# enlace_auth

> Authentication, sessions, admin dashboard, and per-user stores for the enlace platform


## Pages

- [enlace_auth](index.html.md): Sign-in, sessions, CSRF protection, an admin dashboard and per-user data stores for the enlace multi...
- [API reference](api.html.md): | `enlace_auth`   | enlace_auth — authentication, sessions, admin dashboard, and per-user stores.   ...
- [enlace_auth](_autosummary/enlace_auth.html.md): enlace_auth — authentication, sessions, admin dashboard, and per-user stores.
- [enlace_auth.admin](_autosummary/enlace_auth.admin.html.md): Admin subsystem for enlace_auth.
- [enlace_auth.admin.routes](_autosummary/enlace_auth.admin.routes.html.md): Admin HTTP routes: user CRUD, password reset, app policy + grants.
- [enlace_auth.appmeta](_autosummary/enlace_auth.appmeta.html.md): Editable app-metadata overlay: the write surface for the launcher.
- [enlace_auth.auth](_autosummary/enlace_auth.auth.html.md): Authentication subsystem for enlace.
- [enlace_auth.auth.accounts](_autosummary/enlace_auth.auth.accounts.html.md): Disabled accounts, and the one way a sign-in opens a session.
- [enlace_auth.auth.cookies](_autosummary/enlace_auth.auth.cookies.html.md): Signed cookie helpers built on itsdangerous.
- [enlace_auth.auth.email](_autosummary/enlace_auth.auth.email.html.md): Outbound email for enlace_auth — used by the password-recovery flow.
- [enlace_auth.auth.grants](_autosummary/enlace_auth.auth.grants.html.md): Runtime per-app access grants, with optional UTC expiry.
- [enlace_auth.auth.middleware](_autosummary/enlace_auth.auth.middleware.html.md): Platform auth middleware (pure ASGI).
- [enlace_auth.auth.oauth](_autosummary/enlace_auth.auth.oauth.html.md): OAuth2/OIDC login via Authlib.
- [enlace_auth.auth.oauth_server](_autosummary/enlace_auth.auth.oauth_server.html.md): OAuth 2.1 authorization server — issue tokens for MCP custom connectors.
- [enlace_auth.auth.pages](_autosummary/enlace_auth.auth.pages.html.md): HTML pages for the enlace_auth browser-facing flows.
- [enlace_auth.auth.passwords](_autosummary/enlace_auth.auth.passwords.html.md): Password hashing via argon2id.
- [enlace_auth.auth.reset_tokens](_autosummary/enlace_auth.auth.reset_tokens.html.md): Password-reset tokens — minting, verification, and the link they live in.
- [enlace_auth.auth.revocation](_autosummary/enlace_auth.auth.revocation.html.md): Credential revocation: end everything an account holds when its credentials change.
- [enlace_auth.auth.routes](_autosummary/enlace_auth.auth.routes.html.md): Auth HTTP routes: register, login, logout, shared-login, csrf, recovery.
- [enlace_auth.auth.sessions](_autosummary/enlace_auth.auth.sessions.html.md): Session storage backed by a MutableMapping.
- [enlace_auth.auth.share_routes](_autosummary/enlace_auth.auth.share_routes.html.md): `/auth/shares/*` — the signed-in user manages the shares of their own data.
- [enlace_auth.auth.shares](_autosummary/enlace_auth.auth.shares.html.md): Owner-granted data shares: let named users at one user’s per-user data in one app.
- [enlace_auth.config](_autosummary/enlace_auth.config.html.md): Auth-side configuration models.
- [enlace_auth.diagnostics](_autosummary/enlace_auth.diagnostics.html.md): Auth-specific doctor checks that plug into `enlace.doctor.run_doctor`.
- [enlace_auth.emails](_autosummary/enlace_auth.emails.html.md): One normal form for an email address, wherever one is compared.
- [enlace_auth.resource_policy](_autosummary/enlace_auth.resource_policy.html.md): The OAuth per-connector allowlist: its shape, its parsing and its one rule.
- [enlace_auth.stores](_autosummary/enlace_auth.stores.html.md): Per-user stores for enlace.
- [enlace_auth.stores.backends](_autosummary/enlace_auth.stores.backends.html.md): MutableMapping-backed store factories for enlace.
- [enlace_auth.stores.middleware](_autosummary/enlace_auth.stores.middleware.html.md): Store injection middleware and per-app store router.
- [enlace_auth.stores.prefixed](_autosummary/enlace_auth.stores.prefixed.html.md): PrefixedStore — MutableMapping wrapper that scopes keys under a prefix.
- [enlace_auth.stores.validation](_autosummary/enlace_auth.stores.validation.html.md): Key sanitization for user-supplied store keys.
- [For AI agents](ai-agents.html.md): `enlace_auth` ships artifacts for coding agents alongside its code. This page lists
- [About this build](about-this-build.html.md): This documentation was built on **2026-10-30 13:03 UTC** from commit <a href="https://github.com/i2m...

## Optional

- [enlace_auth.md](enlace_auth.md): Complete documentation in a single file.

## Build

- [build_info.json](build_info.json): build provenance (commit, version, tool versions, whether the docs match the package)