decern 0.1.1__py3-none-any.whl

decern/__init__.py

@@ -0,0 +1,7 @@
+# SPDX-License-Identifier: Apache-2.0
+"""Minimal, dependency-free Python client for the decern PDP (AuthZEN 1.0)."""
+
+from .client import Client, Decision, DecernError
+
+__all__ = ["Client", "Decision", "DecernError"]
+__version__ = "0.1.0"

decern/client.py

@@ -0,0 +1,84 @@
+# SPDX-License-Identifier: Apache-2.0
+"""AuthZEN 1.0 Access Evaluation client for the decern PDP."""
+
+from __future__ import annotations
+
+import json
+import urllib.error
+import urllib.request
+from dataclasses import dataclass, field
+from typing import Any, Dict, List, Optional, Union
+
+Entity = Dict[str, Any]  # {"type": ..., "id": ...}
+Action = Union[str, Dict[str, Any]]
+
+
+class DecernError(Exception):
+    """Transport failure or non-2xx response from the PDP."""
+
+
+@dataclass
+class Decision:
+    allowed: bool
+    reasons: List[str] = field(default_factory=list)
+    errors: List[str] = field(default_factory=list)
+    context: Optional[Dict[str, Any]] = None
+
+
+class Client:
+    """Client for a decern PDP speaking AuthZEN 1.0 Access Evaluation."""
+
+    def __init__(self, base_url: str = "http://127.0.0.1:8080", timeout: float = 5.0):
+        self.base_url = base_url.rstrip("/")
+        self.timeout = timeout
+
+    # --- HTTP ---------------------------------------------------------------
+
+    def _request(self, method: str, path: str, body: Optional[dict] = None) -> Any:
+        data = json.dumps(body).encode() if body is not None else None
+        headers = {"Content-Type": "application/json"} if data else {}
+        req = urllib.request.Request(
+            self.base_url + path, data=data, headers=headers, method=method
+        )
+        try:
+            with urllib.request.urlopen(req, timeout=self.timeout) as resp:
+                raw = resp.read().decode()
+        except urllib.error.HTTPError as e:
+            raise DecernError(f"{method} {path} -> {e.code} {e.reason}") from e
+        except urllib.error.URLError as e:
+            raise DecernError(f"{method} {path} failed: {e.reason}") from e
+        return raw
+
+    # --- API ----------------------------------------------------------------
+
+    def evaluate(
+        self,
+        subject: Entity,
+        action: Action,
+        resource: Entity,
+        context: Optional[Dict[str, Any]] = None,
+    ) -> Decision:
+        act = {"name": action} if isinstance(action, str) else action
+        body: Dict[str, Any] = {"subject": subject, "action": act, "resource": resource}
+        if context is not None:
+            body["context"] = context
+        raw = self._request("POST", "/access/v1/evaluation", body)
+        resp = json.loads(raw)
+        ctx = resp.get("context") or None
+        reasons = list(ctx.get("reasons", [])) if ctx else []
+        errors = list(ctx.get("errors", [])) if ctx else []
+        return Decision(
+            allowed=bool(resp.get("decision", False)),
+            reasons=reasons,
+            errors=errors,
+            context=ctx,
+        )
+
+    def pubkey(self) -> str:
+        return json.loads(self._request("GET", "/pubkey"))["kid"]
+
+    def healthy(self) -> bool:
+        try:
+            return self._request("GET", "/healthz").strip() == "ok"
+        except DecernError:
+            return False

decern-0.1.1.dist-info/METADATA

@@ -0,0 +1,58 @@
+Metadata-Version: 2.4
+Name: decern
+Version: 0.1.1
+Summary: Dependency-free Python client for the decern PDP (AuthZEN 1.0 Access Evaluation).
+License-Expression: Apache-2.0
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+
+# decern Python SDK
+
+Dependency-free Python client for the decern PDP, speaking
+[AuthZEN 1.0](https://openid.net/specs/authorization-api-1_0.html) Access Evaluation.
+Standard library only — no `requests`/`httpx`.
+
+## Install
+
+```sh
+pip install .
+# or
+uv pip install .
+```
+
+## Usage
+
+Start the PDP:
+
+```sh
+decern-serve
+```
+
+Then:
+
+```python
+from decern import Client
+
+c = Client("http://127.0.0.1:8080")
+
+d = c.evaluate(
+    subject={"type": "Principal", "id": "corp"},
+    action="Read",  # or {"name": "Read"}
+    resource={"type": "Resource", "id": "claim1"},
+    context={"now": 100},  # optional; PDP injects `now` if omitted
+)
+
+print(d.allowed)   # True / False
+print(d.reasons)   # e.g. ["policy0"] on allow
+print(d.errors)    # e.g. ["no_policy"] on deny
+
+c.pubkey()   # ed25519 public key id (hex)
+c.healthy()  # True if /healthz == "ok"
+```
+
+## Test
+
+```sh
+cd sdks/python
+python -m unittest discover -v
+```

decern-0.1.1.dist-info/RECORD

@@ -0,0 +1,5 @@
+decern/__init__.py,sha256=Gpcs5x6J6daMPwQokXnKdjwmCheE9W5_4A_Q110Ka0U,239
+decern/client.py,sha256=_K4VmOWRE_yOPDgZ8rf9K9hqXkofY_MVcL5xn60s4oY,2925
+decern-0.1.1.dist-info/METADATA,sha256=iVoqx9WBPKpH3666SB1pFPcsFPoPNCnQISb4rWTtiHY,1155
+decern-0.1.1.dist-info/WHEEL,sha256=lCkmxWfQsSc9CfIClYeavTdQeEX2toPqufh9gI35EQA,87
+decern-0.1.1.dist-info/RECORD,,

decern-0.1.1.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.31.0
+Root-Is-Purelib: true
+Tag: py3-none-any