Invenio-Accounts

Invenio user management and authentication.

Features:

• User and role management.
• User registration, password reset/recovery and email verification.
• Administration interface and CLI for managing users.
• Session based authentication with session theft protection support.
• Strong cryptographic password hashing with support for migrating password hashes (including Invenio v1.x) to new stronger algorithms.
• Session activity tracking allowing users to e.g. logout of all devices.
• Server-side session management.
• JSON Web Token encoding and decoding support useful for e.g. CSRF-protection in REST APIs.

Invenio-Accounts relies on the following community packages to do all the heavy-lifting:

• Flask-Security
• Flask-Login
• Flask-Principal
• Flask-KVSession
• Passlib

Further documentation is available on https://invenio-accounts.readthedocs.io/