Metadata-Version: 2.4
Name: intflow-auth-sdk
Version: 0.1.1
Summary: Intflow Auth relying application SDK.
Author: Intflow
License: Proprietary
Requires-Python: >=3.12
Requires-Dist: httpx<1,>=0.28
Requires-Dist: pyjwt[crypto]<3,>=2.10
Provides-Extra: dev
Requires-Dist: build<2,>=1.2; extra == 'dev'
Requires-Dist: mypy<2,>=1.13; extra == 'dev'
Requires-Dist: pytest-asyncio<1,>=0.25; extra == 'dev'
Requires-Dist: pytest<9,>=8; extra == 'dev'
Requires-Dist: ruff<1,>=0.9; extra == 'dev'
Requires-Dist: twine<7,>=6; extra == 'dev'
Description-Content-Type: text/markdown

# Intflow Auth SDK

Python SDK for relying applications that integrate with Intflow Auth.

This package is for application backends that need to validate Intflow-issued
tokens and enforce application roles. It does not provide operator credential
storage, service runtime components, or Admin API automation.

## Install

```powershell
python -m pip install intflow-auth-sdk
```

## Current Status

This package provides PKCE helpers, authorization URL construction, OIDC
discovery/JWKS caching, Intflow access-token verification, and application-role
checks.

```python
from intflow_auth_sdk import create_token_verifier, require_app_role

with create_token_verifier(audience="your-oauth-client-id") as verifier:
    verified = verifier.verify_access_token(access_token)
    require_app_role(verified.payload, "admin")

print(verified.payload["sub"])
```

Long-running services should create one `IntflowTokenVerifier` or
`AsyncIntflowTokenVerifier` during startup, reuse it for request handling, and
call `close()` or `aclose()` during shutdown. One-shot helper functions remain
available for scripts and tests.

For local fake-token examples, see `examples/python-sdk-consumer`.
