https://github.com/authlib/authlib
django flask jose jwe jwk jws jwt oauth oauth2 oauth2-provider oauth2-server oidc openid-connect
Score: 32.807486948607576
Last synced: about 15 hours ago
JSON representation
Repository metadata:
The ultimate Python library in building OAuth, OpenID Connect clients and servers. JWS, JWE, JWK, JWA, JWT included.
- Host: GitHub
- URL: https://github.com/authlib/authlib
- Owner: authlib
- License: bsd-3-clause
- Created: 2017-10-27T06:52:26.000Z (almost 9 years ago)
- Default Branch: main
- Last Pushed: 2026-08-11T14:32:56.000Z (13 days ago)
- Last Synced: 2026-08-20T07:11:52.082Z (5 days ago)
- Topics: django, flask, jose, jwe, jwk, jws, jwt, oauth, oauth2, oauth2-provider, oauth2-server, oidc, openid-connect
- Language: Python
- Homepage: https://authlib.org
- Size: 3.88 MB
- Stars: 5,401
- Watchers: 57
- Forks: 556
- Open Issues: 141
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: .github/SECURITY.md
-
Funding:
- Github: authlib, lepture
Owner metadata:
- Name: Authlib
- Login: authlib
- Email:
- Kind: organization
- Description: The ultimate Python library in building OAuth and OpenID Connect servers.
- Website: https://authlib.org/
- Location: Japan
- Twitter: authlib
- Company:
- Icon url: https://avatars.githubusercontent.com/u/32964472?v=4
- Repositories: 13
- Last Synced at: 2026-08-21T07:48:51.583Z
- Profile URL: https://github.com/authlib
GitHub Events
Total
- Create event: 14
- Delete event: 5
- Fork event: 29
- Issue comment event: 104
- Issues event: 57
- Pull request event: 46
- Pull request review comment event: 25
- Pull request review event: 41
- Push event: 61
- Release event: 6
- Watch event: 246
- Total: 634
Last Year
- Create event: 11
- Delete event: 3
- Fork event: 13
- Issue comment event: 53
- Issues event: 38
- Pull request event: 28
- Pull request review comment event: 21
- Pull request review event: 29
- Push event: 39
- Release event: 4
- Watch event: 131
- Total: 370
Committers metadata
Last synced: 5 days ago
Total Commits: 1,577
Total Committers: 146
Avg Commits per committer: 10.801
Development Distribution Score (DDS): 0.247
Commits in past year: 183
Committers in past year: 20
Avg Commits per committer in past year: 9.15
Development Distribution Score (DDS) in past year: 0.464
| Name | Commits | |
|---|---|---|
| Hsiaoming Yang | m****e@l****m | 1188 |
| Éloi Rivard | e****i@y****p | 193 |
| Ber Zoidberg | b****g@g****m | 7 |
| Kai A. Hiller | g****t@k****e | 4 |
| Levin | l****s@g****m | 4 |
| Kartik Ohri | k****3@g****m | 4 |
| Jaap Roes | j****s@l****l | 4 |
| Dong | l****y@g****m | 4 |
| Félix Rohrlich | f****x@y****p | 4 |
| Tom Christie | t****m@t****m | 3 |
| Rogier van der Geer | r****r@g****m | 3 |
| Pablo Marti | p****o@a****u | 3 |
| Nikita Spivachuk | n****k@d****m | 3 |
| Grey Li | w****i@g****m | 3 |
| Alex Ball | a****l | 3 |
| Jacopo Nespolo | j****o@e****t | 2 |
| Mario Jimenez Carrasco | m****o@g****m | 2 |
| Bastian Venthur | m****l@v****e | 2 |
| Jay Turner | j****r@g****m | 2 |
| princekhunt | i****o@p****m | 2 |
| mondi04 | 2****4 | 2 |
| Tomasz Kontusz | t****z@g****m | 2 |
| Tim Gates | t****s@i****m | 2 |
| Thomas Scholtes | g****r@a****m | 2 |
| Randy Duodu | d****9@g****m | 2 |
| François Voron | f****n@g****m | 2 |
| Dave Hallam | d****b@y****m | 2 |
| James Chien | s****2@g****m | 2 |
| Max Murashov | m****v@r****u | 2 |
| Vlad Dmitrievich | 2****s@g****m | 2 |
| and 116 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 63
Total pull requests: 99
Average time to close issues: 11 months
Average time to close pull requests: about 1 month
Total issue authors: 49
Total pull request authors: 39
Average comments per issue: 1.81
Average comments per pull request: 0.89
Merged pull request: 56
Bot issues: 0
Bot pull requests: 1
Past year issues: 32
Past year pull requests: 67
Past year average time to close issues: 13 days
Past year average time to close pull requests: 6 days
Past year issue authors: 25
Past year pull request authors: 28
Past year average comments per issue: 1.16
Past year average comments per pull request: 0.91
Past year merged pull request: 36
Past year bot issues: 0
Past year bot pull requests: 1
Top Issue Authors
- azmeuk (12)
- markhobson (3)
- bendavis78 (2)
- maia-iyer (1)
- RafalSkolasinski (1)
- caarmen (1)
- 0x1618 (1)
- Jsalaz1989 (1)
- MaidScientistIzutsumiMarin (1)
- JaapJoris (1)
- kimminw00 (1)
- rcludwick (1)
- NomAnor (1)
- ziwang-com (1)
- robotadam (1)
Top Pull Request Authors
- azmeuk (33)
- lepture (12)
- liudonggalaxy (6)
- zachswasey (3)
- shc261392 (3)
- Aetylus (2)
- frohrlich (2)
- alex-ball (2)
- EpicWink (2)
- levinKaus (2)
- yannj-fr (2)
- MartinPaulEve (2)
- aliaksei-protchanka (2)
- bendavis78 (1)
- guillett (1)
Top Issue Labels
- role:authorization_server (7)
- spec (6)
- documentation (5)
- bug (4)
- server (3)
- client (3)
- jose (3)
- integration:httpx (2)
- good first issue (2)
- role:client (1)
- spec:rfc6749 (1)
- integration:flask (1)
- Security (1)
- question (1)
- integration:requests (1)
Top Pull Request Labels
- role:authorization_server (8)
- documentation (2)
- spec:rfc7523 (2)
- bug (2)
- feature request (1)
- spec:rfc7636 (1)
- spec:oidc-rpinitiated (1)
- spec:oidc-backchannel (1)
- dependencies (1)
- spec:oidc-core (1)
- github_actions (1)
Package metadata
- Total packages: 4
-
Total downloads:
- conda: 6,996 total
- pypi: 155,963,551 last-month
- Total docker downloads: 62,849,134
- Total dependent packages: 161 (may contain duplicates)
- Total dependent repositories: 2,188 (may contain duplicates)
- Total versions: 121
- Total maintainers: 1
- Total advisories: 12
pypi.org: authlib
The ultimate Python library in building OAuth and OpenID Connect servers and clients.
- Homepage:
- Documentation: https://docs.authlib.org/
- Licenses: BSD-3-Clause
- Latest release: 1.7.2 (published 4 months ago)
- Last Synced: 2026-08-24T09:07:40.111Z (about 16 hours ago)
- Versions: 63
- Dependent Packages: 157
- Dependent Repositories: 2,180
- Downloads: 155,963,551 Last month
- Docker Downloads: 62,849,134
-
Rankings:
- Downloads: 0.103%
- Dependent packages count: 0.15%
- Dependent repos count: 0.236%
- Docker downloads count: 0.618%
- Average: 0.816%
- Stargazers count: 1.123%
- Forks count: 2.665%
- Maintainers (1)
-
Funding:
- https://github.com/sponsors/lepture
-
Advisories:
- Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type
- Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect
- Authlib: Cross-site request forging when using cache
- Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding
- Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
- Authlib JWS JWK Header Injection: Signature Verification Bypass
- Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
- Authlib has 1-click Account Takeover vulnerability
- Authlib : JWE zip=DEF decompression bomb enables DoS
- Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
- Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
- Authlib has algorithm confusion with asymmetric public keys
proxy.golang.org: github.com/authlib/authlib
- Homepage:
- Documentation: https://pkg.go.dev/github.com/authlib/authlib#section-documentation
- Licenses: bsd-3-clause
- Latest release: v1.7.2 (published 4 months ago)
- Last Synced: 2026-08-24T00:19:35.305Z (1 day ago)
- Versions: 42
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent packages count: 5.488%
- Average: 5.672%
- Dependent repos count: 5.857%
anaconda.org: authlib
The ultimate Python library in building OAuth and OpenID Connect servers. It is designed from low level specifications implementations to high level frameworks integrations, to meet the needs of everyone.
- Homepage: https://authlib.org
- Licenses: BSD-3-Clause
- Latest release: 1.7.2 (published 3 months ago)
- Last Synced: 2026-06-08T23:03:57.523Z (3 months ago)
- Versions: 14
- Dependent Packages: 4
- Dependent Repositories: 8
- Downloads: 6,996 Total
-
Rankings:
- Dependent packages count: 11.114%
- Stargazers count: 13.772%
- Forks count: 17.638%
- Average: 20.523%
- Dependent repos count: 39.565%
spack.io: py-authlib
The ultimate Python library in building OAuth and OpenID Connect servers. JWS, JWK, JWA, JWT are included.
- Homepage: https://github.com/authlib/authlib
- Licenses: []
- Latest release: 1.6.7 (published 6 months ago)
- Last Synced: 2026-08-23T08:31:31.215Z (1 day ago)
- Versions: 2
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Average: 26.511%
- Dependent packages count: 53.022%
Dependencies
- actions/checkout v2 composite
- github/codeql-action/analyze v1 composite
- github/codeql-action/init v1 composite
- actions/checkout v2 composite
- actions/setup-python v2 composite
- codecov/codecov-action v1 composite
- cryptography >=3.2
- actions/checkout v3 composite
- actions/download-artifact v3 composite
- actions/setup-python v4 composite
- actions/upload-artifact v3 composite
- pypa/gh-action-pypi-publish release/v1 composite
- actions/checkout v6 composite
- astral-sh/setup-uv v7 composite