| .github | ||
| docs | ||
| oauth2_provider | ||
| tests | ||
| .editorconfig | ||
| .gitignore | ||
| .pre-commit-config.yaml | ||
| .readthedocs.yml | ||
| AUTHORS | ||
| CHANGELOG.md | ||
| CODE_OF_CONDUCT.md | ||
| CONTRIBUTING.md | ||
| LICENSE | ||
| MANIFEST.in | ||
| pyproject.toml | ||
| README.rst | ||
| setup.cfg | ||
| setup.py | ||
| tox.ini | ||
Django OAuth Toolkit
OAuth2 goodies for the Djangonauts!
- If you are facing one or more of the following:
Your Django app exposes a web API you want to protect with OAuth2 authentication,
You need to implement an OAuth2 authorization server to provide tokens management for your infrastructure,
Django OAuth Toolkit can help you providing out of the box all the endpoints, data and logic needed to add OAuth2 capabilities to your Django projects. Django OAuth Toolkit makes extensive use of the excellent OAuthLib, so that everything is rfc-compliant.
Reporting security issues
Please report any security issues to the JazzBand security team at <security@jazzband.co>. Do not file an issue on the tracker.
Requirements
Python 3.7+
Django 2.2, 3.2, 4.0 (4.0.1+ due to a regression), 4.1, or 4.2
oauthlib 3.1+
Installation
Install with pip:
pip install django-oauth-toolkit
Add oauth2_provider to your INSTALLED_APPS
INSTALLED_APPS = ( ... 'oauth2_provider', )
If you need an OAuth2 provider you’ll want to add the following to your urls.py. Notice that oauth2_provider namespace is mandatory.
urlpatterns = [ ... path('o/', include('oauth2_provider.urls', namespace='oauth2_provider')), ]
Changelog
See CHANGELOG.md.
Documentation
The full documentation is on Read the Docs.
License
django-oauth-toolkit is released under the terms of the BSD license. Full details in LICENSE file.
Help Wanted
We need help maintaining and enhancing django-oauth-toolkit (DOT).
Join the team
Please consider joining Jazzband (If not already a member) and the DOT project team.
How you can help
See our contributing info and the open issues and PRs, especially those labeled help-wanted.
Submit PRs and Perform Reviews
PR submissions and reviews are always appreciated! Since we require an independent review of any PR before it can be merged, having your second set of eyes looking at PRs is extremely valuable.
Please don’t merge PRs
Please be aware that we don’t want every Jazzband member to merge PRs but just a handful of project team members so that we can maintain a modicum of control over what goes into a release of this security oriented code base. Only project leads are able to publish releases to Pypi and it becomes difficult when creating a new release for the leads to deal with “unexpected” merged PRs.
Become a Project Lead
If you are interested in stepping up to be a Project Lead, please join the discussion.