Docs / Guides / JWT authentication

Feature 09 · Study guide

JWT authentication

Enable AuthRole + User, issue access/refresh tokens, and protect the admin UI.

← All guides Install tamilPY

What you will learn

How to enable auth in an existing project
Which endpoints are created
How roles affect the admin dashboard

1. Setup

$ tpy auth
$ pip install -r requirements.txt
$ tpy migrate && tpy seed
$ tpy serve

Default seeded login: admin@example.com / admin123 (super-admin).

2. What gets added

Schema models: AuthRole, User (password hashed).
Auth routes under /auth/*.
JWT access token (short-lived) + refresh token (longer-lived).
Logout revokes refresh server-side.

3. API map

Endpoint	Purpose
`POST /auth/register`	Create user
`POST /auth/login`	Return access + refresh
`POST /auth/refresh`	Rotate access using refresh
`POST /auth/logout`	Revoke refresh
`GET /auth/me`	Current user profile

4. How a client uses tokens

Login → store access + refresh securely.
Send Authorization: Bearer <access> on protected routes.
On 401, call refresh; if refresh fails, force login again.

5. Roles

Dashboard access: super-admin and developer. The admin role is API-oriented by default.