apizit-cli 0.2.0b3__tar.gz → 0.2.0b4__tar.gz

{apizit_cli-0.2.0b3 → apizit_cli-0.2.0b4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apizit-cli
-Version: 0.2.0b3
+Version: 0.2.0b4
 Summary: Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI.
 Author: APIZIT
 Classifier: Development Status :: 4 - Beta

{apizit_cli-0.2.0b3 → apizit_cli-0.2.0b4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "apizit-cli"
-version = "0.2.0b3"
+version = "0.2.0b4"
 description = "Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI."
 readme = "README.md"
 requires-python = ">=3.12"

{apizit_cli-0.2.0b3 → apizit_cli-0.2.0b4}/src/apizit_cli/__init__.py

@@ -1,3 +1,3 @@
 """The APIZIT HTTP client. Importing this package never initializes a session."""
 
-__version__ = "0.2.0b3"
+__version__ = "0.2.0b4"

{apizit_cli-0.2.0b3 → apizit_cli-0.2.0b4}/src/apizit_cli/authentication.py

@@ -293,11 +293,23 @@ class NativeSession:
                         or (len(query.get("error", [])) == 1 and 0 < len(query["error"][0]) <= 256)
                     )
                 )
-                self._page(
-                    "Return to the APIZIT terminal." if valid else "Invalid login callback.",
-                    status=200 if valid else 400,
+                if not valid:
+                    self._page("Invalid login callback.", status=400)
+                    return
+                # Redirect before rendering: Chrome's global history retains an initial
+                # navigation even when JavaScript replaces its displayed URL afterward.
+                self.send_response(303)
+                self.send_header("Location", "/complete")
+                self.send_header("Content-Length", "0")
+                self.send_header("Cache-Control", "no-store")
+                self.send_header("Referrer-Policy", "no-referrer")
+                self.send_header("X-Content-Type-Options", "nosniff")
+                self.send_header(
+                    "Content-Security-Policy", "default-src 'none'; frame-ancestors 'none'"
                 )
-                # Finish sending the cleanup script before allowing the server to shut down.
+                self.end_headers()
+                self.wfile.flush()
+                # Keep serving until the clean landing page acknowledges or the grace ends.
                 if valid:
                     outcome["received_at"] = time.monotonic()
                     if "code" in query:

{apizit_cli-0.2.0b3 → apizit_cli-0.2.0b4}/src/apizit_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: apizit-cli
-Version: 0.2.0b3
+Version: 0.2.0b4
 Summary: Launch supported Python, JavaScript, TypeScript or Java APIs from your terminal or CI.
 Author: APIZIT
 Classifier: Development Status :: 4 - Beta