authentikate 2.1.2__tar.gz → 2.2.0__tar.gz

{authentikate-2.1.2 → authentikate-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: authentikate
-Version: 2.1.2
+Version: 2.2.0
 Author-email: jhnnsrs <jhnnsrs@gmail.com>
 License-Expression: MIT
 License-File: LICENSE
@@ -8,8 +8,8 @@ Requires-Python: <4.0,>=3.12
 Requires-Dist: django-guardian<3,>=2.4.0
 Requires-Dist: django>5
 Requires-Dist: httpx>=0.28.1
-Requires-Dist: joserfc>=1.0.4
-Requires-Dist: kante>=2
+Requires-Dist: joserfc>=1.7.1
+Requires-Dist: kante>=2.0.1
 Requires-Dist: pydantic<3,>2
 Description-Content-Type: text/markdown
 

{authentikate-2.1.2 → authentikate-2.2.0}/authentikate/__init__.py

@@ -10,7 +10,7 @@ framework.
 Supported Token Types
 - JWT (JSON Web Tokens) (with client_id, user_id, scopes, and expiration)
 - Static tokens (for testing and pre-defined tokens)
-- Provenance tokens (EdDSA-signed attestations minted by Rekuest, verified on
+- Provenance tokens (Ed25519-signed attestations minted by Rekuest, verified on
   the consuming/audience end via :mod:`authentikate.provenance`)
 
 

{authentikate-2.1.2 → authentikate-2.2.0}/authentikate/base_models.py

@@ -509,7 +509,7 @@ class ProvenanceSettings(BaseModel):
     """Configuration for verifying inbound provenance tokens.
 
     Provenance tokens are an orthogonal trust domain to the auth token: a
-    different issuer (Rekuest), a different signing algorithm (EdDSA), and a
+    different issuer (Rekuest), a different signing algorithm (Ed25519), and a
     different JWKS endpoint. This block scopes those issuers separately so a
     provenance token is never verified against an auth issuer and vice versa.
     """
@@ -525,7 +525,7 @@ class ProvenanceSettings(BaseModel):
     )
     """This service's identifier (e.g. "mikro"); checked against the token aud."""
     algorithms: list[str] = Field(
-        default_factory=lambda: ["EdDSA"],
+        default_factory=lambda: ["Ed25519"],
         validation_alias=AliasChoices("algorithms", "ALGORITHMS"),
     )
     """The signature algorithms allowed for provenance tokens (alg is pinned)."""

{authentikate-2.1.2 → authentikate-2.2.0}/authentikate/provenance/__init__.py

@@ -1,6 +1,6 @@
 """Provenance-token verification (consuming / audience end).
 
-Audience servers (e.g. Mikro / koherent) receive an EdDSA-signed provenance
+Audience servers (e.g. Mikro / koherent) receive an Ed25519-signed provenance
 token minted by Rekuest alongside the cleartext args, and record a verified
 provenance fact offline against Rekuest's published JWKS. This subpackage
 provides that decode/verify path:

{authentikate-2.1.2 → authentikate-2.2.0}/authentikate/provenance/decode.py

@@ -2,7 +2,7 @@
 
 Mirrors ``authentikate.decode`` for the auth token, but resolves keys from the
 *provenance* issuer(s) — a separate trust domain with its own JWKS endpoint —
-and pins the signature algorithm (``EdDSA`` by default, never ``none``), as
+and pins the signature algorithm (``Ed25519`` by default, never ``none``), as
 required by RFC 8725.
 """
 
@@ -44,7 +44,7 @@ def decode_provenance_token(
 ) -> ProvenanceToken:
     """Decode and verify a provenance token.
 
-    Verifies the EdDSA signature against the configured provenance issuers,
+    Verifies the Ed25519 signature against the configured provenance issuers,
     validates the registered claims (expiry), and checks audience membership.
 
     Raises
@@ -113,4 +113,5 @@ async def adecode_provenance_token(
 
     built = _build_token(token, decoded.claims)
     _check_audience(built, provenance)
+    print("Built provenance token:", built)
     return built

{authentikate-2.1.2 → authentikate-2.2.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "authentikate"
-version = "2.1.2"
+version = "2.2.0"
 description = ""
 authors = [{ name = "jhnnsrs", email = "jhnnsrs@gmail.com" }]
 requires-python = ">=3.12, <4.0"
@@ -10,8 +10,8 @@ dependencies = [
     "pydantic>2, <3",
     "django-guardian>=2.4.0,<3",
     "django>5",
-    "kante>=2",
-    "joserfc>=1.0.4",
+    "kante>=2.0.1",
+    "joserfc>=1.7.1",
     "httpx>=0.28.1",
 ]
 
@@ -20,7 +20,7 @@ dev-dependencies =  [
     "pytest-django>=4.5.2,<5",
     "pytest>=7.4.0,<8",
     "pytest-cov>=4.1.0,<5",
-    "cryptography>=41.0.3,<42",
+    "cryptography>=45.0.1",
     "ruff>=0.0.282,<0.0.283",
     "black>=22",
     "django-stubs>=4.2.7,<5",