codegrade 16.1.49__tar.gz → 16.1.52__tar.gz

{codegrade-16.1.49 → codegrade-16.1.52}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: codegrade
-Version: 16.1.49
+Version: 16.1.52
 Summary: A client library for accessing CodeGrade
 License: AGPL-3.0-only OR BSD-3-Clause-Clear
 Requires-Python: >=3.8.0,<4.0

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/__init__.py

@@ -7,7 +7,7 @@ from functools import wraps
 from .client import AuthenticatedClient, Client
 
 __all__ = ("login", "AuthenticatedClient", "Client", "login_from_cli")
-__version__ = "16.1.49"
+__version__ = "16.1.52"
 
 
 @wraps(AuthenticatedClient.get)

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/client.py

@@ -526,7 +526,7 @@ class Client(_BaseClient):
         return httpx.Client(
             base_url=self.base_url,
             headers={
-                "User-Agent": "CodeGradeAPI/16.1.49",
+                "User-Agent": "CodeGradeAPI/16.1.52",
             },
             follow_redirects=True,
         )
@@ -546,7 +546,7 @@ class AuthenticatedClient(_BaseClient):
             base_url=self.base_url,
             headers={
                 "Authorization": f"Bearer {self.token}",
-                "User-Agent": "CodeGradeAPI/16.1.49",
+                "User-Agent": "CodeGradeAPI/16.1.52",
             },
             follow_redirects=True,
         )

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/models/__init__.py

@@ -398,9 +398,15 @@ from .logout_response import LogoutResponse
 from .logout_user_data import LogoutUserData
 from .lti1p1_provider import LTI1p1Provider
 from .lti1p1_provider_data import LTI1p1ProviderData
+from .lti1p3_nonce_and_state_validation_enabled_setting import (
+    Lti1p3NonceAndStateValidationEnabledSetting,
+)
 from .lti1p3_parse_most_privileged_role_setting import (
     Lti1p3ParseMostPrivilegedRoleSetting,
 )
+from .lti1p3_prevent_nonce_reuse_enabled_setting import (
+    Lti1p3PreventNonceReuseEnabledSetting,
+)
 from .lti1p3_provider import LTI1p3Provider
 from .lti1p3_provider_data import LTI1p3ProviderData
 from .lti1p3_provider_presentation_as_json import (

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/models/all_site_settings.py

@@ -141,6 +141,15 @@ class AllSiteSettings(FrontendSiteSettings):
     default_course_ta_role: Maybe[
         "t.Literal['Full TA', 'Non-Editing TA']"
     ] = Nothing
+    #: Whether LTI 1.3 launches using cookies (and sessions) should check for
+    #: correct nonce and state. When disabling this feature flag, please be
+    #: mindful. These validations protect us from certain attacks. If unsure,
+    #: consult with the Security Officer before disabling.
+    lti_1p3_nonce_and_state_validation_enabled: Maybe["bool"] = Nothing
+    #: Whether LTI 1.3 launches should check nonces against the cached value.
+    #: Enabling this prevents replay attacks. If unsure, consult with the
+    #: Security Officer before disabling.
+    lti_1p3_prevent_nonce_reuse_enabled: Maybe["bool"] = Nothing
 
     raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
 
@@ -473,6 +482,28 @@ class AllSiteSettings(FrontendSiteSettings):
                         " Existing courses will not be affected."
                     ),
                 ),
+                rqa.OptionalArgument(
+                    "LTI_1P3_NONCE_AND_STATE_VALIDATION_ENABLED",
+                    rqa.SimpleValue.bool,
+                    doc=(
+                        "Whether LTI 1.3 launches using cookies (and sessions)"
+                        " should check for correct nonce and state. When"
+                        " disabling this feature flag, please be mindful."
+                        " These validations protect us from certain attacks."
+                        " If unsure, consult with the Security Officer before"
+                        " disabling."
+                    ),
+                ),
+                rqa.OptionalArgument(
+                    "LTI_1P3_PREVENT_NONCE_REUSE_ENABLED",
+                    rqa.SimpleValue.bool,
+                    doc=(
+                        "Whether LTI 1.3 launches should check nonces against"
+                        " the cached value. Enabling this prevents replay"
+                        " attacks. If unsure, consult with the Security"
+                        " Officer before disabling."
+                    ),
+                ),
             )
         ).use_readable_describe(True)
     )
@@ -582,6 +613,12 @@ class AllSiteSettings(FrontendSiteSettings):
         self.default_course_ta_role = maybe_from_nullable(
             self.default_course_ta_role
         )
+        self.lti_1p3_nonce_and_state_validation_enabled = maybe_from_nullable(
+            self.lti_1p3_nonce_and_state_validation_enabled
+        )
+        self.lti_1p3_prevent_nonce_reuse_enabled = maybe_from_nullable(
+            self.lti_1p3_prevent_nonce_reuse_enabled
+        )
 
     def to_dict(self) -> t.Dict[str, t.Any]:
         res: t.Dict[str, t.Any] = {}
@@ -1053,6 +1090,14 @@ class AllSiteSettings(FrontendSiteSettings):
             res["DEFAULT_COURSE_TA_ROLE"] = to_dict(
                 self.default_course_ta_role.value
             )
+        if self.lti_1p3_nonce_and_state_validation_enabled.is_just:
+            res["LTI_1P3_NONCE_AND_STATE_VALIDATION_ENABLED"] = to_dict(
+                self.lti_1p3_nonce_and_state_validation_enabled.value
+            )
+        if self.lti_1p3_prevent_nonce_reuse_enabled.is_just:
+            res["LTI_1P3_PREVENT_NONCE_REUSE_ENABLED"] = to_dict(
+                self.lti_1p3_prevent_nonce_reuse_enabled.value
+            )
         return res
 
     @classmethod
@@ -1185,6 +1230,8 @@ class AllSiteSettings(FrontendSiteSettings):
             pearson_templates=parsed.PEARSON_TEMPLATES,
             default_course_teacher_role=parsed.DEFAULT_COURSE_TEACHER_ROLE,
             default_course_ta_role=parsed.DEFAULT_COURSE_TA_ROLE,
+            lti_1p3_nonce_and_state_validation_enabled=parsed.LTI_1P3_NONCE_AND_STATE_VALIDATION_ENABLED,
+            lti_1p3_prevent_nonce_reuse_enabled=parsed.LTI_1P3_PREVENT_NONCE_REUSE_ENABLED,
         )
         res.raw_data = d
         return res

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/models/course_perm_map.py

@@ -283,6 +283,9 @@ class CoursePermMap:
     #: Users with this permission are allowed to see the details of Pearson
     #: templates in a course (context).
     can_view_pearson_context_templates: "bool"
+    #: Users with this permission are allowed to edit the details ofr Pearson
+    #: templates in a course (context).
+    can_edit_pearson_context_templates: "bool"
 
     raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
 
@@ -1017,6 +1020,14 @@ class CoursePermMap:
                     " of Pearson templates in a course (context)."
                 ),
             ),
+            rqa.RequiredArgument(
+                "can_edit_pearson_context_templates",
+                rqa.SimpleValue.bool,
+                doc=(
+                    "Users with this permission are allowed to edit the"
+                    " details ofr Pearson templates in a course (context)."
+                ),
+            ),
         ).use_readable_describe(True)
     )
 
@@ -1188,6 +1199,9 @@ class CoursePermMap:
             "can_view_pearson_context_templates": to_dict(
                 self.can_view_pearson_context_templates
             ),
+            "can_edit_pearson_context_templates": to_dict(
+                self.can_edit_pearson_context_templates
+            ),
         }
         return res
 
@@ -1284,6 +1298,7 @@ class CoursePermMap:
             can_view_all_assignment_timeframes=parsed.can_view_all_assignment_timeframes,
             can_create_test_submissions=parsed.can_create_test_submissions,
             can_view_pearson_context_templates=parsed.can_view_pearson_context_templates,
+            can_edit_pearson_context_templates=parsed.can_edit_pearson_context_templates,
         )
         res.raw_data = d
         return res

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/models/course_permission.py

@@ -106,3 +106,4 @@ class CoursePermission(str, Enum):
     can_view_all_assignment_timeframes = "can_view_all_assignment_timeframes"
     can_create_test_submissions = "can_create_test_submissions"
     can_view_pearson_context_templates = "can_view_pearson_context_templates"
+    can_edit_pearson_context_templates = "can_edit_pearson_context_templates"

codegrade-16.1.52/codegrade/models/lti1p3_nonce_and_state_validation_enabled_setting.py

@@ -0,0 +1,57 @@
+"""The module that defines the ``Lti1p3NonceAndStateValidationEnabledSetting`` model.
+
+SPDX-License-Identifier: AGPL-3.0-only OR BSD-3-Clause-Clear
+"""
+
+import typing as t
+from dataclasses import dataclass, field
+
+import cg_request_args as rqa
+
+from ..utils import to_dict
+
+
+@dataclass
+class Lti1p3NonceAndStateValidationEnabledSetting:
+    """ """
+
+    name: "t.Literal['LTI_1P3_NONCE_AND_STATE_VALIDATION_ENABLED']"
+    value: "t.Optional[bool]"
+
+    raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
+
+    data_parser: t.ClassVar = rqa.Lazy(
+        lambda: rqa.FixedMapping(
+            rqa.RequiredArgument(
+                "name",
+                rqa.StringEnum("LTI_1P3_NONCE_AND_STATE_VALIDATION_ENABLED"),
+                doc="",
+            ),
+            rqa.RequiredArgument(
+                "value",
+                rqa.Nullable(rqa.SimpleValue.bool),
+                doc="",
+            ),
+        ).use_readable_describe(True)
+    )
+
+    def to_dict(self) -> t.Dict[str, t.Any]:
+        res: t.Dict[str, t.Any] = {
+            "name": to_dict(self.name),
+            "value": to_dict(self.value),
+        }
+        return res
+
+    @classmethod
+    def from_dict(
+        cls: t.Type["Lti1p3NonceAndStateValidationEnabledSetting"],
+        d: t.Dict[str, t.Any],
+    ) -> "Lti1p3NonceAndStateValidationEnabledSetting":
+        parsed = cls.data_parser.try_parse(d)
+
+        res = cls(
+            name=parsed.name,
+            value=parsed.value,
+        )
+        res.raw_data = d
+        return res

codegrade-16.1.52/codegrade/models/lti1p3_prevent_nonce_reuse_enabled_setting.py

@@ -0,0 +1,57 @@
+"""The module that defines the ``Lti1p3PreventNonceReuseEnabledSetting`` model.
+
+SPDX-License-Identifier: AGPL-3.0-only OR BSD-3-Clause-Clear
+"""
+
+import typing as t
+from dataclasses import dataclass, field
+
+import cg_request_args as rqa
+
+from ..utils import to_dict
+
+
+@dataclass
+class Lti1p3PreventNonceReuseEnabledSetting:
+    """ """
+
+    name: "t.Literal['LTI_1P3_PREVENT_NONCE_REUSE_ENABLED']"
+    value: "t.Optional[bool]"
+
+    raw_data: t.Optional[t.Dict[str, t.Any]] = field(init=False, repr=False)
+
+    data_parser: t.ClassVar = rqa.Lazy(
+        lambda: rqa.FixedMapping(
+            rqa.RequiredArgument(
+                "name",
+                rqa.StringEnum("LTI_1P3_PREVENT_NONCE_REUSE_ENABLED"),
+                doc="",
+            ),
+            rqa.RequiredArgument(
+                "value",
+                rqa.Nullable(rqa.SimpleValue.bool),
+                doc="",
+            ),
+        ).use_readable_describe(True)
+    )
+
+    def to_dict(self) -> t.Dict[str, t.Any]:
+        res: t.Dict[str, t.Any] = {
+            "name": to_dict(self.name),
+            "value": to_dict(self.value),
+        }
+        return res
+
+    @classmethod
+    def from_dict(
+        cls: t.Type["Lti1p3PreventNonceReuseEnabledSetting"],
+        d: t.Dict[str, t.Any],
+    ) -> "Lti1p3PreventNonceReuseEnabledSetting":
+        parsed = cls.data_parser.try_parse(d)
+
+        res = cls(
+            name=parsed.name,
+            value=parsed.value,
+        )
+        res.raw_data = d
+        return res

{codegrade-16.1.49 → codegrade-16.1.52}/codegrade/models/site_setting_input.py

@@ -144,9 +144,15 @@ from .is_admin_permission_enabled_setting import (
 from .jwt_access_token_expires_setting import JwtAccessTokenExpiresSetting
 from .linters_enabled_setting import LintersEnabledSetting
 from .login_token_before_time_setting import LoginTokenBeforeTimeSetting
+from .lti1p3_nonce_and_state_validation_enabled_setting import (
+    Lti1p3NonceAndStateValidationEnabledSetting,
+)
 from .lti1p3_parse_most_privileged_role_setting import (
     Lti1p3ParseMostPrivilegedRoleSetting,
 )
+from .lti1p3_prevent_nonce_reuse_enabled_setting import (
+    Lti1p3PreventNonceReuseEnabledSetting,
+)
 from .lti1p3_system_role_from_context_role_setting import (
     Lti1p3SystemRoleFromContextRoleSetting,
 )
@@ -402,6 +408,8 @@ SiteSettingInput = t.Union[
     HideEmptyRubricRowDescriptionSetting,
     DefaultCourseTeacherRoleSetting,
     DefaultCourseTaRoleSetting,
+    Lti1p3NonceAndStateValidationEnabledSetting,
+    Lti1p3PreventNonceReuseEnabledSetting,
 ]
 SiteSettingInputParser = rqa.Lazy(
     lambda: make_union(
@@ -528,5 +536,7 @@ SiteSettingInputParser = rqa.Lazy(
         ParserFor.make(HideEmptyRubricRowDescriptionSetting),
         ParserFor.make(DefaultCourseTeacherRoleSetting),
         ParserFor.make(DefaultCourseTaRoleSetting),
+        ParserFor.make(Lti1p3NonceAndStateValidationEnabledSetting),
+        ParserFor.make(Lti1p3PreventNonceReuseEnabledSetting),
     ),
 )

{codegrade-16.1.49 → codegrade-16.1.52}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "codegrade"
-version = "16.1.49"
+version = "16.1.52"
 description = "A client library for accessing CodeGrade"
 license = "AGPL-3.0-only OR BSD-3-Clause-Clear"
 authors = []

{codegrade-16.1.49 → codegrade-16.1.52}/setup.py

@@ -21,7 +21,7 @@ install_requires = \
 
 setup_kwargs = {
     'name': 'codegrade',
-    'version': '16.1.49',
+    'version': '16.1.52',
     'description': 'A client library for accessing CodeGrade',
     'long_description': '# CodeGrade API\n\nThis library makes it easier to use the CodeGrade API. Its API allows you to\nautomate your usage of CodeGrade. We are currently still busy documenting the\nentire API, but everything that is possible in the UI of CodeGrade is also\npossible through the API.\n## Installation\nYou can install the library through [pypi](https://pypi.org/), simply run\n`python3 -m pip install codegrade`. If you want to get a dev version with support\nfor the latest features, simply email [support@codegrade.com](mailto:support@codegrade.com)\nand we\'ll provide you with a dev version.\n## Usage\nFirst, create a client:\n\n```python\nimport codegrade\n\n# Don\'t store your password in your code!\nwith codegrade.login(\n    username=\'my-username\',\n    password=os.getenv(\'CG_PASSWORD\'),\n    tenant=\'My University\',\n) as client:\n    pass\n\n# Or supply information interactively.\nwith codegrade.login_from_cli() as client:\n    pass\n```\n\nNow call your endpoint and use your models:\n\n```python\nfrom codegrade.models import PatchCourseData\n\ncourses = client.course.get_all()\nfor course in courses:\n    client.course.patch(\n        PatchCourseData(name=course.name + \' (NEW)\'),\n        course_id=course.id,\n    )\n\n# Or, simply use dictionaries.\nfor course in courses:\n    client.course.patch(\n        {"name": course.name + \' (NEW)\'},\n        course_id=course.id,\n    )\n```\n\nFor the complete documentation go to\nhttps://python.api.codegrade.com.\n## Backwards compatibility\nCodeGrade is constantly upgrading its API, but we try to minimize backwards\nincompatible changes. We\'ll announce every backwards incompatible change in the\n[changelog](http://codegrade.com/changelog). A new version of the API\nclient is released with every release of CodeGrade, which is approximately every\nmonth. To upgrade simply run `pip install --upgrade codegrade`.\n## Supported python versions\nWe support python 3.6 and above, `pypy` is currently not tested but should work\njust fine.\n## License\nThe library is licensed under AGPL-3.0-only or BSD-3-Clause-Clear.',
     'author': 'None',