/invenio-accounts

Invenio module for managing user accounts.

Primary LanguagePythonMIT LicenseMIT

Invenio-Accounts

Invenio user management and authentication.

Features:

  • User and role management.
  • User registration, password reset/recovery and email verification.
  • Administration interface and CLI for managing users.
  • Session based authentication with session theft protection as well as "remember me" support.
  • Strong cryptographic password hashing with support for migrating password hashes (including Invenio v1.x) to new stronger algorithms.
  • Session activity tracking allowing users to e.g. logout of all devices.
  • Server-side session management.
  • JSON Web Token encoding and decoding support useful for e.g. CSRF-protection in REST APIs.

Invenio-Accounts relies on the following community packages to do all the heavy-lifting:

Further documentation is available on https://invenio-accounts.readthedocs.io/