coiled 1.121.1.dev19__py3-none-any.whl → 1.121.1.dev20__py3-none-any.whl

coiled/software_utils.py

@@ -595,6 +595,126 @@ def get_mamba_auth(netloc: str) -> tuple[str, str] | None:
     return get_mamba_auth_dict().get(netloc, None)
 
 
+def _parse_rattler_auth_data(auth_data: dict) -> tuple[str, str] | None:
+    """Parse rattler authentication data into username/password tuple.
+
+    Handles rattler Authentication variants:
+    - {"BearerToken": "token"}
+    - {"CondaToken": "token"}
+    - {"BasicHTTP": {"username": "user", "password": "pass"}}
+
+    Returns:
+        Tuple of (username, password) or None if unknown auth type
+    """
+    if "BearerToken" in auth_data:
+        return (AUTH_BEARER_USERNAME, auth_data["BearerToken"])
+    elif "CondaToken" in auth_data:
+        return (CONDA_TOKEN_USERNAME, auth_data["CondaToken"])
+    elif "BasicHTTP" in auth_data:
+        basic_auth = auth_data["BasicHTTP"]
+        return (
+            basic_auth.get("username", ""),
+            basic_auth.get("password", ""),
+        )
+    else:
+        return None
+
+
+@functools.lru_cache
+def get_rattler_auth_dict(home_dir: Path | None = None) -> dict[str, tuple[str, str]]:
+    # RATTLER_AUTH_FILE is an env var that can override the default location
+    env_auth_file = os.environ.get("RATTLER_AUTH_FILE")
+    if env_auth_file:
+        auth_file = Path(env_auth_file)
+    else:
+        if home_dir is None:
+            home_dir = Path.home()
+        auth_file = home_dir / ".rattler" / "credentials.json"
+    domain_auth = {}
+    if auth_file.exists():
+        with auth_file.open("r") as f:
+            auth_data = json.load(f)
+            for domain, auth in auth_data.items():
+                parsed_auth = _parse_rattler_auth_data(auth)
+                if parsed_auth:
+                    domain_auth[domain] = parsed_auth
+                else:
+                    logger.debug(f"Encountered unknown rattler auth type {list(auth.keys())} for domain {domain}")
+    return domain_auth
+
+
+def get_rattler_keyring_auth(netloc: str) -> tuple[str, str] | None:
+    """Returns the Requests tuple auth for a given domain from rattler keyring storage."""
+    if not HAVE_KEYRING:
+        logger.debug("keyring not available, skipping rattler keyring auth")
+        return None
+
+    def try_keyring_auth(host: str) -> tuple[str, str] | None:
+        """Try to get auth from keyring for a specific host using rattler's storage format."""
+        try:
+            # Use the existing get_keyring_auth function with "rattler" as the URL
+            # and the host as the username to get rattler-stored credentials
+            auth_parts = get_keyring_auth("rattler", host)
+            if auth_parts:
+                username, password = auth_parts
+                if password:
+                    try:
+                        auth_data = json.loads(password)
+                        parsed_auth = _parse_rattler_auth_data(auth_data)
+                        if parsed_auth:
+                            return parsed_auth
+                    except json.JSONDecodeError:
+                        # If it's not JSON, treat it as a simple username/password
+                        return (username or host, password)
+
+        except Exception as e:
+            logger.debug(f"Error getting rattler keyring auth for {host}: {e}")
+            return None
+
+        return None
+
+    # Try exact match first
+    auth_parts = try_keyring_auth(netloc)
+    if auth_parts:
+        logger.debug(f"Found rattler keyring auth for {netloc}")
+        return auth_parts
+
+    # Try parent domain matches if exact match failed
+    # If looking for foo.example.com, try example.com (but not com)
+    parts = netloc.split(".")
+    for i in range(1, len(parts) - 1):  # Stop before single TLD
+        parent_domain = ".".join(parts[i:])
+
+        auth_parts = try_keyring_auth(parent_domain)
+        if auth_parts:
+            logger.debug(f"Found rattler keyring auth for {parent_domain} (matching {netloc})")
+            return auth_parts
+
+    logger.debug(f"No rattler keyring auth found for {netloc}")
+    return None
+
+
+def get_rattler_auth(netloc: str) -> tuple[str, str] | None:
+    """Returns the Requests tuple auth for a given domain from rattler keyring or auth file."""
+    # Try keyring first (primary storage method for rattler/pixi)
+    auth_parts = get_rattler_keyring_auth(netloc)
+    if auth_parts:
+        return auth_parts
+
+    # Fall back to file-based storage
+    # rattler allows wildcards, so we have to check for exact matches first
+    auth_parts = get_rattler_auth_dict().get(netloc, None)
+    if auth_parts:
+        return auth_parts
+
+    # then check for wildcard matches in file storage
+    for domain, auth in get_rattler_auth_dict().items():
+        if domain.startswith("*.") and netloc.endswith(domain[1:]):
+            return auth
+
+    return None
+
+
 @functools.lru_cache
 def get_conda_config() -> dict:
     """Returns the current conda config as dictionary"""
@@ -746,6 +866,7 @@ def set_auth_for_url(url: Url | str) -> str:
         use_keyring = dask.config.get("coiled.package_sync.conda.cred_sources.keyring", True)
         use_conda_auth = dask.config.get("coiled.package_sync.conda.cred_sources.conda", True)
         use_mamba_auth = dask.config.get("coiled.package_sync.conda.cred_sources.mamba", True)
+        use_rattler_auth = dask.config.get("coiled.package_sync.conda.cred_sources.rattler", True)
 
         no_auth_url = parsed_url._replace(auth=None).url
         auth_parts = (
@@ -759,6 +880,8 @@ def set_auth_for_url(url: Url | str) -> str:
             or (get_conda_auth(no_auth_url) if use_conda_auth else None)
             # mamba could have URL stored by netloc/path or netloc
             or ((get_mamba_auth(f"{netloc}{path}") or get_mamba_auth(netloc)) if use_mamba_auth else None)
+            # rattler/pixi stores URL stored by netloc in keyring or a fallback file
+            or (get_rattler_auth(netloc) if use_rattler_auth else None)
         )
         if auth_parts is not None:
             username, password = auth_parts

{coiled-1.121.1.dev19.dist-info → coiled-1.121.1.dev20.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: coiled
-Version: 1.121.1.dev19
+Version: 1.121.1.dev20
 Summary: Python client for coiled.io dask clusters
 Project-URL: Homepage, https://coiled.io
 Maintainer-email: Coiled <info@coiled.io>

{coiled-1.121.1.dev19.dist-info → coiled-1.121.1.dev20.dist-info}/RECORD

@@ -19,7 +19,7 @@ coiled/prefect.py,sha256=j1EOg7Xuw82TNRonAGEoZ3ANlwN8GM5aDXRYSjC0lnA,1497
 coiled/pypi_conda_map.py,sha256=GlLqvSjqvFoEPsoIVZ7so4JH3j-Z9oHKwf77UoQ7d7s,9865
 coiled/scan.py,sha256=ghAo7TKAG7E013HJpYWbic-Kp_UUf8iu533GaBpYnS8,25760
 coiled/software.py,sha256=eh3kZ8QBuIt_SPvTy_x6TXEv87SGqOJkO4HW-LCSsas,8701
-coiled/software_utils.py,sha256=6fdhzNG09XZuagOBaqAaqYZRNdh8TGt3XA3ULbdfWQ8,35503
+coiled/software_utils.py,sha256=JqGO8nstm0Hi-UCIBhHa25reNeVO-XOnv5eLoIyRcBo,40367
 coiled/spans.py,sha256=Aq2MOX6JXaJ72XiEmymPcsefs-kID85MEw6t-kOdPWI,2078
 coiled/spark.py,sha256=kooZCZT4dLMG_AQEOlaf6gj86G3UdowDfbw-Eiq94MU,9059
 coiled/types.py,sha256=G2SAprLouhf5GpoO3KnSxRlBtUP7_cI4xc7xQK_6bfE,13873
@@ -94,8 +94,8 @@ coiled/v2/widgets/__init__.py,sha256=Bt3GHTTyri-kFUaqGRVydDM-sCg5NdNujDg2RyvgV8U
 coiled/v2/widgets/interface.py,sha256=YeMQ5qdRbbpM04x9qIg2LE1xwxyRxFbdDYnkrwHazPk,301
 coiled/v2/widgets/rich.py,sha256=3rU5-yso92NdeEh3uSvEE-GwPNyp6i0Nb5PE5czXCik,28974
 coiled/v2/widgets/util.py,sha256=Y8qpGqwNzqfCzgyRFRy7vcscBoXqop-Upi4HLPpXLgg,3120
-coiled-1.121.1.dev19.dist-info/METADATA,sha256=_ZXP96o4xvzB3c-FJU2QT08ItClCHyqhLjMyU9QbSn4,2182
-coiled-1.121.1.dev19.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-coiled-1.121.1.dev19.dist-info/entry_points.txt,sha256=C8dz1ST_bTlTO-kNvuHBJQma9PyJPotg0S4xpPt5aHY,47
-coiled-1.121.1.dev19.dist-info/licenses/LICENSE,sha256=ZPwVR73Biwm3sK6vR54djCrhaRiM4cAD2zvOQZV8Xis,3859
-coiled-1.121.1.dev19.dist-info/RECORD,,
+coiled-1.121.1.dev20.dist-info/METADATA,sha256=X_pHRay_8labUlOjLQdOPufh6tJuF-X_F2iAeh7KccY,2182
+coiled-1.121.1.dev20.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+coiled-1.121.1.dev20.dist-info/entry_points.txt,sha256=C8dz1ST_bTlTO-kNvuHBJQma9PyJPotg0S4xpPt5aHY,47
+coiled-1.121.1.dev20.dist-info/licenses/LICENSE,sha256=ZPwVR73Biwm3sK6vR54djCrhaRiM4cAD2zvOQZV8Xis,3859
+coiled-1.121.1.dev20.dist-info/RECORD,,