{
  lib,
  fetchFromGitHub,
  buildPythonPackage,
  hatchling,
  flask,
  blinker,
  authlib,
  requests,
  flask-wtf,
  python-ldap,
  python3-saml,
  sqlalchemy,
}:

buildPythonPackage rec {
  pname = "flask-multipass";
  version = "0.6";
  pyproject = true;

  src = fetchFromGitHub {
    owner = "indico";
    repo = "flask-multipass";
    rev = "refs/tags/v${version}";
    hash = "sha256-1SfyCpa1j7a1emhruVLBtXwDr6BisnvUnTA1ioQmGzQ=";
  };

  build-system = [ hatchling ];

  dependencies = [
    flask
    blinker
  ];

  optional-dependencies = {
    authlib = [
      authlib
      requests
    ];
    ldap = [
      flask-wtf
      python-ldap
    ];
    saml = [ python3-saml ];
    sqlalchemy = [
      sqlalchemy
      flask-wtf
    ];
  };

  meta = {
    description = "A pluggable solution for multi-backend authentication with Flask";
    homepage = "https://github.com/indico/flask-multipass";
    changelog = "https://github.com/indico/flask-multipass/blob/${version}/CHANGES.rst";
    license = lib.licenses.bsd3;
  };
}