Metadata-Version: 2.4
Name: intflow-auth-sdk
Version: 0.1.0
Summary: Intflow Auth relying application SDK.
Author: Intflow
License: Proprietary
Requires-Python: >=3.12
Requires-Dist: httpx<1,>=0.28
Requires-Dist: pyjwt[crypto]<3,>=2.10
Provides-Extra: dev
Requires-Dist: build<2,>=1.2; extra == 'dev'
Requires-Dist: mypy<2,>=1.13; extra == 'dev'
Requires-Dist: pytest-asyncio<1,>=0.25; extra == 'dev'
Requires-Dist: pytest<9,>=8; extra == 'dev'
Requires-Dist: twine<7,>=6; extra == 'dev'
Description-Content-Type: text/markdown

# Intflow Auth SDK

Python SDK for relying applications that integrate with Intflow Auth.

This package is for application backends that need to validate Intflow-issued
tokens and enforce application roles. It does not provide operator credential
storage, service runtime components, or Admin API automation.

## Install

```powershell
python -m pip install intflow-auth-sdk
```

## Current Status

This package provides PKCE helpers, authorization URL construction, OIDC
discovery/JWKS caching, Intflow access-token verification, and application-role
checks.

```python
from intflow_auth_sdk import create_token_verifier, require_app_role

verifier = create_token_verifier(audience="your-oauth-client-id")
verified = verifier.verify_access_token(access_token)
require_app_role(verified.payload, "admin")

print(verified.payload["sub"])
```

For local fake-token examples, see `examples/python-sdk-consumer`.
