FastAPI Authentication Example With OAuth2, JSON Web Tokens and Tortoise ORM

In this video, I will show you how to implement authentication in your FastAPI apps. OAuth2 will be the type of authentication I demonstrate because it's very common among APIs, and I will use JSON web tokens (JWT) for the token in the OAuth flow. In addition to authentication, I'll use Tortoise ORM for the user model.
Need one-on-one help with your project? I can help through my coaching program. Learn more here: prettyprinted.com/coaching
Get the code here: prettyprinted.com/l/t75
Twitter: / pretty_printed
Github: github.com/prettyprinted

[@ofranc6204]

I am watching this 3 years later and it's still the best tutorial on this topic that I have found. Thanks for this.

[@Vijay-Yarramsetty]

so structured, so modular. lately found this channel. you are way good in explaining things. Thanks a lot.

[@tonidelacalle]

Excelent video. I wasn't expecting to get so much knowledge in just 40 minutes. And very well explained!!! Thanks a million.

[@HitraNtheProgrammer]

Very educational! I'm glad I ran into your channel

[@Smoonwalkerm]

awesome!! I was waiting for you to upload fastapi videos!!

[@prettyprinted]

More to come!

[@Fsoza2008]

Real good videos man! Been real helpful

[@ndk87]

Thanks so much! Your videos really helped me some years ago when I was coding in Python flask, and just as I start working on FastAPI you begin making videos in that area too 🙌🙌

[@NaguVisionaryVibes]

Hi bro can you help me on this project

[@juanfranciscolopez9968]

Very nice video and excellent channel!! looking forward to see how to protect FastAPI with OAuth2 but just acting as a Resource Server (and getting the token from and external Authorization Server). Thanks for sharing!

[@djanthony6662]

Awesome, thank you Anthony!

[@jccorman5848]

This video actually gave me some insights into Pydantic, which I'm still trying to wrap my head around. So a tutorial using Pydantic more explicitly would be great. But you have a great back catalog already.

[@mbalslow]

Fantastic video, very clear and to the point! Thank you. For a follow-up video (could simply build on top of this code), it would be great to see how to implement expiration in the tokens and a (maybe automatic) refresh logic. Maybe with a dummy (just plain) HTML login page. Anyways, thanks for the great content.

[@suyashsingh675]

Did you find any reading material @mathias ?

[@jonxslays]

This video helped me a ton thanks dude.

[@10a3asd]

Ugh man, this is great. I'm learning OAuth2 and FastAPI at the same time and this was incredibly helpful to see the pieces work from the developer side.

[@wendel1210]

me too, open connect too

[@ItzSenaCrazy]

Well explained. Ty very much!

[@MADAHAKO]

VERY cognitive! Thank you!

[@airoomstyles]

great video, thanks!

[@jacksonfeng4327]

Best video on fastapi oauth❤

[@prettyprinted]

Glad you like the video!

[@HG-mt3vl]

This is what makes your video stands out from other low quality content producers

[@johnmichaelbitancor913]

Thanks Anthony!

[@rizkydarmadi3196]

very useful video, God bless you. love from jakarta

[@freepythoncode]

Thank you so much 🙂❤

[@jarvis7698]

Not only teaches authentication but also how a tutorial should be. Excellent demonstration & to the point. Thanks a lot for this :)

[@ambejar13]

LOVE THIS

[@felixnyamongo]

Bro you are awesome

[@TheAremoh]

Awesome as always. How about Some front-end registration and login form to help understand this better. Just me asking for more though. Thanks for this video.

[@aureliojmnz2959]

Awesome...this has helped so much. Any two-factor authentication, or 2FA implementation in the future?

[@JordanCote]

Very nice introduction! Do you have a video explaining how we could extend from this example, attaching this with some other OAuth2.0 providers like Google? Thanks!

[@wa.6006]

Thanks!

[@Avico78]

great tutorials , will u consider to create tutorial for fastapi+ frontend ? it could be very interesting to see how u use th jwt + login screen .

[@adriancroitor5154]

Thank you. You always provide a good start point for development. Do you think it is a good ideea to use tortoise-orm in production ? Some devs say sqlalchemy is better for speeding up your api. I can configure sqlalchemy for a sync def, but failed configuring it for async.

[@yourdadsbestfriend7101]

more fastapi !!

[@rangabharath4253]

Awesome thanks so much

[@prettyprinted]

Thanks for watching!

[@oj43085]

Nice.

[@ziaddwagy8973]

thanks and that's awesome work . one more question now should pass the user in all new additional endpoints ??

[@Jesufemi_O]

awesome video! can you do something on microservices soon ?

[@davutlu60]

Thank you so much for the video.. I want to try it with postgres but I could not find a way.. any recommendation is welcome..

[@hackwithharsha5228]

Thank you !! If possible, can someone explain difference between uvicorn, gunicorn, hypercorn ?

[@puresocial3594]

great

[@TheAremoh]

At the right time

[@prettyprinted]

Thanks for watching!

[@saurabh210284]

Thank you. Is there a way we can implement LDAP authentication ?

[@athulkrishnadiyil1735]

Please do a video on a chat / Meeting app setup using Fastapi+ MongoDB asyncioMotorClient

[@_rameez]

Great video. One think i don't understand. We have to login into the database before accessing any tables. Lets say i am using react and fastapi. User form data will be sent to fastapi's /login endpoint. Here i will try to create a db connection based on forms username and password. If sucess then create a sessionpool. or return exception. But you are directly accessing the db. HOW

[@davutlu60]

Thank you for the tutorial. I was wondering if there is a particular method to exclude "hash_parword" in returning user data in pydantic user model..

[@user-bc3nn1oy4u]

Just pop the key from the dictionary

[@harrisonfok8267]

How come my VS code doesn't have code recommendations when I'm typing? Which extension did you install?

[@vashistnarayansingh5995]

how fast api handles multiple requests, as we have threading as a parameter in flask to handle multiple request how does fast api do it?

[@carlosaugusto-mo2hb]

I was able to perform the whole process of validation using PostMan , however I don’t know what username and password to input when I click in the button AUTHORIZE in swagger. Where did you register that ?

[@emiliod90]

Hey dude, if you ever work out how to do the Authorisation Code Grant with Proof Key using FastAPI I will gladly pay 👍

[@sheddtutt7875]

I want to implement auth0 token on my existing app but I really need to know if token will increase in size / length if I store more user informations on it e.g permissions (to be used on frontend)

[@thesongmade]

Great video, but i cant manage to user if condition with awaits, it only return the default detail message, Ex: user = await User.get(username=username), if not user statment will not work, only inside a try catch structure, can someone help me?

[@bokistotel]

Can you make an example using a OAuth2AuthorizationCodeBearer ?

[@promisesheggs8863]

is there a way to integrate google authentication with fast API?

[@danielschmider5069]

your payload should definitely include the expiration date of the token

[@bernardacquah3885]

can't seem to find any records in my DB. I know it's there though because it detects when I try to add a duplicate. What am I doing wrong?

[@rahulsriram6295]

Please make a similar video on Django Rest Framework

[@prettyprinted]

I'll look into it. Thanks for watching.

[@romankocherezhchenko34]

Do JWTs support RBAC?

[@ralfvenchbillones3312]

Waiting for fastapi playlist.

[@MD-vm7tv]

Hi, Anthony, I'm a freelancer! Experienced with web scraping but I want to switch to web development. I don't have a college degree, I have a little knowledge about Django, Flask, Celery, and React. Should I go for Backend with Python or Frontend with React or something else? Can you consider to recommend a path for me?

[@cepuofficial9025]

I will recommend frontend since the job for that path would be more abundant

[@harrisonfok8267]

It didn't generate the sqlite files for me for some reasons. Do you know why?

[@ABK6969]

Make sure you're running `hypercorn main:app --reload` and not `hypercorn example:app --reload`

[@tusharsnn]

how to get bash inside windows pc like you have ?

[@clearthinking5441]

is there a way to do it with email rather than username?

[@serg888fert4]

hi, sir. I get missing. TypeError: OAuth2AuthorizationCodeBearer.__init__() missing 1 required positional argument: 'authorizationUrl' help me please.

[@harryodendaal345]

at 1:48 how do you get your json data in the web browser to be styled like that?

[@zachblake6457]

thats how it looks in firefox

[@harryodendaal345]

@@zachblake6457 o snap just tested it and jup usually use chroms but thats really cool

[@techiecurries1355]

How can authenticate a fastapi which doesn't have a username and password. I mean no login credentials..

[@advrxh]

09:50

[@bhaveshmevada8424]

Sir can i make facebook messenger chatbot using fastapi?

[@thecoasterfollower3564]

You had something in the authorization box of the postman token request but you didnt show it, doing it the way you showed wont work unless you had something there and forgot to say anything

[@johnmcway6120]

wow, god bless django for abstracting away this boilerplate.

[@hamodeyDooba]

i am watching and I feel like , ye just copy paste copy paste copy paste !!!! wtf with content creators

[@mrjaimees]

Hi, I can't access to sqlite3 db.sqlite3, appear this message sqlite3: The term 'sqlite3' is not recognized as a name of a cmdlet, function, script file, or executable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. somebody can help me?

[@nigelfranciscoharosisa1579]

It is possible to authenticate from get, for instance hhtp://user/me?user&password?