mbkauthepy is a fully featured, secure, and extensible authentication system for Python Flask applications.
Ported from the Node.js version to provide seamless multi-language support for full-stack apps.

Current Version: 1.6.8 (Python) - Recommended for compatibility with mbkauthe (JavaScript) 1.3.1

Note: This project is actively maintained. We welcome contributions and feedback to improve its features and stability.

• ✨ Features
• 🧠 Multi-language Support
• 📦 Installation
• 🚀 Quickstart
• ⚙️ Configuration (.env)
• 🧩 Middleware & Decorators
• 🧪 API Endpoints
• 🗄️ Database Schema
• 🔐 Security Notes
• 📜 License
• 🙋 Contact & Support
• 🤝 Contributing

This package is designed to work seamlessly with both Python and JavaScript applications.

• The JavaScript version is available on npm as mbkauthe.
• The Python version is available on PyPI as mbkauthepy.

• Python Version: mbkauthepy GitHub
• JavaScript Version: mbkauthe GitHub

• Maaz Waheed (Python Version)

  • GitHub: @42Wor
  • Email: [email protected] / [email protected]

• Muhammad Bin Khalid (JavaScript Version)

  • GitHub: @MIbnEKhalid
  • For questions or contributions:
    • Support Page: mbktechstudio.com/Support
    • Email: [email protected] / [email protected]

We welcome issues and pull requests! Feel free to contribute or ask any questions.

Note: This project is developed and maintained by Maaz Waheed and Muhammad Bin Khalid.

python -m venv venv
source venv/bin/activate  # Linux/macOS
# .\venv\Scripts\activate  # Windows

pip install -r requirements.txt

pip install mbkauthepy

from flask import Flask, render_template, session
from dotenv import load_dotenv
from mbkauthepy import configure_mbkauthe, validate_session

load_dotenv()

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your-secret-key'

configure_mbkauthe(app)


@app.route('/')
def home():
    return render_template('index.html')


@app.route('/dashboard')
@validate_session
def dashboard():
    user = session['user']
    return f"Welcome {user['username']}!"


if __name__ == '__main__':
    app.run(debug=True)

FLASK_SECRET_KEY=my-flask-secret

mbkautheVar='{
    "APP_NAME": "MBKAUTH_PYTHON_DEMO",
    "IS_DEPLOYED": "false",
    "LOGIN_DB": "postgresql://username:password@host:port/database",
    "MBKAUTH_TWO_FA_ENABLE": "false",
    "COOKIE_EXPIRE_TIME": "2", # In days
    "DOMAIN": "mbktechstudio.com", # Use your actual domain in production
    "Main_SECRET_TOKEN": "your-secret-token-for-terminate-api", # Added for terminateAllSessions auth
    "loginRedirectURL": "/",
    "EncryptedPassword": "False"
}'

✅ You can override behavior by editing this JSON string directly in .env.

from src.mbkauthe import validate_session, check_role_permission, validate_session_and_role, authenticate_token


@app.route('/admin')
@validate_session_and_role("SuperAdmin")
def admin_panel():
    return "Welcome to the admin panel"


@app.route('/dashboard')
@validate_session
def dashboard():
    user = session['user']
    return f"Welcome {user['username']}"


@app.route('/secured-admin')
@validate_session_and_role("SuperAdmin")
def secured_admin():
    return "Secured Area"


@app.route('/terminate-sessions')
@authenticate_token
def terminate_sessions():
    return {"success": True}


# Example of fetching user data
data = get_user_data("johndoe", ["FullName", "email"])

These are available by default after calling configure_mbkauthe(app):

👉 See docs/db.md for schema & setup scripts.

• 🔐 Set EncryptedPassword: "true" for production use.
• ✅ Always use long random SESSION_SECRET_KEY.
• 🔒 Use HTTPS in deployment (IS_DEPLOYED: "true").
• 🚫 Avoid plaintext passwords outside dev/testing.

Note: Encrypted password support is under development. Stay tuned for updates!

Mozilla Public License 2.0
See LICENSE for full legal text.

Developed by Maaz Waheed

• GitHub: @42Wor
• Email: [email protected] / [email protected]
• Issues / PRs welcome!

Contributions are welcome! Please follow these steps:

1. Fork the repository.
2. Create a new branch (git checkout -b feature-branch).
3. Make your changes.
4. Commit your changes (git commit -m 'Add some feature').
5. Push to the branch (git push origin feature-branch).
6. Create a new Pull Request.

Would you like me to generate:

• ✅ A requirements.txt
• ✅ The .env template
• ✅ Diagrams (e.g., session flow, DB schema)
• ✅ Frontend login template in HTML?

Let me know which extras you want!