frankie567/reauth

Reauth is a Python library being built as a comprehensive authentication toolkit, a collection of reusable building blocks for adding login and identity verification to Python applications. Authentication is the process of confirming who a user is, and this library aims to provide the primitives and higher level workflows needed to do that properly, from simple one time passwords up to full identity provider capabilities. The project is organized in three tiers on its roadmap. In the short term, it is building factor primitives, the individual methods of verifying identity. Email OTP, a one time code sent by email, HOTP, and TOTP, counter based and time based one time passwords used in authenticator apps, are already implemented. Passwords, security keys, passkeys, and social login are planned. Multi factor authentication workflow management, the logic for requiring and sequencing multiple verification steps, is also complete. In the mid term, the plan is to add session management for maintaining logged in state, and wrappers for popular Python web frameworks and ORM libraries to make integration easier. In the long term, the roadmap includes a full OIDC server. OIDC, or OpenID Connect, is the standard protocol used by identity providers like Google and GitHub, along with team and organizational user management. The README explicitly warns that this is an early stage project with an unstable API and incomplete documentation. Development uses the uv package manager and just command runner. You would use this if you are building a Python application and want a modular authentication system rather than a monolithic solution. Written in Python, it is available on PyPI.