better-auth-python

Verify Better Auth JWTs in FastAPI by fetching public keys from the Better Auth JWKS endpoint to validate tokens, decode user claims, and secure your protected routes using the provided get_current_user dependency.

JWKS-based JWT verification fetches public keys from your Better Auth server endpoint to cryptographically validate token signatures, ensuring incoming FastAPI requests contain authentic decoded user claims without sharing secrets across services.

Yes, this JWT authentication dependency supports optional ORM integration with both SQLModel and SQLAlchemy, providing ready-to-use sync and async database access for fetching user records on protected FastAPI endpoints.

To set up FastAPI route protection with Better Auth, you need Python, FastAPI, PyJWT, and HTTPX installed, plus the BETTER_AUTH_URL environment variable configured to wire the verify_token helper into your application.

Obtain JWTs from your frontend Better Auth integration and pass them in the authorization header to FastAPI protected endpoints, where the get_current_user dependency validates the token against JWKS before allowing route access.