access402-fastapi 0.2.0__tar.gz → 0.3.0__tar.gz

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: access402-fastapi
-Version: 0.2.0
+Version: 0.3.0
 Summary: Managed Access402 x402 v2 protection for FastAPI
 Project-URL: Homepage, https://access402.com
 Project-URL: Documentation, https://access402.com/docs/fastapi/get-started
@@ -45,7 +45,7 @@ Create a **FastAPI** installation in the Access402 dashboard, then configure ser
 ACCESS402_INSTALLATION_ID=your-installation-uuid
 ACCESS402_API_KEY=your-installation-key
 ACCESS402_PUBLIC_BASE_URL=https://api.example.com
-ACCESS402_ALLOW_LIVE=false
+ACCESS402_MODE=sandbox
 ```
 
 The API key belongs only in the FastAPI server environment. Never expose it in browser code, logs, OpenAPI documents, or a committed `.env` file. `ACCESS402_API_BASE_URL` is intentionally optional and should only be overridden for local Access402 backend development.
@@ -73,13 +73,13 @@ access402.install(app)
 
 On startup, the adapter authenticates the installation, uploads only decorated payment policies, and downloads HMAC-authenticated configuration. The configuration is cached in memory and refreshed periodically; payment requests go directly to the Access402 settlement function. No CDP credential is installed in this package.
 
-The dashboard displays a read-only mirror of code-owned policies. It controls the installation payment environment, while protected routes fail closed if Access402 cannot confirm a matching server-side policy.
+The dashboard displays a read-only mirror of code-owned policies and the mode reported by the deployment. The FastAPI environment controls the payment network, while protected routes fail closed if Access402 cannot confirm a matching server-side policy.
 
 Dynamic path routes such as `/reports/{report_id}` can be protected. Discovery publication for those routes stays disabled until Access402 supports a concrete path-parameter example; publishing a literal template URL would create a broken Bazaar entry.
 
 `ACCESS402_PUBLIC_BASE_URL` remains required. It is the trusted canonical origin placed in x402 resource URLs and validated against the installation's authorized origins. Inferring it from an incoming `Host` or forwarding header would allow a spoofed request to alter payment and discovery metadata. Use a separate FastAPI installation for local, staging, and production deployments; replicas of the same deployment may share one installation.
 
-Live mode requires both the dashboard toggle and `ACCESS402_ALLOW_LIVE=true`. This second switch is a deployment safety ceiling, not another credential.
+Set `ACCESS402_MODE=sandbox` for Base Sepolia or `ACCESS402_MODE=live` for Base mainnet, then restart the deployment. There is no dashboard mode override.
 
 The adapter answers its own 402 responses with `Access-Control-Allow-Origin: *` by default so agent and browser clients can read the payment challenge. Set `ACCESS402_CORS_ALLOW_ORIGIN` to the API's exact browser origin when credentials are involved. CORS preflight (`OPTIONS`) is never paywalled.
 

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/README.md

@@ -16,7 +16,7 @@ Create a **FastAPI** installation in the Access402 dashboard, then configure ser
 ACCESS402_INSTALLATION_ID=your-installation-uuid
 ACCESS402_API_KEY=your-installation-key
 ACCESS402_PUBLIC_BASE_URL=https://api.example.com
-ACCESS402_ALLOW_LIVE=false
+ACCESS402_MODE=sandbox
 ```
 
 The API key belongs only in the FastAPI server environment. Never expose it in browser code, logs, OpenAPI documents, or a committed `.env` file. `ACCESS402_API_BASE_URL` is intentionally optional and should only be overridden for local Access402 backend development.
@@ -44,13 +44,13 @@ access402.install(app)
 
 On startup, the adapter authenticates the installation, uploads only decorated payment policies, and downloads HMAC-authenticated configuration. The configuration is cached in memory and refreshed periodically; payment requests go directly to the Access402 settlement function. No CDP credential is installed in this package.
 
-The dashboard displays a read-only mirror of code-owned policies. It controls the installation payment environment, while protected routes fail closed if Access402 cannot confirm a matching server-side policy.
+The dashboard displays a read-only mirror of code-owned policies and the mode reported by the deployment. The FastAPI environment controls the payment network, while protected routes fail closed if Access402 cannot confirm a matching server-side policy.
 
 Dynamic path routes such as `/reports/{report_id}` can be protected. Discovery publication for those routes stays disabled until Access402 supports a concrete path-parameter example; publishing a literal template URL would create a broken Bazaar entry.
 
 `ACCESS402_PUBLIC_BASE_URL` remains required. It is the trusted canonical origin placed in x402 resource URLs and validated against the installation's authorized origins. Inferring it from an incoming `Host` or forwarding header would allow a spoofed request to alter payment and discovery metadata. Use a separate FastAPI installation for local, staging, and production deployments; replicas of the same deployment may share one installation.
 
-Live mode requires both the dashboard toggle and `ACCESS402_ALLOW_LIVE=true`. This second switch is a deployment safety ceiling, not another credential.
+Set `ACCESS402_MODE=sandbox` for Base Sepolia or `ACCESS402_MODE=live` for Base mainnet, then restart the deployment. There is no dashboard mode override.
 
 The adapter answers its own 402 responses with `Access-Control-Allow-Origin: *` by default so agent and browser clients can read the payment challenge. Set `ACCESS402_CORS_ALLOW_ORIGIN` to the API's exact browser origin when credentials are involved. CORS preflight (`OPTIONS`) is never paywalled.
 

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "access402-fastapi"
-version = "0.2.0"
+version = "0.3.0"
 description = "Managed Access402 x402 v2 protection for FastAPI"
 readme = "README.md"
 requires-python = ">=3.10"

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/src/access402_fastapi/adapter.py

@@ -45,11 +45,11 @@ class Access402Settings:
     installation_id: str
     api_key: str
     public_base_url: str
+    mode: str = "sandbox"
     api_base_url: str = "https://sfowjygkbsubaeggmckp.supabase.co/functions/v1"
     refresh_seconds: int = 60
     catalog_refresh_seconds: int = 300
     stale_after_seconds: int = 900
-    allow_live: bool = False
     fail_closed: bool = True
     cors_allow_origin: str = "*"
     excluded_paths: tuple[str, ...] = ("/health", "/docs", "/redoc", "/openapi.json")
@@ -58,20 +58,23 @@ class Access402Settings:
     def from_env(cls) -> "Access402Settings":
         required = {
             name: os.environ.get(name, "").strip()
-            for name in ("ACCESS402_INSTALLATION_ID", "ACCESS402_API_KEY", "ACCESS402_PUBLIC_BASE_URL")
+            for name in ("ACCESS402_INSTALLATION_ID", "ACCESS402_API_KEY", "ACCESS402_PUBLIC_BASE_URL", "ACCESS402_MODE")
         }
         missing = [name for name, value in required.items() if not value]
         if missing:
             raise RuntimeError(f"Missing Access402 environment variables: {', '.join(missing)}")
+        mode = required["ACCESS402_MODE"].lower()
+        if mode not in ("sandbox", "live"):
+            raise RuntimeError("ACCESS402_MODE must be either sandbox or live")
         return cls(
             installation_id=required["ACCESS402_INSTALLATION_ID"],
             api_key=required["ACCESS402_API_KEY"],
             public_base_url=required["ACCESS402_PUBLIC_BASE_URL"].rstrip("/"),
+            mode=mode,
             api_base_url=os.environ.get("ACCESS402_API_BASE_URL", cls.api_base_url).rstrip("/"),
             refresh_seconds=int(os.environ.get("ACCESS402_REFRESH_SECONDS", "60")),
             catalog_refresh_seconds=int(os.environ.get("ACCESS402_CATALOG_REFRESH_SECONDS", "300")),
             stale_after_seconds=int(os.environ.get("ACCESS402_STALE_AFTER_SECONDS", "900")),
-            allow_live=os.environ.get("ACCESS402_ALLOW_LIVE", "false").lower() == "true",
             cors_allow_origin=os.environ.get("ACCESS402_CORS_ALLOW_ORIGIN", "*"),
         )
 
@@ -211,11 +214,12 @@ class Access402:
             if self.configuration and not force and now - self._loaded_at < self.settings.refresh_seconds:
                 return self.configuration
             if not self._catalog_at or now - self._catalog_at >= self.settings.catalog_refresh_seconds:
-                await self.client.sync_catalog(self.route_catalog())
+                await self.client.sync_catalog(self.route_catalog(), self.settings.mode)
                 self._catalog_at = now
-            configuration = await self.client.configuration()
-            if configuration.environment == "live" and not self.settings.allow_live:
-                raise RuntimeError("Live settlement is disabled by ACCESS402_ALLOW_LIVE")
+            configuration = await self.client.configuration(self.settings.mode)
+            expected_environment = "live" if self.settings.mode == "live" else "test"
+            if configuration.environment != expected_environment:
+                raise RuntimeError("Access402 returned configuration for the wrong payment mode")
             self.configuration = configuration
             self._loaded_at = now
             return configuration

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/src/access402_fastapi/client.py

@@ -20,21 +20,21 @@ class Access402Client:
     def headers(self, mode: str = "sandbox") -> dict[str, str]:
         return {
             "Authorization": f"Bearer {self.api_key}", "Accept": "application/json",
-            "X-Access402-Adapter-Version": "2", "X-Access402-Mode": mode,
-            "User-Agent": "Access402-FastAPI/0.2.0",
+            "X-Access402-Adapter-Version": "3", "X-Access402-Mode": mode,
+            "User-Agent": "Access402-FastAPI/0.3.0",
         }
 
     async def close(self) -> None:
         await self.http.aclose()
 
-    async def sync_catalog(self, routes: list[dict[str, Any]]) -> str:
-        response = await self.http.put(f"{self.base_url}/adapter/catalog", headers=self.headers(), json={"routes": routes})
+    async def sync_catalog(self, routes: list[dict[str, Any]], mode: str) -> str:
+        response = await self.http.put(f"{self.base_url}/adapter/catalog", headers=self.headers(mode), json={"routes": routes})
         response.raise_for_status()
         value = response.json()
         return str(value["configuration_version"])
 
-    async def configuration(self) -> Configuration:
-        response = await self.http.get(f"{self.base_url}/adapter/configuration", headers=self.headers())
+    async def configuration(self, mode: str) -> Configuration:
+        response = await self.http.get(f"{self.base_url}/adapter/configuration", headers=self.headers(mode))
         response.raise_for_status()
         verify_configuration_signature(self.api_key, response.content, response.headers.get("X-Access402-Configuration-Signature"))
         value = response.json()

{access402_fastapi-0.2.0 → access402_fastapi-0.3.0}/tests/test_adapter.py

@@ -36,7 +36,7 @@ def configured_app(handler=None, **policy_changes):
         return httpx.Response(200, json={"settled": True, "payer": "0xpayer", "payment_event_id": "33333333-3333-4333-8333-333333333333", "payment_response": "receipt"})
 
     app = FastAPI()
-    settings = Access402Settings("installation", "a402_000000000000_" + "a" * 43, "https://api.example.com", allow_live=True)
+    settings = Access402Settings("installation", "a402_000000000000_" + "a" * 43, "https://api.example.com")
     manager = Access402(settings, transport=httpx.MockTransport(backend))
     @app.get("/reports/{report_id}")
     @manager.protect(price="0.01")
@@ -170,6 +170,53 @@ def test_rejects_invalid_code_owned_policy():
         manager.protect(price="0.01", access_type="time_limited")
 
 
+def test_environment_requires_an_explicit_valid_payment_mode(monkeypatch):
+    values = {
+        "ACCESS402_INSTALLATION_ID": "installation",
+        "ACCESS402_API_KEY": "a402_000000000000_" + "a" * 43,
+        "ACCESS402_PUBLIC_BASE_URL": "https://api.example.com",
+    }
+    for name, value in values.items():
+        monkeypatch.setenv(name, value)
+    monkeypatch.delenv("ACCESS402_MODE", raising=False)
+    with pytest.raises(RuntimeError, match="ACCESS402_MODE"):
+        Access402Settings.from_env()
+    monkeypatch.setenv("ACCESS402_MODE", "production")
+    with pytest.raises(RuntimeError, match="sandbox or live"):
+        Access402Settings.from_env()
+    monkeypatch.setenv("ACCESS402_MODE", "live")
+    assert Access402Settings.from_env().mode == "live"
+
+
+@pytest.mark.asyncio
+async def test_live_mode_is_sent_by_the_deployment_for_catalog_and_configuration():
+    api_key = "a402_000000000000_" + "a" * 43
+    seen_modes = []
+
+    async def handler(request):
+        seen_modes.append(request.headers.get("X-Access402-Mode"))
+        if request.url.path.endswith("/adapter/catalog"):
+            return httpx.Response(200, json={"configuration_version": "v1"})
+        body = json.dumps({
+            "x402_version": 2, "installation_id": "installation", "configuration_version": "v1",
+            "generated_at": "now", "environment": "live", "network": "eip155:8453",
+            "pay_to": "0x0000000000000000000000000000000000000001", "resources": [],
+        }, separators=(",", ":")).encode()
+        signature = base64.urlsafe_b64encode(hmac.new(api_key.encode(), body, hashlib.sha256).digest()).decode().rstrip("=")
+        return httpx.Response(200, content=body, headers={"X-Access402-Configuration-Signature": f"v1={signature}"})
+
+    app = FastAPI()
+    manager = Access402(
+        Access402Settings("installation", api_key, "https://api.example.com", mode="live"),
+        transport=httpx.MockTransport(handler),
+    )
+    manager.install(app)
+    configuration = await manager.refresh(force=True)
+    await manager.close()
+    assert configuration.environment == "live"
+    assert seen_modes == ["live", "live"]
+
+
 @pytest.mark.asyncio
 async def test_configuration_rejects_the_wrong_installation_scope():
     api_key = "a402_000000000000_" + "a" * 43