api-dock 0.4.9__tar.gz → 0.5.0__tar.gz

{api_dock-0.4.9 → api_dock-0.5.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: api_dock
-Version: 0.4.9
+Version: 0.5.0
 Summary: A flexible API gateway that allows you to proxy requests to multiple remote APIs and Databases
 Author-email: Brookie Guzder-Williams <bguzder-williams@berkeley.edu>
 License: BSd 3-clause

{api_dock-0.4.9 → api_dock-0.5.0}/api_dock/storage_auth.py

@@ -211,7 +211,7 @@ def _setup_s3_auth(conn: Any, metadata: Optional[Dict[str, Any]] = None) -> bool
 
     Args:
         conn: DuckDB connection object.
-        metadata: Optional metadata dict that may contain 'region' key.
+        metadata: Optional metadata dict that may contain 'region' key and 'public' flag.
 
     Returns:
         True if setup succeeded, False if it failed (but query may still work with public files).
@@ -225,6 +225,9 @@ def _setup_s3_auth(conn: Any, metadata: Optional[Dict[str, Any]] = None) -> bool
         conn.execute("INSTALL aws;")
         conn.execute("LOAD aws;")
 
+        # Check if this is explicitly marked as public access
+        is_public = metadata.get('public', False)
+
         # Determine AWS region with priority:
         # 1. Config file metadata (most specific)
         # 2. Environment variables
@@ -235,6 +238,30 @@ def _setup_s3_auth(conn: Any, metadata: Optional[Dict[str, Any]] = None) -> bool
             os.environ.get('AWS_REGION')
         )
 
+        # For public buckets, try anonymous access first
+        if is_public:
+            try:
+                if aws_region:
+                    conn.execute(f"""
+                        CREATE OR REPLACE SECRET (
+                            TYPE s3,
+                            KEY_ID '',
+                            SECRET '',
+                            REGION '{aws_region}'
+                        );
+                    """)
+                else:
+                    conn.execute("""
+                        CREATE OR REPLACE SECRET (
+                            TYPE s3,
+                            KEY_ID '',
+                            SECRET ''
+                        );
+                    """)
+                return True
+            except Exception:
+                pass  # Fall through to credential chain
+
         # Configure S3 authentication using AWS credential chain
         # This automatically discovers credentials from:
         # - Environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN)
@@ -308,6 +335,17 @@ def _setup_gcs_auth(conn: Any, metadata: Optional[Dict[str, Any]] = None) -> boo
             # Set environment variable for this session
             os.environ['GOOGLE_APPLICATION_CREDENTIALS'] = service_account
 
+        # Check if this is explicitly marked as public access
+        is_public = metadata.get('public', False)
+
+        # For public buckets, try anonymous access first
+        if is_public:
+            try:
+                # GCS public access doesn't require credentials
+                return True
+            except Exception:
+                pass  # Fall through to credential chain
+
         # Configure GCS authentication
         if key_id and secret:
             # Use explicit HMAC credentials from config

{api_dock-0.4.9 → api_dock-0.5.0}/api_dock.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: api_dock
-Version: 0.4.9
+Version: 0.5.0
 Summary: A flexible API gateway that allows you to proxy requests to multiple remote APIs and Databases
 Author-email: Brookie Guzder-Williams <bguzder-williams@berkeley.edu>
 License: BSd 3-clause

{api_dock-0.4.9 → api_dock-0.5.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "api_dock"
-version = "0.4.9"
+version = "0.5.0"
 description = "A flexible API gateway that allows you to proxy requests to multiple remote APIs and Databases"
 readme = "README.md"
 license = {text = "BSd 3-clause"}