@kentoseth

I think the main reason that API frameworks commonly don't have built-in authentication and authorization controls is that there are too many different ways to do that, for many different use cases, each with their own benefits and drawbacks.

A highly-opinionated framework could include support for one type and declare it to be The Supported Auth Method. If none do that, perhaps there's a reason... but of course, you could always create such an opinionated package, if you thought it important enough.

There are almost always add-on packages available for a given framework implementing different approaches to this, giving you almost-zero-code integration with the auth type of your choice. Have you looked around for these sorts of add-on solutions?

#FastAPI #authentication #authorization #opinionated #web #framework