Authentication

web = cycls.Web().auth(cycls.Clerk())

cycls.Clerk()

cycls.Clerk(one_tap=True)        # Google One Tap on the signed-out page

cycls.Clerk(                     # your own Clerk tenant
    jwks_url="https://clerk.mycompany.com/.well-known/jwks.json",
    dev_jwks_url="https://dev-clerk.mycompany.com/.well-known/jwks.json",
    pk="pk_live_...",
    dev_pk="pk_test_...",
)

cycls.JWT(
    jwks_url="https://my-prod.auth0.com/.well-known/jwks.json",
    dev_jwks_url="https://my-dev.auth0.com/.well-known/jwks.json",
)

cycls.GCP(project_id="my-project")

user = context.user

user.id                  # stable user id
user.org_id              # organization id when acting in one
user.org_slug
user.org_role
user.org_permissions     # list
user.plan                # subscription tier from the JWT claim
user.features            # feature flags
user.name                # display name when the JWT carries one
user.image_url           # avatar when the JWT carries one

@app.get("/me")
async def me(user=my_app.auth):
    return {"id": user.id, "plan": user.plan}

from fastapi import Depends


@my_agent.server.api_route("/admin/stats", methods=["GET"])
async def stats(user=Depends(my_agent.auth)):
    if user.org_role != "admin":
        return {"error": "forbidden"}
    return await collect_stats()

if context.user.plan == "cycls_pass":
    yield "Premium features are enabled."
else:
    yield "Upgrade for full access."
    yield {"type": "ui", "action": "open_plan_modal"}