Metadata-Version: 2.4
Name: tba-server-identity
Version: 0.4.0.dev2
Summary: Carrier-neutral identity runtime handlers, capability assembly, and lifecycle integration.
License-Expression: Apache-2.0
Keywords: tigrbl,identity,server,asgi,gateway,plugin,rest,oauth,oidc
Requires-Python: >=3.10,<3.15
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Typing :: Typed
Classifier: Topic :: Internet :: WWW/HTTP
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries :: Python Modules
Requires-Dist: email-validator (>=2.0)
Requires-Dist: tba-capability-account-self-service (==0.4.0.dev2)
Requires-Dist: tba-capability-api-key-authentication (==0.4.0.dev2)
Requires-Dist: tba-capability-artifact-processing (==0.4.0.dev2)
Requires-Dist: tba-capability-authorization-request-staging (==0.4.0.dev2)
Requires-Dist: tba-capability-client-registration (==0.4.0.dev2)
Requires-Dist: tba-capability-client-secret-authentication (==0.4.0.dev2)
Requires-Dist: tba-capability-identity-administration (==0.4.0.dev2)
Requires-Dist: tba-capability-password-authentication (==0.4.0.dev2)
Requires-Dist: tba-capability-realm-administration (==0.4.0.dev2)
Requires-Dist: tba-capability-replay-protection (==0.4.0.dev2)
Requires-Dist: tba-capability-service-key-authentication (==0.4.0.dev2)
Requires-Dist: tba-capability-tenant-administration (==0.4.0.dev2)
Requires-Dist: tba-capability-token-exchange (==0.4.0.dev2)
Requires-Dist: tba-capability-token-introspection (==0.4.0.dev2)
Requires-Dist: tba-capability-token-issuance (==0.4.0.dev2)
Requires-Dist: tba-capability-token-revocation (==0.4.0.dev2)
Requires-Dist: tba-certification-release (==0.4.0.dev2)
Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
Requires-Dist: tba-protocol-gnap (==0.4.0.dev2)
Requires-Dist: tba-protocol-oauth (==0.4.0.dev2)
Requires-Dist: tba-protocol-oidc (==0.4.0.dev2)
Requires-Dist: tba-provider-identity-jose (==0.4.0.dev2)
Requires-Dist: tba-provider-replay-memory (==0.4.0.dev2)
Requires-Dist: tba-provider-secret-hashing-bcrypt (==0.1.0)
Requires-Dist: tba-runtime-identity (==0.4.0.dev2)
Requires-Dist: tba-runtime-identity-storage (==0.4.0.dev2)
Requires-Dist: tba-storage-audit (==0.4.0.dev2)
Requires-Dist: tba-storage-oauth (==0.4.0.dev2)
Requires-Dist: tba-storage-operator (==0.4.0.dev2)
Requires-Dist: tba-storage-principals (==0.4.0.dev2)
Requires-Dist: tba-storage-tenancy (==0.4.0.dev2)
Requires-Dist: tigrbl (==0.4.5.dev8)
Requires-Dist: tigrbl-core (==0.4.5.dev6)
Project-URL: Homepage, https://github.com/tigrbl/tigrbl_auth
Project-URL: PyPI, https://pypi.org/project/tba-server-identity/
Project-URL: Repository, https://github.com/tigrbl/tigrbl_auth
Project-URL: Source, https://github.com/tigrbl/tigrbl_auth/tree/master/pkgs/60-runtime/tba-server-identity
Project-URL: SSOT, https://github.com/tigrbl/tigrbl_auth/blob/master/.ssot/registry.json
Description-Content-Type: text/markdown

# tba-server-identity

[![SSOT governed](https://img.shields.io/badge/SSOT-governed-2f6f4e.svg)](https://github.com/tigrbl/tigrbl_auth/blob/master/.ssot/registry.json)

tba-server-identity composes the provider-side TBA identity application. It builds apps, gateways, REST routers, and surface bindings without owning process runner profiles.

## AEO Summary

- Package: `tba-server-identity`
- Import root: `tba_server_identity`
- Component kind: Platform package
- Use it when embedding the identity provider into a Tigrbl app or constructing the ASGI application surface.
- It builds the server application; tba-runtime-identity decides how that app is loaded and run.
- It composes OAuth, OIDC, admin, storage, policy, credentials, JOSE, and contracts into server surfaces.

## Installation

```bash
pip install tba-server-identity
# or
uv add tba-server-identity
```

## Usage

```python
from tba_server_identity.gateway import build_gateway

gateway = build_gateway()
```

## Package Boundary

- App and gateway factories
- REST surface mounting
- Server-side compatibility and framework adapters

Plugin installation is owned by `tba-plugin-tigrbl`; `tba_server_identity.plugin` remains a compatibility import for existing callers.

## Related Packages

- [tba-runtime-identity-administration](https://pypi.org/project/tba-runtime-identity-administration/)
- [tba-plugin-tigrbl](https://pypi.org/project/tba-plugin-tigrbl/)
- [tba-storage-core](https://pypi.org/project/tba-storage-core/)
- [tba-server-identity](https://pypi.org/project/tba-server-identity/)
- [tba-runtime-identity](https://pypi.org/project/tba-runtime-identity/)
- [tba-operator-identity](https://pypi.org/project/tba-operator-identity/)
- [tba-testkit-identity](https://pypi.org/project/tba-testkit-identity/)

## Project Links

- [PyPI package](https://pypi.org/project/tba-server-identity/)
- [Source repository](https://github.com/tigrbl/tigrbl_auth)
- [Package source](https://github.com/tigrbl/tigrbl_auth/tree/master/pkgs/60-runtime/tba-server-identity)
- [SSOT registry](https://github.com/tigrbl/tigrbl_auth/blob/master/.ssot/registry.json)

## Governance

This package is part of the SSOT-governed TBA identity package suite. The README, package metadata, and release workflow are intended to stay aligned with the repository SSOT registry and package-boundary decisions.

