Guide¶

Everything in fastapi-multiauth is built from one idea: a source knows where a credential lives in a request, and a validator you write decides who it belongs to.

flowchart LR
    R[Request] --> E{"source finds a credential?"}
    E -- no --> N[401]
    E -- yes --> V[your validator]
    V -- returns a user --> H[your route]
    V -- raises --> X[401 / 403]

A source is a FastAPI dependency: pass it to Security() and your route receives what the validator returned. It also declares itself in OpenAPI, so /docs shows the right Authorize dialog.

The library never stores anything and never looks at your user model. Deciding what a valid credential means is always your validator's job.

The sources¶

Need something else? Write a custom source.

Start with Validators.