atlan-application-sdk 0.1.1rc61__tar.gz → 0.1.1rc63__tar.gz

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/.env.example

@@ -24,13 +24,18 @@ ATLAN_START_TO_CLOSE_TIMEOUT_SECONDS=7200 # 2 hours
 # if you plan to deploy the app in customer environment, below is a sample environment variables you need to set
 ATLAN_WORKFLOW_HOST="tenant-temporal.atlan.com"
 ATLAN_WORKFLOW_PORT="443"
-ATLAN_WORKFLOW_AUTH_ENABLED="true"
+ATLAN_AUTH_ENABLED="true"
+ATLAN_AUTH_URL="https://tenant.atlan.com/auth/realms/default/protocol/openid-connect/token"
+ATLAN_WORKFLOW_TLS_ENABLED="true"
 ENABLE_ATLAN_UPLOAD="true"
-ATLAN_DEPLOYMENT_SECRETS='{"appName_app_client_id":"enter_client_id","appName_app_client_secret":"enter_secret","atlan_auth_url":"https://tenant.atlan.com/auth/realms/default/protocol/openid-connect/token","workflow_tls_enabled":"true","deployment_name":"agent-v2"}'
 
 # Storage:
 DEPLOYMENT_OBJECT_STORE_NAME="objectstore"
-UPSTREAM_OBJECT_STORE_NAME="atlan-storage"
+UPSTREAM_OBJECT_STORE_NAME="atlan-objectstore"
 
 # Secret Store
-SECRET_STORE_NAME="aws-secrets"
+SECRET_STORE_NAME="aws-secrets"
+
+# Client ID/Secret key fields, the value is the name of the key in the secret store
+ATLAN_AUTH_CLIENT_ID_KEY="ATLAN_AUTH_CLIENT_ID"
+ATLAN_AUTH_CLIENT_SECRET_KEY="ATLAN_AUTH_CLIENT_SECRET"

atlan_application_sdk-0.1.1rc63/.github/release_notes.md

@@ -0,0 +1,8 @@
+## v0.1.1rc63 (November 12, 2025)
+
+Full Changelog: https://github.com/atlanhq/application-sdk/compare/v0.1.1rc62...v0.1.1rc63
+
+### Features
+
+- handle single key secret stores (#812) (by @nishantmunjal7 in [abf5f6d](https://github.com/atlanhq/application-sdk/commit/abf5f6d))
+- deployment secret single-key (#816) (by @nishantmunjal7 in [c5efd9a](https://github.com/atlanhq/application-sdk/commit/c5efd9a))

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## v0.1.1rc63 (November 12, 2025)
+
+Full Changelog: https://github.com/atlanhq/application-sdk/compare/v0.1.1rc62...v0.1.1rc63
+
+### Features
+
+- handle single key secret stores (#812) (by @nishantmunjal7 in [abf5f6d](https://github.com/atlanhq/application-sdk/commit/abf5f6d))
+- deployment secret single-key (#816) (by @nishantmunjal7 in [c5efd9a](https://github.com/atlanhq/application-sdk/commit/c5efd9a))
+
+
+## v0.1.1rc62 (November 03, 2025)
+
+Full Changelog: https://github.com/atlanhq/application-sdk/compare/v0.1.1rc61...v0.1.1rc62
+
+### Features
+
+- Adding a new event whenever Token refreshes (#802) (by @Garavitey in [2e32ab4](https://github.com/atlanhq/application-sdk/commit/2e32ab4))
+
+
 ## v0.1.1rc61 (October 30, 2025)
 
 Full Changelog: https://github.com/atlanhq/application-sdk/compare/v0.1.1rc60...v0.1.1rc61

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: atlan-application-sdk
-Version: 0.1.1rc61
+Version: 0.1.1rc63
 Summary: Atlan Application SDK is a Python library for developing applications on the Atlan Platform
 Project-URL: Repository, https://github.com/atlanhq/application-sdk
 Project-URL: Documentation, https://github.com/atlanhq/application-sdk/README.md

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/application_sdk/clients/atlan_auth.py

@@ -1,17 +1,17 @@
 """OAuth2 token manager with automatic secret store discovery."""
 
 import time
-from typing import Any, Dict, Optional
+from typing import Dict, Optional
 
 import aiohttp
 
 from application_sdk.common.error_codes import ClientError
 from application_sdk.constants import (
     APPLICATION_NAME,
+    AUTH_ENABLED,
+    AUTH_URL,
     WORKFLOW_AUTH_CLIENT_ID_KEY,
     WORKFLOW_AUTH_CLIENT_SECRET_KEY,
-    WORKFLOW_AUTH_ENABLED,
-    WORKFLOW_AUTH_URL_KEY,
 )
 from application_sdk.observability.logger_adaptor import get_logger
 from application_sdk.services.secretstore import SecretStore
@@ -39,9 +39,8 @@ class AtlanAuthClient:
         (environment variables, AWS Secrets Manager, Azure Key Vault, etc.)
         """
         self.application_name = APPLICATION_NAME
-        self.auth_config: Dict[str, Any] = SecretStore.get_deployment_secret()
-        self.auth_enabled: bool = WORKFLOW_AUTH_ENABLED
-        self.auth_url: Optional[str] = None
+        self.auth_enabled: bool = AUTH_ENABLED
+        self.auth_url: Optional[str] = AUTH_URL
 
         # Secret store credentials (cached after first fetch)
         self.credentials: Optional[Dict[str, str]] = None
@@ -175,18 +174,17 @@ class AtlanAuthClient:
 
     async def _extract_auth_credentials(self) -> Optional[Dict[str, str]]:
         """Fetch app credentials from secret store - auth-specific logic"""
-        if (
-            WORKFLOW_AUTH_CLIENT_ID_KEY in self.auth_config
-            and WORKFLOW_AUTH_CLIENT_SECRET_KEY in self.auth_config
-        ):
+        client_id = SecretStore.get_deployment_secret(WORKFLOW_AUTH_CLIENT_ID_KEY)
+        client_secret = SecretStore.get_deployment_secret(
+            WORKFLOW_AUTH_CLIENT_SECRET_KEY
+        )
+
+        if client_id and client_secret:
             credentials = {
-                "client_id": self.auth_config[WORKFLOW_AUTH_CLIENT_ID_KEY],
-                "client_secret": self.auth_config[WORKFLOW_AUTH_CLIENT_SECRET_KEY],
+                "client_id": client_id,
+                "client_secret": client_secret,
             }
 
-            if WORKFLOW_AUTH_URL_KEY in self.auth_config:
-                self.auth_url = self.auth_config[WORKFLOW_AUTH_URL_KEY]
-
             return credentials
         return None
 
@@ -199,10 +197,8 @@ class AtlanAuthClient:
         """
         # we are doing this to force a fetch of the credentials from secret store
         self.credentials = None
-        self.auth_url = None
         self._access_token = None
         self._token_expiry = 0
-        self.auth_config = {}
 
     def calculate_refresh_interval(self) -> int:
         """Calculate the optimal token refresh interval based on token expiry.

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/application_sdk/clients/temporal.py

@@ -1,4 +1,5 @@
 import asyncio
+import time
 import uuid
 from concurrent.futures import ThreadPoolExecutor
 from typing import Any, Dict, Optional, Sequence, Type
@@ -17,19 +18,25 @@ from application_sdk.clients.workflow import WorkflowClient
 from application_sdk.constants import (
     APPLICATION_NAME,
     DEPLOYMENT_NAME,
-    DEPLOYMENT_NAME_KEY,
     IS_LOCKING_DISABLED,
     MAX_CONCURRENT_ACTIVITIES,
     WORKFLOW_HOST,
     WORKFLOW_MAX_TIMEOUT_HOURS,
     WORKFLOW_NAMESPACE,
     WORKFLOW_PORT,
-    WORKFLOW_TLS_ENABLED_KEY,
+    WORKFLOW_TLS_ENABLED,
+)
+from application_sdk.events.models import (
+    ApplicationEventNames,
+    Event,
+    EventTypes,
+    WorkerTokenRefreshEventData,
 )
 from application_sdk.interceptors.cleanup import CleanupInterceptor, cleanup
 from application_sdk.interceptors.events import EventInterceptor, publish_event
 from application_sdk.interceptors.lock import RedisLockInterceptor
 from application_sdk.observability.logger_adaptor import get_logger
+from application_sdk.services.eventstore import EventStore
 from application_sdk.services.secretstore import SecretStore
 from application_sdk.services.statestore import StateStore, StateType
 from application_sdk.workflows import WorkflowInterface
@@ -89,7 +96,6 @@ class TemporalWorkflowClient(WorkflowClient):
         self.port = port if port else WORKFLOW_PORT
         self.namespace = namespace if namespace else WORKFLOW_NAMESPACE
 
-        self.deployment_config: Dict[str, Any] = SecretStore.get_deployment_secret()
         self.worker_task_queue = self.get_worker_task_queue()
         self.auth_manager = AtlanAuthClient()
 
@@ -110,12 +116,8 @@ class TemporalWorkflowClient(WorkflowClient):
         Returns:
             str: The task queue name in format "app_name-deployment_name".
         """
-        deployment_name = self.deployment_config.get(
-            DEPLOYMENT_NAME_KEY, DEPLOYMENT_NAME
-        )
-
-        if deployment_name:
-            return f"atlan-{self.application_name}-{deployment_name}"
+        if DEPLOYMENT_NAME:
+            return f"atlan-{self.application_name}-{DEPLOYMENT_NAME}"
         else:
             return self.application_name
 
@@ -142,6 +144,39 @@ class TemporalWorkflowClient(WorkflowClient):
         """
         return self.namespace
 
+    async def _publish_token_refresh_event(self) -> None:
+        """Publish a token refresh event to the event store.
+
+        This method creates and publishes an event containing token refresh information,
+        including application name, deployment name, token expiry times, and refresh timestamp.
+        If event publishing fails, it logs a warning but does not raise an exception to avoid
+        disrupting the token refresh loop.
+
+        Note:
+            This method handles exceptions internally and will not propagate errors,
+            ensuring the token refresh loop continues even if event publishing fails.
+        """
+        try:
+            current_time = time.time()
+            worker_token_refresh_data = WorkerTokenRefreshEventData(
+                application_name=self.application_name,
+                deployment_name=DEPLOYMENT_NAME,
+                force_refresh=True,
+                token_expiry_time=self.auth_manager.get_token_expiry_time() or 0,
+                time_until_expiry=self.auth_manager.get_time_until_expiry() or 0,
+                refresh_timestamp=current_time,
+            )
+
+            event = Event(
+                event_type=EventTypes.APPLICATION_EVENT.value,
+                event_name=ApplicationEventNames.TOKEN_REFRESH.value,
+                data=worker_token_refresh_data.model_dump(),
+            )
+            await EventStore.publish_event(event)
+            logger.info("Published token refresh event")
+        except Exception as e:
+            logger.warning(f"Failed to publish token refresh event: {e}")
+
     async def _token_refresh_loop(self) -> None:
         """Background loop that refreshes the authentication token dynamically."""
         while True:
@@ -161,6 +196,9 @@ class TemporalWorkflowClient(WorkflowClient):
                 self._token_refresh_interval = (
                     self.auth_manager.calculate_refresh_interval()
                 )
+                # Publish token refresh event
+                await self._publish_token_refresh_event()
+
             except asyncio.CancelledError:
                 logger.info("Token refresh loop cancelled")
                 break
@@ -184,12 +222,9 @@ class TemporalWorkflowClient(WorkflowClient):
         connection_options: Dict[str, Any] = {
             "target_host": self.get_connection_string(),
             "namespace": self.namespace,
-            "tls": False,
+            "tls": WORKFLOW_TLS_ENABLED,
         }
 
-        connection_options["tls"] = self.deployment_config.get(
-            WORKFLOW_TLS_ENABLED_KEY, False
-        )
         self.worker_task_queue = self.get_worker_task_queue()
 
         if self.auth_manager.auth_enabled:

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/application_sdk/constants.py

@@ -105,16 +105,23 @@ MAX_CONCURRENT_ACTIVITIES = int(os.getenv("ATLAN_MAX_CONCURRENT_ACTIVITIES", "5"
 DEPLOYMENT_SECRET_PATH = os.getenv(
     "ATLAN_DEPLOYMENT_SECRET_PATH", "ATLAN_DEPLOYMENT_SECRETS"
 )
-WORKFLOW_AUTH_ENABLED = (
-    os.getenv("ATLAN_WORKFLOW_AUTH_ENABLED", "false").lower() == "true"
+AUTH_ENABLED = os.getenv("ATLAN_AUTH_ENABLED", "false").lower() == "true"
+#: OAuth2 authentication URL for workflow services
+AUTH_URL = os.getenv("ATLAN_AUTH_URL")
+#: Whether to enable TLS for Temporal workflow connections
+WORKFLOW_TLS_ENABLED = (
+    os.getenv("ATLAN_WORKFLOW_TLS_ENABLED", "false").lower() == "true"
 )
 
 # Deployment Secret Store Key Names
-WORKFLOW_AUTH_CLIENT_ID_KEY = f"{APPLICATION_NAME}_app_client_id"
-WORKFLOW_AUTH_CLIENT_SECRET_KEY = f"{APPLICATION_NAME}_app_client_secret"
-WORKFLOW_AUTH_URL_KEY = "atlan_auth_url"
-WORKFLOW_TLS_ENABLED_KEY = "workflow_tls_enabled"
-DEPLOYMENT_NAME_KEY = "deployment_name"
+#: Key name for OAuth2 client ID in deployment secrets (can be overridden via ATLAN_AUTH_CLIENT_ID_KEY)
+WORKFLOW_AUTH_CLIENT_ID_KEY = os.getenv(
+    "ATLAN_AUTH_CLIENT_ID_KEY", "ATLAN_AUTH_CLIENT_ID"
+)
+#: Key name for OAuth2 client secret in deployment secrets (can be overridden via ATLAN_AUTH_CLIENT_SECRET_KEY)
+WORKFLOW_AUTH_CLIENT_SECRET_KEY = os.getenv(
+    "ATLAN_AUTH_CLIENT_SECRET_KEY", "ATLAN_AUTH_CLIENT_SECRET"
+)
 
 # Workflow Constants
 #: Timeout duration for activity heartbeats

{atlan_application_sdk-0.1.1rc61 → atlan_application_sdk-0.1.1rc63}/application_sdk/events/models.py

@@ -29,6 +29,7 @@ class ApplicationEventNames(Enum):
     WORKER_END = "worker_end"
     APPLICATION_START = "application_start"
     APPLICATION_END = "application_end"
+    TOKEN_REFRESH = "token_refresh"
 
 
 class WorkflowStates(Enum):
@@ -154,6 +155,7 @@ class WorkerStartEventData(BaseModel):
 
     Attributes:
         application_name: Name of the application the worker belongs to.
+        deployment_name: Name of the deployment the worker belongs to.
         task_queue: Task queue name for the worker.
         namespace: Temporal namespace for the worker.
         host: Host address of the Temporal server.
@@ -166,6 +168,7 @@ class WorkerStartEventData(BaseModel):
 
     version: str = WORKER_START_EVENT_VERSION
     application_name: str
+    deployment_name: str
     task_queue: str
     namespace: str
     host: str
@@ -174,3 +177,26 @@ class WorkerStartEventData(BaseModel):
     max_concurrent_activities: Optional[int]
     workflow_count: int
     activity_count: int
+
+
+class WorkerTokenRefreshEventData(BaseModel):
+    """Model for token refresh event data.
+
+    This model represents the data structure used when publishing token refresh events.
+    It contains information about the token refresh operation and agent status.
+
+    Attributes:
+        application_name: Name of the application the token belongs to.
+        deployment_name: Name of the deployment (e.g., dev, staging, prod).
+        force_refresh: Whether this was a forced refresh or automatic.
+        token_expiry_time: Unix timestamp when the new token expires.
+        time_until_expiry: Seconds until token expires.
+        refresh_timestamp: Unix timestamp when the refresh occurred.
+    """
+
+    application_name: str
+    deployment_name: str
+    force_refresh: bool
+    token_expiry_time: float
+    time_until_expiry: float
+    refresh_timestamp: float