arize-phoenix 4.27.0__tar.gz → 4.28.1__tar.gz

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: arize-phoenix
-Version: 4.27.0
+Version: 4.28.1
 Summary: AI Observability and Evaluation
 Project-URL: Documentation, https://docs.arize.com/phoenix/
 Project-URL: Issues, https://github.com/Arize-ai/phoenix/issues

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/src/phoenix/auth.py

@@ -39,7 +39,10 @@ def validate_password_format(password: str) -> None:
         raise ValueError("Password cannot contain whitespace characters")
     if not password.isascii():
         raise ValueError("Password can contain only ASCII characters")
+    if not len(password) >= MIN_PASSWORD_LENGTH:
+        raise ValueError(f"Password must be at least {MIN_PASSWORD_LENGTH} characters long")
 
 
 EMAIL_PATTERN = re.compile(r"^[^@\s]+@[^@\s]+[.][^@\s]+\Z")
 NUM_ITERATIONS = 10_000
+MIN_PASSWORD_LENGTH = 4

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/src/phoenix/server/api/context.py

@@ -2,6 +2,7 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Optional
 
+from starlette.responses import Response as StarletteResponse
 from strawberry.fastapi import BaseContext
 
 from phoenix.core.model_schema import Model
@@ -77,7 +78,7 @@ class Context(BaseContext):
     secret: Optional[str] = None
 
     def get_secret(self) -> str:
-        """A type safe way to get the application secret. Throws an error if the secret is not set.
+        """A type-safe way to get the application secret. Throws an error if the secret is not set.
 
         Returns:
             str: the phoenix secret
@@ -88,3 +89,11 @@ class Context(BaseContext):
                 " Please set the PHOENIX_SECRET environment variable and re-deploy the application."
             )
         return self.secret
+
+    def get_response(self) -> StarletteResponse:
+        """
+        A type-safe way to get the response object. Throws an error if the response is not set.
+        """
+        if (response := self.response) is None:
+            raise ValueError("no response is set")
+        return response

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/src/phoenix/server/api/mutations/__init__.py

@@ -1,6 +1,7 @@
 import strawberry
 
 from phoenix.server.api.mutations.api_key_mutations import ApiKeyMutationMixin
+from phoenix.server.api.mutations.auth_mutations import AuthMutationMixin
 from phoenix.server.api.mutations.dataset_mutations import DatasetMutationMixin
 from phoenix.server.api.mutations.experiment_mutations import ExperimentMutationMixin
 from phoenix.server.api.mutations.export_events_mutations import ExportEventsMutationMixin
@@ -12,13 +13,14 @@ from phoenix.server.api.mutations.user_mutations import UserMutationMixin
 
 @strawberry.type
 class Mutation(
-    ProjectMutationMixin,
+    ApiKeyMutationMixin,
+    AuthMutationMixin,
     DatasetMutationMixin,
     ExperimentMutationMixin,
     ExportEventsMutationMixin,
+    ProjectMutationMixin,
     SpanAnnotationMutationMixin,
     TraceAnnotationMutationMixin,
-    ApiKeyMutationMixin,
     UserMutationMixin,
 ):
     pass

arize_phoenix-4.28.1/src/phoenix/server/api/mutations/auth_mutations.py

@@ -0,0 +1,63 @@
+import asyncio
+from datetime import timedelta
+
+import strawberry
+from sqlalchemy import select
+from strawberry.types import Info
+
+from phoenix.auth import is_valid_password
+from phoenix.db import models
+from phoenix.server.api.context import Context
+from phoenix.server.api.mutations.auth import HasSecret
+
+PHOENIX_ACCESS_TOKEN_COOKIE_NAME = "phoenix-access-token"
+PHOENIX_ACCESS_TOKEN_COOKIE_MAX_AGE_IN_SECONDS = int(timedelta(days=31).total_seconds())
+
+
+@strawberry.input
+class LoginMutationInput:
+    email: str
+    password: str
+
+
+@strawberry.type
+class AuthMutationMixin:
+    @strawberry.mutation(permission_classes=[HasSecret])  # type: ignore
+    async def login(
+        self,
+        info: Info[Context, None],
+        input: LoginMutationInput,
+    ) -> None:
+        async with info.context.db() as session:
+            if (
+                user := await session.scalar(
+                    select(models.User).where(models.User.email == input.email)
+                )
+            ) is None or (password_hash := user.password_hash) is None:
+                raise ValueError
+        secret = info.context.get_secret()
+        loop = asyncio.get_running_loop()
+        if not await loop.run_in_executor(
+            executor=None,
+            func=lambda: is_valid_password(
+                password=input.password, salt=secret, password_hash=password_hash
+            ),
+        ):
+            raise ValueError
+        response = info.context.get_response()
+        response.set_cookie(
+            key=PHOENIX_ACCESS_TOKEN_COOKIE_NAME,
+            value="token",  # todo: compute access token
+            secure=True,
+            httponly=True,
+            samesite="strict",
+            max_age=PHOENIX_ACCESS_TOKEN_COOKIE_MAX_AGE_IN_SECONDS,
+        )
+
+    @strawberry.mutation(permission_classes=[HasSecret])  # type: ignore
+    async def logout(
+        self,
+        info: Info[Context, None],
+    ) -> None:
+        response = info.context.get_response()
+        response.delete_cookie(key=PHOENIX_ACCESS_TOKEN_COOKIE_NAME)

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/src/phoenix/server/app.py

@@ -79,7 +79,6 @@ from phoenix.server.api.dataloaders import (
     TokenCountDataLoader,
     TraceRowIdsDataLoader,
 )
-from phoenix.server.api.routers.auth import router as auth_router
 from phoenix.server.api.routers.v1 import REST_API_VERSION
 from phoenix.server.api.routers.v1 import router as v1_router
 from phoenix.server.api.schema import schema
@@ -662,8 +661,6 @@ def create_app(
     app.include_router(router)
     app.include_router(graphql_router)
     app.add_middleware(GZipMiddleware)
-    if authentication_enabled:
-        app.include_router(auth_router)
     if serve_ui:
         app.mount(
             "/",

{arize_phoenix-4.27.0 → arize_phoenix-4.28.1}/src/phoenix/server/static/.vite/manifest.json

@@ -1,21 +1,21 @@
 {
-  "_components-1MfQimGx.js": {
-    "file": "assets/components-1MfQimGx.js",
+  "_components-BYH03rjA.js": {
+    "file": "assets/components-BYH03rjA.js",
     "name": "components",
     "imports": [
       "_vendor-aSQri0vz.js",
       "_vendor-arizeai-CsdcB1NH.js",
-      "_pages-CqZDVx20.js",
+      "_pages-DnbxgoTK.js",
       "_vendor-three-DwGkEfCM.js",
       "_vendor-codemirror-CYHkhs7D.js"
     ]
   },
-  "_pages-CqZDVx20.js": {
-    "file": "assets/pages-CqZDVx20.js",
+  "_pages-DnbxgoTK.js": {
+    "file": "assets/pages-DnbxgoTK.js",
     "name": "pages",
     "imports": [
       "_vendor-aSQri0vz.js",
-      "_components-1MfQimGx.js",
+      "_components-BYH03rjA.js",
       "_vendor-arizeai-CsdcB1NH.js",
       "_vendor-recharts-B0sannek.js",
       "_vendor-codemirror-CYHkhs7D.js"
@@ -61,15 +61,15 @@
     "name": "vendor-three"
   },
   "index.tsx": {
-    "file": "assets/index-B263sE2x.js",
+    "file": "assets/index-fqdjNpYm.js",
     "name": "index",
     "src": "index.tsx",
     "isEntry": true,
     "imports": [
       "_vendor-aSQri0vz.js",
       "_vendor-arizeai-CsdcB1NH.js",
-      "_pages-CqZDVx20.js",
-      "_components-1MfQimGx.js",
+      "_pages-DnbxgoTK.js",
+      "_components-BYH03rjA.js",
       "_vendor-three-DwGkEfCM.js",
       "_vendor-recharts-B0sannek.js",
       "_vendor-codemirror-CYHkhs7D.js"