AuthHandler | SignalWire

AuthHandler provides a unified authentication layer supporting HTTP Basic Auth, Bearer tokens, and API keys. It integrates with both FastAPI (as a dependency) and Flask (as a decorator), and is used internally by the mcp-gateway and agent webhook endpoints.

from signalwire.core.auth_handler import AuthHandler
from signalwire.core.security_config import SecurityConfig
security = SecurityConfig()
auth = AuthHandler(security)

Properties

security_config

SecurityConfigRequired

A SecurityConfig instance that provides the authentication credentials. The handler reads:

Basic auth username/password from get_basic_auth()
Bearer token from the bearer_token attribute (if set)
API key and header name from the api_key and api_key_header attributes (if set)

Methods

flask_decorator

Flask decorator for protecting routes with authentication.

get_auth_info

Get a summary of configured authentication methods.

get_fastapi_dependency

Get a FastAPI dependency function for protecting routes.

verify_api_key

Verify an API key using constant-time comparison.

verify_basic_auth

Verify HTTP Basic Auth credentials using constant-time comparison.

verify_bearer_token

Verify a Bearer token using constant-time comparison.

Example

from signalwire.core.security_config import SecurityConfig
from signalwire.core.auth_handler import AuthHandler
security = SecurityConfig()
auth = AuthHandler(security)
# Check which methods are configured
info = auth.get_auth_info()
print(info)
# {'basic': {'enabled': True, 'username': 'signalwire'}}