altasigma 3.12.0__tar.gz → 3.12.0.dev0__tar.gz

{altasigma-3.12.0/altasigma.egg-info → altasigma-3.12.0.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: altasigma
-Version: 3.12.0
+Version: 3.12.0.dev0
 Summary: Python helpers for data science and ML workflows on the AltaSigma AI platform
 Home-page: https://www.altasigma.com
 Author: AltaSigma GmbH

{altasigma-3.12.0 → altasigma-3.12.0.dev0}/altasigma/credentials/credential_utils.py

@@ -146,6 +146,44 @@ class CredentialUtils:
             raise Exception(
                 f"ERROR: Unexpected response from dataman: {data_sources_request.status_code}, {data_sources_request.text}")
 
+    def get_git_credentials(self, host: str) -> tuple[str, str, str]:
+        """
+        Retrieve Gitea credentials for a given host from the AltaSigma dashboard.
+
+        Acquires a Keycloak bearer via the same token flow as `get_credentials`,
+        then asks the dashboard for the per-user Gitea username/password bound to
+        the requested host.
+
+        Args:
+            host (str): The git host the user wants credentials for (e.g. "gitea.altasigma.internal").
+
+        Returns:
+            tuple: (username, password, expiresAt)
+
+        Raises:
+            Exception: If the user has not connected the given git host in the dashboard (404),
+                       or if the dashboard returns any other non-2xx status.
+        """
+        (access_token, _refresh_token) = self._existing_token()
+        headers = {'Authorization': f'Bearer {access_token}'}
+
+        url = f'{self.dashboard_api_host}/git/{host}/credentials'
+        response = _http_session().get(url, headers=headers)
+
+        if response.status_code == 200:
+            res = response.json()
+            display_or_print(
+                msg_notebook=HTML("Successfully obtained git credentials"),
+                msg_other="Successfully obtained git credentials")
+            return res["username"], res["password"], res["expiresAt"]
+        elif response.status_code == 404:
+            raise Exception(
+                f"Git host '{host}' is not connected in the AltaSigma dashboard. "
+                f"Connect Gitea under Account → Integrations and retry.")
+        else:
+            raise Exception(
+                f"ERROR: Unexpected response from dashboard: {response.status_code}, {response.text}")
+
     def _refresh_token(self, refresh_token: str) -> tuple[str, str]:
         """
         Refresh an existing authentication token.

altasigma-3.12.0.dev0/altasigma/git_helper.py

@@ -0,0 +1,82 @@
+"""
+Git credential helper for the AltaSigma workbench.
+
+Implements the git-credential-helper protocol (see `gitcredentials(7)`) so that
+git can authenticate against per-user Gitea hosts using credentials fetched on
+demand from the AltaSigma dashboard.
+
+Installed as the console script `git-credential-altasigma`. Once a user runs
+`git config credential.helper altasigma`, git will resolve that to this script
+on PATH and invoke it with `get`, `store`, or `erase` subcommands.
+
+Stdout is reserved exclusively for the two `username=...` / `password=...` lines
+that git expects on success. Everything else (logs, errors) goes to stderr, and
+any failure exits non-zero with empty stdout so git treats it as "no credentials"
+and aborts cleanly.
+"""
+import logging
+import sys
+
+from altasigma import CredentialUtils
+
+logging.basicConfig(
+    stream=sys.stderr,
+    level=logging.WARNING,
+    format="%(levelname)s %(name)s: %(message)s",
+)
+logging.getLogger("urllib3").setLevel(logging.WARNING)
+logging.getLogger("requests").setLevel(logging.WARNING)
+logger = logging.getLogger(__name__)
+
+
+def _parse_git_input(stream) -> dict:
+    """Parse git's credential-helper key=value stdin format into a dict.
+
+    Per gitcredentials(7), input is a sequence of `key=value` lines terminated
+    by a blank line. We tolerate EOF in place of the blank line.
+    """
+    fields = {}
+    for raw_line in stream:
+        line = raw_line.rstrip("\n").rstrip("\r")
+        if line == "":
+            break
+        key, sep, value = line.partition("=")
+        if sep != "=":
+            continue
+        fields[key] = value
+    return fields
+
+
+def main() -> int:
+    if len(sys.argv) != 2:
+        logger.error("expected exactly one subcommand (get/store/erase)")
+        return 1
+
+    subcommand = sys.argv[1]
+
+    if subcommand in ("store", "erase"):
+        return 0
+
+    if subcommand != "get":
+        logger.error("unknown subcommand: %s", subcommand)
+        return 1
+
+    fields = _parse_git_input(sys.stdin)
+    host = fields.get("host")
+    if not host:
+        logger.error("git credential request missing required 'host' field")
+        return 1
+
+    try:
+        username, password, _expires_at = CredentialUtils().get_git_credentials(host)
+    except Exception as exc:
+        logger.error("failed to obtain git credentials for host %s: %s", host, exc)
+        return 1
+
+    sys.stdout.write(f"username={username}\n")
+    sys.stdout.write(f"password={password}\n")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

{altasigma-3.12.0 → altasigma-3.12.0.dev0/altasigma.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: altasigma
-Version: 3.12.0
+Version: 3.12.0.dev0
 Summary: Python helpers for data science and ML workflows on the AltaSigma AI platform
 Home-page: https://www.altasigma.com
 Author: AltaSigma GmbH

{altasigma-3.12.0 → altasigma-3.12.0.dev0}/altasigma.egg-info/SOURCES.txt

@@ -3,10 +3,12 @@ MANIFEST.in
 README_pypi.md
 setup.py
 altasigma/__init__.py
+altasigma/git_helper.py
 altasigma/initialize.py
 altasigma.egg-info/PKG-INFO
 altasigma.egg-info/SOURCES.txt
 altasigma.egg-info/dependency_links.txt
+altasigma.egg-info/entry_points.txt
 altasigma.egg-info/requires.txt
 altasigma.egg-info/top_level.txt
 altasigma/config/__init__.py

altasigma-3.12.0.dev0/altasigma.egg-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+git-credential-altasigma = altasigma.git_helper:main

{altasigma-3.12.0 → altasigma-3.12.0.dev0}/setup.py

@@ -2,7 +2,7 @@ from setuptools import setup, find_packages
 
 setup(
     name="altasigma",
-    version="3.12.0",
+    version="3.12.0-dev0",
     author="AltaSigma GmbH",
     author_email="pypi@altasigma.com",
     packages=find_packages(exclude=['altasigma.test', 'altasigma.test.*']),
@@ -18,6 +18,11 @@ setup(
         "Programming Language :: Python :: 3.10",
         "Programming Language :: Python :: 3.11",
     ],
+    entry_points={
+        "console_scripts": [
+            "git-credential-altasigma=altasigma.git_helper:main",
+        ],
+    },
     # Broadest possible ranges
     install_requires=[
         # Seems stable enough that a 3 release would probably affect us