BlockAuth: Open-Source Auth That Bridges Web2 and Web3

The product

BlockAuth is BlocLabs’ open-source authentication package for Django: a complete auth system out of the box, from traditional email/password to MetaMask wallet signatures, passkeys (WebAuthn), and TOTP 2FA. One package, one config, every auth method a modern product needs — Web2 and Web3 in the same flow.

Why it exists

Every product BlocLabs builds needs authentication, and Web3 products need both worlds: OAuth and email for mainstream onboarding, wallet signatures and KDF wallet generation for the chain-native side. BlockAuth packages that experience — hardened, tested, reusable — instead of rebuilding it per project. It also powers authentication inside the FabricBloc platform.

What’s inside

• Web2 + Web3 in one package — email login, OAuth (Google/Facebook/LinkedIn), passwordless OTP, Ethereum wallet auth, KDF wallet generation
• Security first — timing-safe comparisons, progressive lockout, token rotation, replay protection, encrypted TOTP secrets
• Plug and play — install, inherit BlockUser, add URLs; feature flags enable only what you need
• Battle tested — 333 tests across every endpoint, view-level and integration flows

Where to get it

Open source and WIP: GitHub · Documentation · Wiki

---

Want this auth experience in your product without owning the hard parts? Book a consultation — or see how FabricBloc’s blockchain APIs ship wallets, payments, NFTs, and identity as one stack.