cloudinary 1.44.2__tar.gz → 1.44.3__tar.gz

{cloudinary-1.44.2/cloudinary.egg-info → cloudinary-1.44.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cloudinary
-Version: 1.44.2
+Version: 1.44.3
 Summary: Python and Django SDK for Cloudinary
 Author-email: Cloudinary <info@cloudinary.com>
 License: Released under the MIT license.
@@ -18,21 +18,22 @@ Classifier: Environment :: Web Environment
 Classifier: Framework :: Django
 Classifier: Framework :: Django :: 1.11
 Classifier: Framework :: Django :: 2.2
-Classifier: Framework :: Django :: 3.2
 Classifier: Framework :: Django :: 4.2
 Classifier: Framework :: Django :: 5.0
 Classifier: Framework :: Django :: 5.1
+Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 2
 Classifier: Programming Language :: Python :: 2.7
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Internet :: WWW/HTTP
 Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
 Classifier: Topic :: Multimedia :: Graphics
@@ -98,9 +99,9 @@ For the complete documentation, see the [Python SDK Guide](https://cloudinary.co
 |-------------|------------|------------|
 | 1.x         | ✔          | ✔          |
 
-| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x |
-|-------------|-------------|------------|------------|------------|------------|
-| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          |
+| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x | Django 6.x |
+|-------------|-------------|------------|------------|------------|------------|------------|
+| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          | ✔          |
 
 
 ## Installation

{cloudinary-1.44.2 → cloudinary-1.44.3}/README.md

@@ -44,9 +44,9 @@ For the complete documentation, see the [Python SDK Guide](https://cloudinary.co
 |-------------|------------|------------|
 | 1.x         | ✔          | ✔          |
 
-| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x |
-|-------------|-------------|------------|------------|------------|------------|
-| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          |
+| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x | Django 6.x |
+|-------------|-------------|------------|------------|------------|------------|------------|
+| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          | ✔          |
 
 
 ## Installation

{cloudinary-1.44.2 → cloudinary-1.44.3}/cloudinary/__init__.py

@@ -38,7 +38,7 @@ CL_BLANK = "data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAA
 URI_SCHEME = "cloudinary"
 API_VERSION = "v1_1"
 
-VERSION = "1.44.2"
+VERSION = "1.44.3"
 
 _USER_PLATFORM_DETAILS = "; ".join((platform(), "Python {}".format(python_version())))
 

{cloudinary-1.44.2 → cloudinary-1.44.3}/cloudinary/uploader.py

@@ -11,7 +11,7 @@ import cloudinary
 from cloudinary import utils
 from cloudinary.api_client.execute_request import EXCEPTION_CODES
 from cloudinary.cache.responsive_breakpoints_cache import instance as responsive_breakpoints_cache_instance
-from cloudinary.exceptions import Error
+from cloudinary.exceptions import Error, AuthorizationRequired
 from cloudinary.utils import build_eager
 
 try:
@@ -262,6 +262,32 @@ def upload_resource(file, **options):
     )
 
 
+def _upload_large_part_with_auth_retry(file, http_headers, options):
+    """
+    Uploads a single chunk, recovering once from an expired OAuth token via the
+    optional oauth_token_refresh_callback config hook. Retries the same chunk
+    (same http_headers, so same X-Unique-Upload-Id) to resume the upload.
+
+    :param file: The chunk to upload.
+    :param http_headers: Per-chunk headers, reused on retry.
+    :param options: Upload options (must not contain an oauth_token key).
+    :return: The result of the chunk upload API call.
+    :rtype: dict
+    """
+    # Pin the token so the value handed to the callback is the one actually sent.
+    token = cloudinary.config().oauth_token
+    pinned = dict(options, oauth_token=token) if token else options
+    try:
+        return upload_large_part(file, http_headers=http_headers, **pinned)
+    except AuthorizationRequired:
+        callback = cloudinary.config().oauth_token_refresh_callback
+        if not callback:
+            raise
+        callback(token)
+        # Retry with the original options so call_api re-reads the refreshed token from config.
+        return upload_large_part(file, http_headers=http_headers, **options)
+
+
 def upload_large(file, **options):
     """
     Uploads a large file (in chunks) to Cloudinary.
@@ -308,7 +334,9 @@ def upload_large(file, **options):
                 "X-Unique-Upload-Id": upload_id
             }
 
-            upload_result = upload_large_part((file_name, chunk), http_headers=http_headers, **options)
+            upload_result = _upload_large_part_with_auth_retry(
+                (file_name, chunk), http_headers, options
+            )
 
             options["public_id"] = upload_result.get("public_id")
 

{cloudinary-1.44.2 → cloudinary-1.44.3/cloudinary.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cloudinary
-Version: 1.44.2
+Version: 1.44.3
 Summary: Python and Django SDK for Cloudinary
 Author-email: Cloudinary <info@cloudinary.com>
 License: Released under the MIT license.
@@ -18,21 +18,22 @@ Classifier: Environment :: Web Environment
 Classifier: Framework :: Django
 Classifier: Framework :: Django :: 1.11
 Classifier: Framework :: Django :: 2.2
-Classifier: Framework :: Django :: 3.2
 Classifier: Framework :: Django :: 4.2
 Classifier: Framework :: Django :: 5.0
 Classifier: Framework :: Django :: 5.1
+Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python
 Classifier: Programming Language :: Python :: 2
 Classifier: Programming Language :: Python :: 2.7
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Internet :: WWW/HTTP
 Classifier: Topic :: Internet :: WWW/HTTP :: Dynamic Content
 Classifier: Topic :: Multimedia :: Graphics
@@ -98,9 +99,9 @@ For the complete documentation, see the [Python SDK Guide](https://cloudinary.co
 |-------------|------------|------------|
 | 1.x         | ✔          | ✔          |
 
-| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x |
-|-------------|-------------|------------|------------|------------|------------|
-| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          |
+| SDK Version | Django 1.11 | Django 2.x | Django 3.x | Django 4.x | Django 5.x | Django 6.x |
+|-------------|-------------|------------|------------|------------|------------|------------|
+| 1.x         | ✔           | ✔          | ✔          | ✔          | ✔          | ✔          |
 
 
 ## Installation

{cloudinary-1.44.2 → cloudinary-1.44.3}/pyproject.toml

@@ -1,7 +1,7 @@
 [project]
 name = "cloudinary"
 description = "Python and Django SDK for Cloudinary"
-version = "1.44.2"
+version = "1.44.3"
 
 authors = [{ name = "Cloudinary", email = "info@cloudinary.com" }]
 license = { file = "LICENSE.txt" }
@@ -13,21 +13,22 @@ classifiers = [
     "Framework :: Django",
     "Framework :: Django :: 1.11",
     "Framework :: Django :: 2.2",
-    "Framework :: Django :: 3.2",
     "Framework :: Django :: 4.2",
     "Framework :: Django :: 5.0",
     "Framework :: Django :: 5.1",
+    "Framework :: Django :: 5.2",
+    "Framework :: Django :: 6.0",
     "Intended Audience :: Developers",
     "License :: OSI Approved :: MIT License",
     "Programming Language :: Python",
     "Programming Language :: Python :: 2",
     "Programming Language :: Python :: 2.7",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Topic :: Internet :: WWW/HTTP",
     "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
     "Topic :: Multimedia :: Graphics",

{cloudinary-1.44.2 → cloudinary-1.44.3}/setup.py

@@ -7,7 +7,7 @@ if version_info[0] >= 3:
 else:
     # Following code is legacy (Python 2.7 compatibility) and will be removed in the future!
     # TODO: Remove in next major update (when dropping Python 2.7 compatibility)
-    version = "1.44.2"
+    version = "1.44.3"
 
     with open('README.md') as file:
         long_description = file.read()
@@ -33,21 +33,22 @@ else:
               "Framework :: Django",
               "Framework :: Django :: 1.11",
               "Framework :: Django :: 2.2",
-              "Framework :: Django :: 3.2",
               "Framework :: Django :: 4.2",
               "Framework :: Django :: 5.0",
               "Framework :: Django :: 5.1",
+              "Framework :: Django :: 5.2",
+              "Framework :: Django :: 6.0",
               "Intended Audience :: Developers",
               "License :: OSI Approved :: MIT License",
               "Programming Language :: Python",
               "Programming Language :: Python :: 2",
               "Programming Language :: Python :: 2.7",
               "Programming Language :: Python :: 3",
-              "Programming Language :: Python :: 3.9",
               "Programming Language :: Python :: 3.10",
               "Programming Language :: Python :: 3.11",
               "Programming Language :: Python :: 3.12",
               "Programming Language :: Python :: 3.13",
+              "Programming Language :: Python :: 3.14",
               "Topic :: Internet :: WWW/HTTP",
               "Topic :: Internet :: WWW/HTTP :: Dynamic Content",
               "Topic :: Multimedia :: Graphics",

{cloudinary-1.44.2 → cloudinary-1.44.3}/test/test_metadata.py

@@ -10,7 +10,7 @@ from cloudinary import api
 from cloudinary.exceptions import BadRequest, NotFound
 from test.helper_test import (
     UNIQUE_TEST_ID, get_uri, get_params, get_method, api_response_mock, ignore_exception, get_json_body,
-    URLLIB3_REQUEST, patch
+    URLLIB3_REQUEST, patch, CldTestCase
 )
 
 MOCK_RESPONSE = api_response_mock()
@@ -105,7 +105,7 @@ METADATA_FIELDS_TO_CREATE = [
 disable_warnings()
 
 
-class MetadataTest(unittest.TestCase):
+class MetadataTest(CldTestCase):
     @classmethod
     def setUpClass(cls):
         cloudinary.reset_config()
@@ -151,9 +151,7 @@ class MetadataTest(unittest.TestCase):
         if metadata_field["type"] in ["enum", "set"]:
             self.assert_metadata_field_datasource(metadata_field["datasource"])
 
-        values = values or {}
-        for key, value in values.items():
-            self.assertEqual(metadata_field[key], value)
+        self.assertObjectContainsSubset(metadata_field, values or {})
 
     def assert_metadata_field_datasource(self, datasource):
         """Asserts that a given object fits the generic structure of a metadata field datasource
@@ -308,17 +306,15 @@ class MetadataTest(unittest.TestCase):
             "external_id": EXTERNAL_ID_SET,
             "label": new_label,
             "type": "integer",
-            "mandatory": True,
             "default_value": new_default_value,
-            "restrictions": {"readonly_ui": True}
+            "restrictions": {"readonly_ui": True},
         })
 
         self.assert_metadata_field(result, "string", {
             "external_id": EXTERNAL_ID_GENERAL,
             "label": new_label,
             "default_value": new_default_value,
-            "mandatory": True,
-            "restrictions": {"readonly_ui": True}
+            "restrictions": {"readonly_ui": True},
         })
 
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
@@ -501,8 +497,7 @@ class MetadataTest(unittest.TestCase):
 
         self.assertTrue(get_uri(mocker).endswith("/metadata_fields/order"))
         self.assertEqual(get_method(mocker), "PUT")
-        self.assertEqual(get_json_body(mocker)['order_by'], "label")
-        self.assertEqual(get_json_body(mocker)['direction'], "asc")
+        self.assertObjectContainsSubset(get_json_body(mocker), {"order_by": "label", "direction": "asc"})
 
     @patch(URLLIB3_REQUEST)
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
@@ -513,8 +508,7 @@ class MetadataTest(unittest.TestCase):
 
         self.assertTrue(get_uri(mocker).endswith("/metadata_fields/order"))
         self.assertEqual(get_method(mocker), "PUT")
-        self.assertEqual(get_json_body(mocker)['order_by'], "external_id")
-        self.assertEqual(get_json_body(mocker)['direction'], "desc")
+        self.assertObjectContainsSubset(get_json_body(mocker), {"order_by": "external_id", "direction": "desc"})
 
     @patch(URLLIB3_REQUEST)
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
@@ -525,8 +519,7 @@ class MetadataTest(unittest.TestCase):
 
         self.assertTrue(get_uri(mocker).endswith("/metadata_fields/order"))
         self.assertEqual(get_method(mocker), "PUT")
-        self.assertEqual(get_json_body(mocker)['order_by'], "created_at")
-        self.assertEqual(get_json_body(mocker)['direction'], "asc")
+        self.assertObjectContainsSubset(get_json_body(mocker), {"order_by": "created_at", "direction": "asc"})
 
 
 if __name__ == "__main__":

{cloudinary-1.44.2 → cloudinary-1.44.3}/test/test_uploader.py

@@ -18,7 +18,7 @@ from test.cache.storage.dummy_cache_storage import DummyCacheStorage
 from test.helper_test import uploader_response_mock, SUFFIX, TEST_IMAGE, get_params, get_headers, TEST_ICON, TEST_DOC, \
     REMOTE_TEST_IMAGE, UTC, populate_large_file, TEST_UNICODE_IMAGE, get_uri, get_method, get_param, \
     cleanup_test_resources_by_tag, cleanup_test_transformation, cleanup_test_resources, EVAL_STR, ON_SUCCESS_STR, \
-    URLLIB3_REQUEST, patch, retry_assertion, CldTestCase
+    URLLIB3_REQUEST, patch, retry_assertion, CldTestCase, http_response_mock
 from test.test_utils import TEST_ID, TEST_FOLDER
 
 MOCK_RESPONSE = uploader_response_mock()
@@ -196,11 +196,12 @@ class UploaderTest(CldTestCase):
 
         result = uploader.upload(TEST_UNICODE_IMAGE, tags=[UNIQUE_TAG], use_filename=True, unique_filename=False)
 
-        self.assertEqual(result["width"], TEST_IMAGE_WIDTH)
-        self.assertEqual(result["height"], TEST_IMAGE_HEIGHT)
-
-        self.assertEqual(expected_name, result["public_id"])
-        self.assertEqual(expected_name, result["original_filename"])
+        self.assertObjectContainsSubset(result, {
+            "width": TEST_IMAGE_WIDTH,
+            "height": TEST_IMAGE_HEIGHT,
+            "public_id": expected_name,
+            "original_filename": expected_name,
+        })
 
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
     def test_upload_file_io_without_filename(self):
@@ -211,9 +212,11 @@ class UploaderTest(CldTestCase):
 
             result = uploader.upload(temp_file, tags=[UNIQUE_TAG])
 
-        self.assertEqual(result["width"], TEST_IMAGE_WIDTH)
-        self.assertEqual(result["height"], TEST_IMAGE_HEIGHT)
-        self.assertEqual('stream', result["original_filename"])
+        self.assertObjectContainsSubset(result, {
+            "width": TEST_IMAGE_WIDTH,
+            "height": TEST_IMAGE_HEIGHT,
+            "original_filename": "stream",
+        })
 
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
     def test_upload_custom_filename(self):
@@ -794,11 +797,13 @@ P9/AFGGFyjOXZtQAAAAAElFTkSuQmCC\
                                               use_filename=True, unique_filename=False, filename=filename)
 
             self.assertCountEqual(resource2["tags"], ["upload_large_tag", UNIQUE_TAG])
-            self.assertEqual(resource2["resource_type"], "image")
-            self.assertEqual(resource2["original_filename"], filename)
+            self.assertObjectContainsSubset(resource2, {
+                "resource_type": "image",
+                "original_filename": filename,
+                "width": LARGE_FILE_WIDTH,
+                "height": LARGE_FILE_HEIGHT,
+            })
             self.assertEqual(resource2["original_filename"], resource2["public_id"])
-            self.assertEqual(resource2["width"], LARGE_FILE_WIDTH)
-            self.assertEqual(resource2["height"], LARGE_FILE_HEIGHT)
 
             resource3 = uploader.upload_large(temp_file_name, chunk_size=LARGE_FILE_SIZE,
                                               tags=["upload_large_tag", UNIQUE_TAG])
@@ -832,6 +837,190 @@ P9/AFGGFyjOXZtQAAAAAElFTkSuQmCC\
             self.assertEqual(resource["width"], LARGE_FILE_WIDTH)
             self.assertEqual(resource["height"], LARGE_FILE_HEIGHT)
 
+    _OAUTH_CHUNK_SIZE = 4096
+    _OAUTH_FILE_SIZE = _OAUTH_CHUNK_SIZE * 3
+
+    @staticmethod
+    def _oauth_part_response(public_id="test_public_id"):
+        return {"public_id": public_id, "done": True}
+
+    def _run_upload_large_with_oauth(self, side_effect, chunk_size=None):
+        """Runs upload_large over a 3-chunk in-memory file with upload_large_part mocked"""
+        chunk_size = chunk_size or self._OAUTH_CHUNK_SIZE
+        with io.BytesIO() as temp_file:
+            populate_large_file(temp_file, self._OAUTH_FILE_SIZE)
+            with patch("cloudinary.uploader.upload_large_part") as part_mock:
+                part_mock.side_effect = side_effect
+                result = uploader.upload_large(temp_file, chunk_size=chunk_size,
+                                               tags=[UNIQUE_TAG], resource_type="image")
+        return result, part_mock
+
+    def test_upload_large_oauth_resume_on_mid_stream_401(self):
+        """Should refresh once and resume the same upload when a chunk gets a 401"""
+        cloudinary.config(oauth_token="expired-token")
+
+        rejected_tokens = []
+
+        def refresh(rejected):
+            rejected_tokens.append(rejected)
+            cloudinary.config(oauth_token="fresh-token")
+
+        cloudinary.config().oauth_token_refresh_callback = refresh
+
+        calls = {"n": 0}
+
+        def side_effect(file, http_headers=None, **options):
+            calls["n"] += 1
+            if calls["n"] == 2:
+                raise exceptions.AuthorizationRequired("Server returned unexpected status code - 401")
+            return self._oauth_part_response()
+
+        result, part_mock = self._run_upload_large_with_oauth(side_effect)
+
+        self.assertEqual(rejected_tokens, ["expired-token"])
+        self.assertEqual(part_mock.call_count, 4)
+
+        # The retry must reuse the failed chunk's X-Unique-Upload-Id and Content-Range to resume.
+        upload_ids = [c[1]["http_headers"]["X-Unique-Upload-Id"] for c in part_mock.call_args_list]
+        self.assertEqual(len(set(upload_ids)), 1)
+        ranges = [c[1]["http_headers"]["Content-Range"] for c in part_mock.call_args_list]
+        self.assertEqual(ranges[1], ranges[2])
+
+        self.assertEqual(result, self._oauth_part_response())
+
+    def test_upload_large_oauth_resume_on_first_chunk_401(self):
+        """Should refresh and resume when the first chunk (no public_id yet) gets a 401"""
+        cloudinary.config(oauth_token="expired-token")
+
+        refresh_calls = {"n": 0}
+
+        def refresh(rejected):
+            refresh_calls["n"] += 1
+            cloudinary.config(oauth_token="fresh-token")
+
+        cloudinary.config().oauth_token_refresh_callback = refresh
+
+        calls = {"n": 0}
+
+        def side_effect(file, http_headers=None, **options):
+            calls["n"] += 1
+            if calls["n"] == 1:
+                self.assertIsNone(options.get("public_id"))
+                raise exceptions.AuthorizationRequired("Server returned unexpected status code - 401")
+            return self._oauth_part_response()
+
+        result, part_mock = self._run_upload_large_with_oauth(side_effect)
+
+        self.assertEqual(refresh_calls["n"], 1)
+        self.assertEqual(part_mock.call_count, 4)
+        upload_ids = [c[1]["http_headers"]["X-Unique-Upload-Id"] for c in part_mock.call_args_list]
+        self.assertEqual(len(set(upload_ids)), 1)
+        self.assertEqual(result, self._oauth_part_response())
+
+    def test_upload_large_oauth_single_retry_then_propagate(self):
+        """Should retry once then propagate when the token stays rejected"""
+        cloudinary.config(oauth_token="expired-token")
+
+        refresh_calls = {"n": 0}
+
+        def refresh(rejected):
+            refresh_calls["n"] += 1
+            cloudinary.config(oauth_token="still-bad-token")
+
+        cloudinary.config().oauth_token_refresh_callback = refresh
+
+        def side_effect(file, http_headers=None, **options):
+            raise exceptions.AuthorizationRequired("Server returned unexpected status code - 401")
+
+        with self.assertRaises(exceptions.AuthorizationRequired):
+            self._run_upload_large_with_oauth(side_effect)
+
+        self.assertEqual(refresh_calls["n"], 1)
+
+    def test_upload_large_oauth_no_hook_propagates(self):
+        """Should propagate the first 401 with no retry when no callback is registered"""
+        cloudinary.config(oauth_token="expired-token")
+
+        calls = {"n": 0}
+
+        def side_effect(file, http_headers=None, **options):
+            calls["n"] += 1
+            raise exceptions.AuthorizationRequired("Server returned unexpected status code - 401")
+
+        with self.assertRaises(exceptions.AuthorizationRequired):
+            self._run_upload_large_with_oauth(side_effect)
+
+        self.assertEqual(calls["n"], 1)
+
+    def test_upload_large_oauth_non_auth_error_not_retried(self):
+        """Should not retry non-auth errors even when a callback is registered"""
+        cloudinary.config(oauth_token="some-token")
+
+        refresh_calls = {"n": 0}
+
+        def refresh(rejected):
+            refresh_calls["n"] += 1
+
+        cloudinary.config().oauth_token_refresh_callback = refresh
+
+        for error in (exceptions.BadRequest("bad request"),
+                      exceptions.Error("Socket error: some transient failure")):
+            refresh_calls["n"] = 0
+            calls = {"n": 0}
+
+            def side_effect(file, http_headers=None, _err=error, **options):
+                calls["n"] += 1
+                raise _err
+
+            with self.assertRaises(type(error)):
+                self._run_upload_large_with_oauth(side_effect)
+
+            self.assertEqual(calls["n"], 1)
+            self.assertEqual(refresh_calls["n"], 0)
+
+    @patch(URLLIB3_REQUEST)
+    def test_upload_large_oauth_rejected_token_is_the_one_sent(self, request_mock):
+        """Should pass the token actually sent (pinned) to the callback when it rotates per read"""
+        token_counter = {"n": 0}
+
+        class RotatingConfig(cloudinary.Config):
+            @property
+            def oauth_token(self):
+                token_counter["n"] += 1
+                return "token-{}".format(token_counter["n"])
+
+            @oauth_token.setter
+            def oauth_token(self, value):
+                pass
+
+        rotating = RotatingConfig()
+        rejected_seen = {}
+
+        def refresh(rejected):
+            rejected_seen["token"] = rejected
+            request_mock.return_value = uploader_response_mock()
+
+        rotating.oauth_token_refresh_callback = refresh
+
+        responses = {"first": True}
+
+        def request_side_effect(*args, **kwargs):
+            if responses["first"]:
+                responses["first"] = False
+                rejected_seen["sent"] = kwargs["headers"].get("authorization", "").replace("Bearer ", "")
+                return http_response_mock('{"error":{"message":"401"}}', status=401)
+            return uploader_response_mock()
+
+        request_mock.side_effect = request_side_effect
+
+        with patch("cloudinary.config", return_value=rotating):
+            with io.BytesIO() as temp_file:
+                populate_large_file(temp_file, self._OAUTH_CHUNK_SIZE)
+                uploader.upload_large(temp_file, chunk_size=self._OAUTH_CHUNK_SIZE,
+                                      tags=[UNIQUE_TAG], resource_type="image")
+
+        self.assertEqual(rejected_seen["token"], rejected_seen["sent"])
+
     @patch(URLLIB3_REQUEST)
     @unittest.skipUnless(cloudinary.config().api_secret, "requires api_key/api_secret")
     def test_upload_preset(self, mocker):