What is orcestr-auth?

Orcestr Auth is a ready made login and authentication system meant to be dropped into apps built on the Orcestr ecosystem, so developers do not have to build password handling, sessions, and login screens from scratch for every new project. It ships as a set of matching packages: a Python core for FastAPI backends using SQLAlchemy, plus browser and React packages, ready made login and signup forms, and Next.js helpers for server side redirects. The project draws a clear line between what your app owns and what this library owns. Your app keeps its own user table, page design, branding, legal terms, and permission rules. Orcestr Auth owns the mechanics underneath: password hashing, session cookies, refresh token rotation, one time codes for email verification and password resets, and short lived connection tickets for WebSockets so raw access tokens never end up sitting in a URL. It also includes optional sign in through GitHub, Google, and Yandex, each of which can be turned on independently. On the backend, your existing user model is handed to the library once, and it attaches its own authentication tables to your database using the same setup, so you are not left maintaining two separate user systems. On the frontend, the packages layer on top of each other: a core client handles safe redirects and OAuth details, a React package adds ready to use hooks backed by React Query, a forms package adds pre built English and Russian sign in forms, and a Next.js package adds server side guard helpers. The project is still in beta while its public interface settles, and it requires Python 3.12 or newer with FastAPI, along with React 19, React Query, and Next.js 16 on the frontend if you want the full set of packages. It is released under the Mozilla Public License 2.0, which permits commercial use.