitHub Actions workflows for linting and integration tests
- Reproducible signed releases through PyPI Trusted Publishing