fastapi-auth

Implement session-based authentication for FastAPI apps with Argon2 password hashing.

3|Updated Jan 20, 2026
One-click install
npx skills add https://github.com/agusmdev/burntop --skill fastapi-auth
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fastapi-auth
Source: https://github.com/agusmdev/burntop/tree/main/.claude/skills/fastapi-auth
Command: npx skills add https://github.com/agusmdev/burntop --skill fastapi-auth

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a complete session-based authentication workflow for FastAPI apps, enabling login/logout flows, protected endpoints, secure password hashing, and OAuth integration.

Core Features & Use Cases

  • Password-based login: verify user credentials and create a session token.
  • OAuth support: handle Google OAuth login and user provisioning.
  • Endpoint protection: guard routes using dependency injection and HTTPBearer tokens.
  • Use Case: Build a secure API for a multi-user app with role-based access in the UI.

Quick Start

Install dependencies and run the app; then register a user, login, or perform OAuth callback to obtain a session token.

Frequently Asked Questions about fastapi-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement session-based authentication in FastAPI?

Session-based authentication in FastAPI verifies user credentials and creates a session token. This implementation uses SQLAlchemy for user/session models and Argon2 for secure password hashing to enable login/logout flows.

Does this FastAPI authentication approach support Google OAuth integration?

Yes, Google OAuth integration is supported. The system handles Google OAuth login and user provisioning, allowing users to authenticate via OAuth alongside traditional password-based login.

How do I protect FastAPI endpoints using dependency injection?

Protect FastAPI endpoints by guarding routes using dependency injection and HTTPBearer tokens. This ensures requests include valid session tokens before accessing protected resources.

What is the best way to hash passwords in a FastAPI SQLAlchemy application?

The best way to hash passwords in FastAPI is using Argon2. This skill uses argon2-cffi to securely hash passwords, providing robust protection for user credentials stored in SQLAlchemy models.