a2a_pack.auth

Pluggable auth principal models.

These describe who is invoking a skill. The runtime auth provider produces an instance of the agent's declared auth_model and hands it to the :class:RunContext.

APIKeyAuth (class)

APIKeyAuth(*, api_key_id: str, scopes: list[str] = <factory>) -> None

Caller authenticated by a long-lived API key.

JWTAuth (class)

JWTAuth(*, sub: str, org_id: str | None = None, email: str | None = None, scopes: list[str] = <factory>) -> None

Caller authenticated by a JWT (typically from a user-facing login).

NoAuth (class)

NoAuth() -> None

Public agent: no caller identity required.

Source: apps/a2a/a2a_pack/auth.py