diff --git a/pkgs/software-heritage/swh-auth.nix b/pkgs/software-heritage/swh-auth.nix
new file mode 100644
index 00000000..aea55600
--- /dev/null
+++ b/pkgs/software-heritage/swh-auth.nix
@@ -0,0 +1,33 @@
+{ stdenv, lib, python3Packages, swh-core, ... }:
+
+with python3Packages;
+buildPythonPackage rec {
+  pname = "swh-auth";
+  version = "0.6.6";
+
+  src = fetchPypi {
+    inherit version;
+    pname = "swh.auth";
+    sha256 = "sha256-TWLrZC4Iv0HTCtGjraPZRpGLiZFxTXZw6trWzC0GkHw=";
+  };
+
+  # Tests require network access.
+  doCheck = false;
+
+  propagatedBuildInputs = [
+    django
+    djangorestframework
+    sentry-sdk
+    click
+    pyyaml
+    python-keycloak
+
+    swh-core
+  ];
+
+  meta = with lib; {
+    homepage = "https://forge.softwareheritage.org/source/swh-auth/";
+    description = "Authentication utilities for Software Heritage";
+    license = licenses.gpl3Only;
+  };
+}