Python SDK (auris-sdk)

pip install auris-sdk

from auris import AurisClient
 
client = AurisClient("https://auth.yourdomain.com", "your-client-id")
 
result = client.login("[email protected]", "password")
print(f"Logged in as {result.user.email}")
print(f"Access token: {result.access_token}")

result = client.login("[email protected]", "password")
# result.access_token   str
# result.refresh_token  str
# result.user           UserInfo
 
client.logout()

user = client.get_user()
if user:
    print(user.id, user.email, user.roles)

token = client.get_access_token()
# Use in Authorization: Bearer <token> headers

result = client.refresh_token()

m2m = client.get_m2m_token("client-secret", scopes=["read:users", "manage:roles"])
# m2m.access_token  str
# m2m.expires_in    int

# Send a magic link email
client.login_with_magic_link("[email protected]")
 
# Verify the token extracted from the link URL
result = client.verify_magic_link("token-from-url")

from auris import ManagementClient
 
mgmt = ManagementClient(
    "https://auth.yourdomain.com",
    "your-client-id",
    "your-client-secret",
)

# List users
users = mgmt.list_users()
 
# Get a single user
user = mgmt.get_user("user-id")
 
# Create a user
user = mgmt.create_user(email="[email protected]", name="New User")
 
# Delete a user
mgmt.delete_user("user-id")
 
# Assign roles
mgmt.assign_roles("user-id", ["role-id-1", "role-id-2"])
 
# Remove roles
mgmt.remove_roles("user-id", ["role-id-1"])

# List organizations
orgs = mgmt.list_organizations()
 
# Get an organization
org = mgmt.get_organization("org-id")
 
# Create an organization
org = mgmt.create_organization(name="Acme Corp")
 
# Delete an organization
mgmt.delete_organization("org-id")
 
# List members
members = mgmt.list_members("org-id")
 
# Add a member
mgmt.add_member("org-id", "user-id", "member")
 
# Remove a member
mgmt.remove_member("org-id", "user-id")

roles = mgmt.list_roles()

from auris import FgaClient
 
fga = FgaClient(
    "https://auth.yourdomain.com",
    "your-client-id",
    "your-client-secret",
)

allowed = fga.check_permission("user:alice", "read", "document:budget")
print("Allowed:", allowed)

results = fga.check_permissions([
    {"user": "user:alice", "relation": "read",  "object": "document:budget"},
    {"user": "user:alice", "relation": "write", "object": "document:budget"},
])
# results: list[dict] with "allowed" bool per check

fga.tuple_write([
    {"user": "user:bob", "relation": "viewer", "object": "document:report"},
])

from auris import verify_webhook_signature
 
# Django view example
def webhook_view(request):
    payload   = request.body
    signature = request.headers.get("X-Auris-Signature", "")
 
    if not verify_webhook_signature(payload, signature, "your-webhook-secret"):
        from django.http import HttpResponse
        return HttpResponse(status=401)
 
    # Process webhook event...
 
# Flask example
from flask import Flask, request, abort
 
app = Flask(__name__)
 
@app.route("/webhooks/auris", methods=["POST"])
def webhook():
    if not verify_webhook_signature(
        request.data,
        request.headers.get("X-Auris-Signature", ""),
        "your-webhook-secret",
    ):
        abort(401)
    # Process webhook event...
    return "", 200

from auris import AurisClient, AurisError
 
client = AurisClient("https://auth.yourdomain.com", "your-client-id")
 
try:
    result = client.login("[email protected]", "wrong-password")
except AurisError as e:
    print(f"HTTP {e.status_code}: {e}")