Registry / auth-security / igwn-auth-utils

igwn-auth-utils

library1.4.0pypypi✓ verified 83d ago

Authorisation utilities for the IGWN (International Gravitational-Wave Observatory Network). Provides token management, scitoken creation/validation, and authentication helpers. Current version 1.4.0, released May 2025. Active development, monthly releases.

auth-security

pip install igwn-auth-utils

package ↗homepage ↗docs ↗

INSTALL

IMPORT

SIG · IGWN-AUTH-UTILS

igwn-auth-utils

auth-securitypythonv1.4.0

Install

3.1s avg

Import

—

Disk

37MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v1.4.0 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 38.4MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 3.1s · import 0.000s · 39MB

37MB installed

● package 37MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

HTTPSciTokenAuth

✓ from igwn_auth_utils import HTTPSciTokenAuth

✗ from igwn_auth_utils import get_access_token

Session

✓ from igwn_auth_utils import Session

get_scitoken

✓ from igwn_auth_utils import get_scitoken

Fetch an access token using client credentials.

import os from igwn_auth_utils import get_access_token token = get_access_token( token_url=os.environ.get('IGWN_TOKEN_URL', 'https://example.com/token'), client_id=os.environ.get('IGWN_CLIENT_ID', ''), client_secret=os.environ.get('IGWN_CLIENT_SECRET', '') ) print(f'Token: {token[:20]}...')

Debug

Known issues

breakingVersion 1.0.0 changed import paths from `igwn.auth_utils` to `igwn_auth_utils`.

fix

Update imports to use underscores.

affects: <1.0.0

deprecated`create_authorization_header` is deprecated in 1.2.0+ in favor of `get_access_token`.

fix

Use `get_access_token` which returns a token object with a `header` property.

affects: >=1.2.0

gotchaScitoken validation requires the `audience` parameter to match exactly; mismatches cause silent failures.

fix

Verify the audience claim in the token matches the expected value.

affects: all

Upgrade

Version history

1.4.0latest on PyPI · released May 30, 2025

Audit

Dependencies

cryptographyrequiredToken signing and verification

requestsrequiredHTTP requests to auth endpoints

pyjwtrequiredJWT encoding/decoding

Agent activity

22 hits · last 30 days

node

Amazon

OpenAI (training)

Resources

packagehttps://pypi.org/project/igwn-auth-utils/ ↗

homepagehttps://git.ligo.org/computing/igwn-auth-utils/ ↗

docshttps://igwn-auth-utils.readthedocs.io ↗