Production-grade auth for Indian apps — email OTP, PIN, session & device trust, and DPDP consent — dropped in with one line.
Every startup, freelancer, SaaS, and internal tool starts by rebuilding the same invisible machinery. BharatAuth ships it, so you don't rewrite it.
Sessions, refresh-token rotation, rate limiting, brute-force lockout, device trust. The real work hides behind the login form — and it's the same work every project.
DPDP consent capture, audit trail, withdrawal and export are built in from day one — not bolted on after a compliance review.
Configure once, then mount a pre-built router — or call the domain modules directly. Managed mode creates its own tables; external mode never touches your user model.
MIT-licensed, on PyPI and GitHub, engineered by a team that has shipped production software for over two decades. Read the code before you trust it.
Every capability below ships in the installed package. Names map to real modules — nothing aspirational.
Verify users and prevent fake signups with OTP.
Password login plus app-lock PIN set, verify & reset.
Track, manage & revoke user sessions.
Keep users logged in securely with rotation.
Protect your endpoints from abuse & IP blocks.
Session trust matrix & device fingerprinting.
Immutable consent & audit trail records.
Privacy by design. DPDP-ready building blocks.
Built to extend. Read the modules on GitHub.
Two ways to adopt: let BharatAuth manage its own tables, or plug into the user model you already have.
# new project — BharatAuth owns the tables from bharatauth import configure configure( mode="managed", secret_key="change-me-in-production", database_url="postgresql://…", ) # creates ba_users, ba_sessions, # ba_otp_tokens, ba_consent_log …
from fastapi import FastAPI from bharatauth.fastapi_router import ( router as auth_router, ) app = FastAPI() app.include_router( auth_router, prefix="/auth", ) # /auth/login, /auth/otp, /auth/pin …
BharatAuth is a product of JamBuster Technologies — an engineering company that has shipped production software since 2004. The SDK was extracted from a real production system, not written as a demo.
That's the point of open source by purpose: the code is on GitHub and PyPI, MIT-licensed, for you to read, run, and trust before you adopt.
Whether you're integrating the SDK or want a custom, white-labelled build for your team or portfolio — reach the JamBuster engineering team directly.
Questions about the SDK, integration help, or contributing? Start on GitHub, or email the team.
dev@jambuster.inNeed a tailored authentication build, or want to standardize auth across a portfolio? Let's talk.
services@jambuster.in