# FastAPI MultiAuth

> Composable authentication sources for FastAPI: bring your own validator, combine schemes, get correct OpenAPI.

Composable authentication sources for FastAPI. You provide the validator; the library handles credential extraction, scheme combination, and OpenAPI declaration.

## Home

- [Home](<https://fastapi-multiauth.d3vyce.fr/index.md>)

## Guide

- [Overview](<https://fastapi-multiauth.d3vyce.fr/guide/index.md>)
- [Comparison](<https://fastapi-multiauth.d3vyce.fr/guide/comparison/index.md>)
- [Validators](<https://fastapi-multiauth.d3vyce.fr/guide/validators/index.md>)
- [Combining sources](<https://fastapi-multiauth.d3vyce.fr/guide/multiauth/index.md>)
- [Scopes](<https://fastapi-multiauth.d3vyce.fr/guide/scopes/index.md>)
- [Bearer tokens](<https://fastapi-multiauth.d3vyce.fr/guide/bearer-tokens/index.md>)
- [Cookie sessions](<https://fastapi-multiauth.d3vyce.fr/guide/cookie-sessions/index.md>)
- [API keys and Basic](<https://fastapi-multiauth.d3vyce.fr/guide/api-keys-and-basic/index.md>)
- [JWT and OAuth 2.0](<https://fastapi-multiauth.d3vyce.fr/guide/jwt-and-oauth2/index.md>)
- [Custom sources](<https://fastapi-multiauth.d3vyce.fr/guide/custom-sources/index.md>)
- [Step-up authentication](<https://fastapi-multiauth.d3vyce.fr/guide/step-up/index.md>)
- [WebSockets](<https://fastapi-multiauth.d3vyce.fr/guide/websockets/index.md>)
- [OAuth login flow](<https://fastapi-multiauth.d3vyce.fr/guide/oauth-login/index.md>)
- [Logging](<https://fastapi-multiauth.d3vyce.fr/guide/logging/index.md>)
- [Auditing](<https://fastapi-multiauth.d3vyce.fr/guide/auditing/index.md>)
- [Testing](<https://fastapi-multiauth.d3vyce.fr/guide/testing/index.md>)

## Recipes

- [Overview](<https://fastapi-multiauth.d3vyce.fr/recipes/index.md>)
- [Sessions and API tokens](<https://fastapi-multiauth.d3vyce.fr/recipes/sessions-and-tokens/index.md>)
- [Personal access tokens](<https://fastapi-multiauth.d3vyce.fr/recipes/personal-access-tokens/index.md>)
- [Role-gated routes](<https://fastapi-multiauth.d3vyce.fr/recipes/role-gated-routes/index.md>)
- [Sign out everywhere](<https://fastapi-multiauth.d3vyce.fr/recipes/sign-out-everywhere/index.md>)
- [Two-factor login](<https://fastapi-multiauth.d3vyce.fr/recipes/two-factor/index.md>)
- [Sign in with OpenID Connect](<https://fastapi-multiauth.d3vyce.fr/recipes/oidc-sign-in/index.md>)
- [WebSocket tickets](<https://fastapi-multiauth.d3vyce.fr/recipes/websocket-tickets/index.md>)
- [Audit your routes](<https://fastapi-multiauth.d3vyce.fr/recipes/audit-routes/index.md>)

## Security model

- [Security model](<https://fastapi-multiauth.d3vyce.fr/security-model/index.md>)

## API reference

- [API reference](<https://fastapi-multiauth.d3vyce.fr/reference/index.md>)