Metadata-Version: 2.4
Name: authweave-core
Version: 7.3.2
Summary: Framework-neutral principal authentication contracts and coordinator
Project-URL: homepage, https://github.com/ZYLVEXT/litestar-auth
Project-URL: documentation, https://zylvext.github.io/litestar-auth/
Project-URL: source, https://github.com/ZYLVEXT/litestar-auth
Project-URL: tracker, https://github.com/ZYLVEXT/litestar-auth/issues
Author-email: Vladislav Shepilov <shepilov.v@protonmail.com>
Maintainer-email: Vladislav Shepilov <shepilov.v@protonmail.com>
License-Expression: MIT
License-File: LICENSE
Keywords: authentication,framework-agnostic,principal,security
Classifier: Development Status :: 5 - Production/Stable
Classifier: Intended Audience :: Developers
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Libraries
Requires-Python: <3.15.0,>=3.12.0
Requires-Dist: anyio<5.0,>=4.14.2
Description-Content-Type: text/markdown

# authweave-core

Framework-neutral contracts and fail-closed coordination for principal authentication.

```bash
uv add authweave-core
```

The package models verified principals, authentication evidence, immutable request projections,
typed authentication decisions, provider ownership, route policies, and deadline-aware
coordination. It does not depend on a web framework, ORM, cache, or cryptography implementation.

`AuthenticationRuntime(observer=...)` accepts the minimal `SecurityObserver`
protocol. The observation boundary is a no-op when absent and isolates observer
enter/outcome/exit failures with rate-limited warnings. Implementations such as
`authweave-otel` remain optional; core never imports OpenTelemetry.

`authweave-core` performs authentication orchestration only. Applications remain responsible for
resource authorization.
