deezer-python-gql 0.17.0__tar.gz → 0.17.1__tar.gz

{deezer_python_gql-0.17.0/deezer_python_gql.egg-info → deezer_python_gql-0.17.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deezer-python-gql
-Version: 0.17.0
+Version: 0.17.1
 Summary: Async typed Python client for Deezer's Pipe GraphQL API.
 Author-email: Julian Daberkow <jdaberkow@users.noreply.github.com>
 License: Apache-2.0
@@ -18,10 +18,10 @@ Requires-Dist: codespell==2.4.2; extra == "test"
 Requires-Dist: mypy==2.1.0; extra == "test"
 Requires-Dist: pre-commit==4.6.0; extra == "test"
 Requires-Dist: pre-commit-hooks==6.0.0; extra == "test"
-Requires-Dist: pytest==9.0.3; extra == "test"
-Requires-Dist: pytest-asyncio==1.3.0; extra == "test"
+Requires-Dist: pytest==9.1.1; extra == "test"
+Requires-Dist: pytest-asyncio==1.4.0; extra == "test"
 Requires-Dist: pytest-cov==7.1.0; extra == "test"
-Requires-Dist: ruff==0.15.13; extra == "test"
+Requires-Dist: ruff==0.15.20; extra == "test"
 Provides-Extra: dev
 Requires-Dist: ariadne-codegen[subscriptions]; extra == "dev"
 Dynamic: license-file
@@ -189,7 +189,7 @@ asyncio.run(main())
 
 | Method                           | Description                                                      |
 | -------------------------------- | ---------------------------------------------------------------- |
-| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (single GraphQL call) |
+| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (aliased queries, chunked at 50 IDs) |
 
 All methods return fully-typed Pydantic models generated from the GraphQL schema.
 
@@ -252,6 +252,10 @@ The Pipe API uses short-lived JWTs obtained from an ARL cookie. The base client
 handles token acquisition and refresh automatically — you only need to supply a
 valid ARL value.
 
+If the ARL is rejected (bad or expired), the client raises
+`GraphQLClientAuthError` — catch it to prompt for a new ARL instead of retrying.
+Transient server errors raise `GraphQLClientHttpError` instead.
+
 ## License
 
 Apache-2.0

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/README.md

@@ -161,7 +161,7 @@ asyncio.run(main())
 
 | Method                           | Description                                                      |
 | -------------------------------- | ---------------------------------------------------------------- |
-| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (single GraphQL call) |
+| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (aliased queries, chunked at 50 IDs) |
 
 All methods return fully-typed Pydantic models generated from the GraphQL schema.
 
@@ -224,6 +224,10 @@ The Pipe API uses short-lived JWTs obtained from an ARL cookie. The base client
 handles token acquisition and refresh automatically — you only need to supply a
 valid ARL value.
 
+If the ARL is rejected (bad or expired), the client raises
+`GraphQLClientAuthError` — catch it to prompt for a new ARL instead of retrying.
+Transient server errors raise `GraphQLClientHttpError` instead.
+
 ## License
 
 Apache-2.0

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/deezer_python_gql/__init__.py

@@ -2,6 +2,7 @@
 
 from deezer_python_gql.generated.base_client import (
     GQLResponse,
+    GraphQLClientAuthError,
     GraphQLClientError,
     GraphQLClientGraphQLError,
     GraphQLClientGraphQLMultiError,
@@ -13,6 +14,7 @@ from deezer_python_gql.generated.client import DeezerGQLClient
 __all__ = [
     "DeezerGQLClient",
     "GQLResponse",
+    "GraphQLClientAuthError",
     "GraphQLClientError",
     "GraphQLClientGraphQLError",
     "GraphQLClientGraphQLMultiError",

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/deezer_python_gql/base_client.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import asyncio
 import json
 import logging
 import time
@@ -21,17 +22,31 @@ class GQLResponse:
 
     aiohttp responses cannot escape their context manager, so we capture
     the essential fields inside the ``async with`` block and return this.
+    Carries the originating operation name and variables so error handling
+    and logging stay correct under concurrent requests.
     """
 
     status: int
     data: bytes
     is_success: bool
+    operation_name: str | None = None
+    variables: dict[str, Any] | None = None
 
 
 class GraphQLClientError(Exception):
     """Base exception for GraphQL client errors."""
 
 
+class GraphQLClientAuthError(GraphQLClientError):
+    """
+    Raised when ARL → JWT authentication definitively fails.
+
+    Indicates a bad or expired ARL cookie (or an unexpected auth response),
+    not a transient network/server problem — consumers should treat this as
+    "re-check your ARL token" rather than retry.
+    """
+
+
 class GraphQLClientHttpError(GraphQLClientError):
     """Raised when the HTTP response indicates an error."""
 
@@ -109,6 +124,8 @@ class DeezerBaseClient:
     PIPE_URL = "https://pipe.deezer.com/api"
     AUTH_URL = "https://auth.deezer.com/login/arl"
     JWT_REFRESH_MARGIN_SECONDS = 30
+    REQUEST_TIMEOUT_SECONDS = 30
+    AUDIOBOOK_CHECK_CHUNK_SIZE = 50
 
     def __init__(
         self,
@@ -122,8 +139,7 @@ class DeezerBaseClient:
         self._owns_session = session is None
         self._jwt: str | None = None
         self._jwt_expires_at: float = 0
-        self._last_operation_name: str | None = None
-        self._last_variables: dict[str, Any] | None = None
+        self._jwt_lock = asyncio.Lock()
 
     def _get_session(self) -> ClientSession:
         """Return the HTTP session, creating an internal one if needed."""
@@ -167,13 +183,12 @@ class DeezerBaseClient:
         :param kwargs: Additional keyword arguments passed to the session request.
         """
         logger.debug("GQL execute: %s (variables=%s)", operation_name or "<unnamed>", variables)
-        self._last_operation_name = operation_name
-        self._last_variables = variables
         jwt = await self._ensure_jwt()
 
         headers: dict[str, str] = kwargs.pop("headers", None) or {}
         headers["Authorization"] = f"Bearer {jwt}"
         headers["Content-Type"] = "application/json"
+        kwargs.setdefault("timeout", ClientTimeout(total=self.REQUEST_TIMEOUT_SECONDS))
 
         payload: dict[str, Any] = {"query": query}
         if operation_name:
@@ -194,6 +209,8 @@ class DeezerBaseClient:
                 status=resp.status,
                 data=body,
                 is_success=resp.ok,
+                operation_name=operation_name,
+                variables=variables,
             )
 
         logger.debug(
@@ -227,8 +244,8 @@ class DeezerBaseClient:
         errors = response_json.get("errors")
 
         if errors:
-            op = self._last_operation_name or "<unknown>"
-            variables = self._last_variables
+            op = response.operation_name or "<unknown>"
+            variables = response.variables
             if data:
                 # Partial success — some items failed (e.g. deleted albums in favorites).
                 # Log the errors but return the valid data.
@@ -280,65 +297,105 @@ class DeezerBaseClient:
             for item in obj:
                 cls._inject_missing_typenames(item)
 
+    def _jwt_is_valid(self) -> bool:
+        """Return True if the current JWT exists and is not about to expire."""
+        return self._jwt is not None and time.time() < (
+            self._jwt_expires_at - self.JWT_REFRESH_MARGIN_SECONDS
+        )
+
     async def _ensure_jwt(self) -> str:
         """Acquire or refresh the JWT token from ARL cookie."""
-        now = time.time()
-        if self._jwt and now < (self._jwt_expires_at - self.JWT_REFRESH_MARGIN_SECONDS):
+        if self._jwt is not None and self._jwt_is_valid():
             return self._jwt
 
-        logger.debug("JWT expired or missing, refreshing from ARL")
-        params = {"jo": "p", "rto": "c", "i": "c"}
+        # Serialize refreshes so concurrent expired-JWT requests trigger
+        # exactly one auth call.
+        async with self._jwt_lock:
+            if self._jwt is not None and self._jwt_is_valid():
+                return self._jwt
+
+            logger.debug("JWT expired or missing, refreshing from ARL")
+            params = {"jo": "p", "rto": "c", "i": "c"}
+
+            session = self._get_session()
+            async with session.post(
+                self.AUTH_URL,
+                params=params,
+                cookies={"arl": self._arl},
+                timeout=ClientTimeout(total=10),
+            ) as resp:
+                status = resp.status
+                is_success = resp.ok
+                # Response body is text/plain containing JSON
+                text = await resp.text()
+
+            if not is_success:
+                if 400 <= status < 500:
+                    msg = f"ARL authentication rejected by auth.deezer.com (HTTP {status})"
+                    raise GraphQLClientAuthError(msg)
+                raise GraphQLClientHttpError(
+                    status_code=status,
+                    response=GQLResponse(status=status, data=text.encode(), is_success=False),
+                )
 
-        session = self._get_session()
-        async with session.post(
-            self.AUTH_URL,
-            params=params,
-            cookies={"arl": self._arl},
-            timeout=ClientTimeout(total=10),
-        ) as resp:
-            resp.raise_for_status()
-            # Response body is text/plain containing JSON
-            text = await resp.text()
-
-        data = json.loads(text)
-        self._jwt = data["jwt"]
-
-        # Decode expiration from JWT payload (second segment, base64url-encoded)
-        payload_segment = self._jwt.split(".")[1]
-        # Add padding for base64 decoding
-        padded = payload_segment + "=" * (-len(payload_segment) % 4)
-        payload = json.loads(urlsafe_b64decode(padded))
-        self._jwt_expires_at = float(payload["exp"])
-        logger.debug("JWT acquired, expires at %s", self._jwt_expires_at)
-
-        return self._jwt
+            try:
+                data = json.loads(text)
+                jwt: str = data["jwt"]
+                # Decode expiration from JWT payload (second segment, base64url-encoded)
+                payload_segment = jwt.split(".")[1]
+                # Add padding for base64 decoding
+                padded = payload_segment + "=" * (-len(payload_segment) % 4)
+                payload = json.loads(urlsafe_b64decode(padded))
+                expires_at = float(payload["exp"])
+            except (ValueError, KeyError, IndexError, TypeError, AttributeError) as exc:
+                msg = "Unexpected response from auth.deezer.com (invalid or missing JWT)"
+                raise GraphQLClientAuthError(msg) from exc
+
+            self._jwt = jwt
+            self._jwt_expires_at = expires_at
+            logger.debug("JWT acquired, expires at %s", self._jwt_expires_at)
+
+            return jwt
 
     async def check_audiobook_ids(self, album_ids: list[str]) -> set[str]:
         """
         Check which album IDs are also valid audiobooks on Deezer.
 
+        Queries are chunked to stay below the API's query complexity limit.
+
         :param album_ids: List of Deezer album/audiobook IDs to check.
         """
-        if not album_ids:
-            return set()
+        audiobook_ids: set[str] = set()
+        for start in range(0, len(album_ids), self.AUDIOBOOK_CHECK_CHUNK_SIZE):
+            chunk = album_ids[start : start + self.AUDIOBOOK_CHECK_CHUNK_SIZE]
+            audiobook_ids |= await self._check_audiobook_ids_chunk(chunk)
+        return audiobook_ids
 
+    async def _check_audiobook_ids_chunk(self, album_ids: list[str]) -> set[str]:
+        """Check a single chunk of album IDs via one aliased query."""
         # Query displayTitle alongside id — querying only { id } echoes back the
         # input without validating that the ID is actually an audiobook.
+        # json.dumps escapes the IDs so they cannot break out of the string
+        # literal (this is a public library API — IDs may come from anywhere).
         parts = [
-            f'a{i}: audiobook(audiobookId: "{aid}") {{ id displayTitle }}'
+            f"a{i}: audiobook(audiobookId: {json.dumps(aid)}) {{ id displayTitle }}"
             for i, aid in enumerate(album_ids)
         ]
         query = "query CheckAudiobookIds { " + " ".join(parts) + " }"
 
         resp = await self.execute(query, operation_name="CheckAudiobookIds")
-        self._last_variables = {"album_ids": album_ids}
         try:
             data = self.get_data(resp)
-        except GraphQLClientGraphQLMultiError:
-            # Expected when none of the IDs are audiobooks (every alias errors).
-            # Also handles transient API errors — return empty rather than crash.
-            logger.debug("CheckAudiobookIds: all %d IDs returned errors", len(album_ids))
-            return set()
+        except GraphQLClientGraphQLMultiError as err:
+            # Only swallow errors scoped to our aliased audiobook fields —
+            # that is the legitimate "these IDs are not audiobooks" case.
+            # Anything else (complexity limit, transient API failure) must
+            # surface, otherwise audiobooks silently degrade to albums.
+            aliases = {f"a{i}" for i in range(len(album_ids))}
+            if all(e.path and e.path[0] in aliases for e in err.errors):
+                logger.debug("CheckAudiobookIds: all %d IDs returned errors", len(album_ids))
+                return set()
+            raise
 
         audiobook_ids: set[str] = set()
         for i, aid in enumerate(album_ids):

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/deezer_python_gql/generated/base_client.py

@@ -4,6 +4,7 @@
 
 from __future__ import annotations
 
+import asyncio
 import json
 import logging
 import time
@@ -23,17 +24,31 @@ class GQLResponse:
 
     aiohttp responses cannot escape their context manager, so we capture
     the essential fields inside the ``async with`` block and return this.
+    Carries the originating operation name and variables so error handling
+    and logging stay correct under concurrent requests.
     """
 
     status: int
     data: bytes
     is_success: bool
+    operation_name: str | None = None
+    variables: dict[str, Any] | None = None
 
 
 class GraphQLClientError(Exception):
     """Base exception for GraphQL client errors."""
 
 
+class GraphQLClientAuthError(GraphQLClientError):
+    """
+    Raised when ARL → JWT authentication definitively fails.
+
+    Indicates a bad or expired ARL cookie (or an unexpected auth response),
+    not a transient network/server problem — consumers should treat this as
+    "re-check your ARL token" rather than retry.
+    """
+
+
 class GraphQLClientHttpError(GraphQLClientError):
     """Raised when the HTTP response indicates an error."""
 
@@ -111,6 +126,8 @@ class DeezerBaseClient:
     PIPE_URL = "https://pipe.deezer.com/api"
     AUTH_URL = "https://auth.deezer.com/login/arl"
     JWT_REFRESH_MARGIN_SECONDS = 30
+    REQUEST_TIMEOUT_SECONDS = 30
+    AUDIOBOOK_CHECK_CHUNK_SIZE = 50
 
     def __init__(
         self,
@@ -124,8 +141,7 @@ class DeezerBaseClient:
         self._owns_session = session is None
         self._jwt: str | None = None
         self._jwt_expires_at: float = 0
-        self._last_operation_name: str | None = None
-        self._last_variables: dict[str, Any] | None = None
+        self._jwt_lock = asyncio.Lock()
 
     def _get_session(self) -> ClientSession:
         """Return the HTTP session, creating an internal one if needed."""
@@ -169,13 +185,12 @@ class DeezerBaseClient:
         :param kwargs: Additional keyword arguments passed to the session request.
         """
         logger.debug("GQL execute: %s (variables=%s)", operation_name or "<unnamed>", variables)
-        self._last_operation_name = operation_name
-        self._last_variables = variables
         jwt = await self._ensure_jwt()
 
         headers: dict[str, str] = kwargs.pop("headers", None) or {}
         headers["Authorization"] = f"Bearer {jwt}"
         headers["Content-Type"] = "application/json"
+        kwargs.setdefault("timeout", ClientTimeout(total=self.REQUEST_TIMEOUT_SECONDS))
 
         payload: dict[str, Any] = {"query": query}
         if operation_name:
@@ -196,6 +211,8 @@ class DeezerBaseClient:
                 status=resp.status,
                 data=body,
                 is_success=resp.ok,
+                operation_name=operation_name,
+                variables=variables,
             )
 
         logger.debug(
@@ -229,8 +246,8 @@ class DeezerBaseClient:
         errors = response_json.get("errors")
 
         if errors:
-            op = self._last_operation_name or "<unknown>"
-            variables = self._last_variables
+            op = response.operation_name or "<unknown>"
+            variables = response.variables
             if data:
                 # Partial success — some items failed (e.g. deleted albums in favorites).
                 # Log the errors but return the valid data.
@@ -282,65 +299,105 @@ class DeezerBaseClient:
             for item in obj:
                 cls._inject_missing_typenames(item)
 
+    def _jwt_is_valid(self) -> bool:
+        """Return True if the current JWT exists and is not about to expire."""
+        return self._jwt is not None and time.time() < (
+            self._jwt_expires_at - self.JWT_REFRESH_MARGIN_SECONDS
+        )
+
     async def _ensure_jwt(self) -> str:
         """Acquire or refresh the JWT token from ARL cookie."""
-        now = time.time()
-        if self._jwt and now < (self._jwt_expires_at - self.JWT_REFRESH_MARGIN_SECONDS):
+        if self._jwt is not None and self._jwt_is_valid():
             return self._jwt
 
-        logger.debug("JWT expired or missing, refreshing from ARL")
-        params = {"jo": "p", "rto": "c", "i": "c"}
+        # Serialize refreshes so concurrent expired-JWT requests trigger
+        # exactly one auth call.
+        async with self._jwt_lock:
+            if self._jwt is not None and self._jwt_is_valid():
+                return self._jwt
+
+            logger.debug("JWT expired or missing, refreshing from ARL")
+            params = {"jo": "p", "rto": "c", "i": "c"}
+
+            session = self._get_session()
+            async with session.post(
+                self.AUTH_URL,
+                params=params,
+                cookies={"arl": self._arl},
+                timeout=ClientTimeout(total=10),
+            ) as resp:
+                status = resp.status
+                is_success = resp.ok
+                # Response body is text/plain containing JSON
+                text = await resp.text()
+
+            if not is_success:
+                if 400 <= status < 500:
+                    msg = f"ARL authentication rejected by auth.deezer.com (HTTP {status})"
+                    raise GraphQLClientAuthError(msg)
+                raise GraphQLClientHttpError(
+                    status_code=status,
+                    response=GQLResponse(status=status, data=text.encode(), is_success=False),
+                )
 
-        session = self._get_session()
-        async with session.post(
-            self.AUTH_URL,
-            params=params,
-            cookies={"arl": self._arl},
-            timeout=ClientTimeout(total=10),
-        ) as resp:
-            resp.raise_for_status()
-            # Response body is text/plain containing JSON
-            text = await resp.text()
-
-        data = json.loads(text)
-        self._jwt = data["jwt"]
-
-        # Decode expiration from JWT payload (second segment, base64url-encoded)
-        payload_segment = self._jwt.split(".")[1]
-        # Add padding for base64 decoding
-        padded = payload_segment + "=" * (-len(payload_segment) % 4)
-        payload = json.loads(urlsafe_b64decode(padded))
-        self._jwt_expires_at = float(payload["exp"])
-        logger.debug("JWT acquired, expires at %s", self._jwt_expires_at)
-
-        return self._jwt
+            try:
+                data = json.loads(text)
+                jwt: str = data["jwt"]
+                # Decode expiration from JWT payload (second segment, base64url-encoded)
+                payload_segment = jwt.split(".")[1]
+                # Add padding for base64 decoding
+                padded = payload_segment + "=" * (-len(payload_segment) % 4)
+                payload = json.loads(urlsafe_b64decode(padded))
+                expires_at = float(payload["exp"])
+            except (ValueError, KeyError, IndexError, TypeError, AttributeError) as exc:
+                msg = "Unexpected response from auth.deezer.com (invalid or missing JWT)"
+                raise GraphQLClientAuthError(msg) from exc
+
+            self._jwt = jwt
+            self._jwt_expires_at = expires_at
+            logger.debug("JWT acquired, expires at %s", self._jwt_expires_at)
+
+            return jwt
 
     async def check_audiobook_ids(self, album_ids: list[str]) -> set[str]:
         """
         Check which album IDs are also valid audiobooks on Deezer.
 
+        Queries are chunked to stay below the API's query complexity limit.
+
         :param album_ids: List of Deezer album/audiobook IDs to check.
         """
-        if not album_ids:
-            return set()
+        audiobook_ids: set[str] = set()
+        for start in range(0, len(album_ids), self.AUDIOBOOK_CHECK_CHUNK_SIZE):
+            chunk = album_ids[start : start + self.AUDIOBOOK_CHECK_CHUNK_SIZE]
+            audiobook_ids |= await self._check_audiobook_ids_chunk(chunk)
+        return audiobook_ids
 
+    async def _check_audiobook_ids_chunk(self, album_ids: list[str]) -> set[str]:
+        """Check a single chunk of album IDs via one aliased query."""
         # Query displayTitle alongside id — querying only { id } echoes back the
         # input without validating that the ID is actually an audiobook.
+        # json.dumps escapes the IDs so they cannot break out of the string
+        # literal (this is a public library API — IDs may come from anywhere).
         parts = [
-            f'a{i}: audiobook(audiobookId: "{aid}") {{ id displayTitle }}'
+            f"a{i}: audiobook(audiobookId: {json.dumps(aid)}) {{ id displayTitle }}"
             for i, aid in enumerate(album_ids)
         ]
         query = "query CheckAudiobookIds { " + " ".join(parts) + " }"
 
         resp = await self.execute(query, operation_name="CheckAudiobookIds")
-        self._last_variables = {"album_ids": album_ids}
         try:
             data = self.get_data(resp)
-        except GraphQLClientGraphQLMultiError:
-            # Expected when none of the IDs are audiobooks (every alias errors).
-            # Also handles transient API errors — return empty rather than crash.
-            logger.debug("CheckAudiobookIds: all %d IDs returned errors", len(album_ids))
-            return set()
+        except GraphQLClientGraphQLMultiError as err:
+            # Only swallow errors scoped to our aliased audiobook fields —
+            # that is the legitimate "these IDs are not audiobooks" case.
+            # Anything else (complexity limit, transient API failure) must
+            # surface, otherwise audiobooks silently degrade to albums.
+            aliases = {f"a{i}" for i in range(len(album_ids))}
+            if all(e.path and e.path[0] in aliases for e in err.errors):
+                logger.debug("CheckAudiobookIds: all %d IDs returned errors", len(album_ids))
+                return set()
+            raise
 
         audiobook_ids: set[str] = set()
         for i, aid in enumerate(album_ids):

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1/deezer_python_gql.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deezer-python-gql
-Version: 0.17.0
+Version: 0.17.1
 Summary: Async typed Python client for Deezer's Pipe GraphQL API.
 Author-email: Julian Daberkow <jdaberkow@users.noreply.github.com>
 License: Apache-2.0
@@ -18,10 +18,10 @@ Requires-Dist: codespell==2.4.2; extra == "test"
 Requires-Dist: mypy==2.1.0; extra == "test"
 Requires-Dist: pre-commit==4.6.0; extra == "test"
 Requires-Dist: pre-commit-hooks==6.0.0; extra == "test"
-Requires-Dist: pytest==9.0.3; extra == "test"
-Requires-Dist: pytest-asyncio==1.3.0; extra == "test"
+Requires-Dist: pytest==9.1.1; extra == "test"
+Requires-Dist: pytest-asyncio==1.4.0; extra == "test"
 Requires-Dist: pytest-cov==7.1.0; extra == "test"
-Requires-Dist: ruff==0.15.13; extra == "test"
+Requires-Dist: ruff==0.15.20; extra == "test"
 Provides-Extra: dev
 Requires-Dist: ariadne-codegen[subscriptions]; extra == "dev"
 Dynamic: license-file
@@ -189,7 +189,7 @@ asyncio.run(main())
 
 | Method                           | Description                                                      |
 | -------------------------------- | ---------------------------------------------------------------- |
-| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (single GraphQL call) |
+| `check_audiobook_ids(album_ids)` | Batch-check which album IDs are audiobooks (aliased queries, chunked at 50 IDs) |
 
 All methods return fully-typed Pydantic models generated from the GraphQL schema.
 
@@ -252,6 +252,10 @@ The Pipe API uses short-lived JWTs obtained from an ARL cookie. The base client
 handles token acquisition and refresh automatically — you only need to supply a
 valid ARL value.
 
+If the ARL is rejected (bad or expired), the client raises
+`GraphQLClientAuthError` — catch it to prompt for a new ARL instead of retrying.
+Transient server errors raise `GraphQLClientHttpError` instead.
+
 ## License
 
 Apache-2.0

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/deezer_python_gql.egg-info/requires.txt

@@ -9,7 +9,7 @@ codespell==2.4.2
 mypy==2.1.0
 pre-commit==4.6.0
 pre-commit-hooks==6.0.0
-pytest==9.0.3
-pytest-asyncio==1.3.0
+pytest==9.1.1
+pytest-asyncio==1.4.0
 pytest-cov==7.1.0
-ruff==0.15.13
+ruff==0.15.20

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "deezer-python-gql"
-version = "0.17.0"
+version = "0.17.1"
 description = "Async typed Python client for Deezer's Pipe GraphQL API."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -26,10 +26,10 @@ test = [
     "mypy==2.1.0",
     "pre-commit==4.6.0",
     "pre-commit-hooks==6.0.0",
-    "pytest==9.0.3",
-    "pytest-asyncio==1.3.0",
+    "pytest==9.1.1",
+    "pytest-asyncio==1.4.0",
     "pytest-cov==7.1.0",
-    "ruff==0.15.13",
+    "ruff==0.15.20",
 ]
 dev = [
     "ariadne-codegen[subscriptions]",

{deezer_python_gql-0.17.0 → deezer_python_gql-0.17.1}/tests/test_client.py

@@ -9,6 +9,7 @@ Organized into three layers:
 
 from __future__ import annotations
 
+import asyncio
 import base64
 import json
 import time
@@ -22,6 +23,7 @@ from deezer_python_gql import DeezerGQLClient
 from deezer_python_gql.base_client import (
     DeezerBaseClient,
     GQLResponse,
+    GraphQLClientAuthError,
     GraphQLClientGraphQLMultiError,
     GraphQLClientHttpError,
     GraphQLClientInvalidResponseError,
@@ -431,6 +433,114 @@ async def test_auth_parses_text_plain_response() -> None:
     assert client._jwt_expires_at > 0  # noqa: SLF001
 
 
+@pytest.mark.asyncio
+async def test_auth_rejected_arl_raises_auth_error() -> None:
+    """Verify a 4xx from auth.deezer.com raises GraphQLClientAuthError."""
+    client = DeezerBaseClient(arl="bad_arl")
+    auth_cm = _mock_post_context_manager(b"Forbidden", status=403)
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=auth_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        with pytest.raises(GraphQLClientAuthError, match="HTTP 403"):
+            await client._ensure_jwt()  # noqa: SLF001
+
+
+@pytest.mark.asyncio
+async def test_auth_server_error_raises_http_error() -> None:
+    """Verify a 5xx from auth.deezer.com raises GraphQLClientHttpError, not AuthError."""
+    client = DeezerBaseClient(arl="test_arl")
+    auth_cm = _mock_post_context_manager(b"Service Unavailable", status=503)
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=auth_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        with pytest.raises(GraphQLClientHttpError) as exc_info:
+            await client._ensure_jwt()  # noqa: SLF001
+    assert exc_info.value.status_code == 503
+
+
+@pytest.mark.asyncio
+async def test_auth_invalid_json_raises_auth_error() -> None:
+    """Verify a non-JSON auth response raises GraphQLClientAuthError."""
+    client = DeezerBaseClient(arl="test_arl")
+    auth_cm = _mock_post_context_manager(b"<html>maintenance</html>")
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=auth_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        with pytest.raises(GraphQLClientAuthError):
+            await client._ensure_jwt()  # noqa: SLF001
+
+
+@pytest.mark.asyncio
+async def test_auth_missing_jwt_key_raises_auth_error() -> None:
+    """Verify an auth response without a 'jwt' key raises GraphQLClientAuthError."""
+    client = DeezerBaseClient(arl="test_arl")
+    auth_cm = _mock_post_context_manager(json.dumps({"error": "invalid arl"}).encode())
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=auth_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        with pytest.raises(GraphQLClientAuthError):
+            await client._ensure_jwt()  # noqa: SLF001
+
+
+@pytest.mark.asyncio
+async def test_auth_concurrent_refresh_single_auth_call() -> None:
+    """Verify concurrent expired-JWT requests trigger exactly one auth call."""
+    client = DeezerBaseClient(arl="test_arl")
+    auth_cm = _mock_auth_cm()
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=auth_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        results = await asyncio.gather(
+            client._ensure_jwt(),  # noqa: SLF001
+            client._ensure_jwt(),  # noqa: SLF001
+            client._ensure_jwt(),  # noqa: SLF001
+        )
+
+    assert mock_instance.post.call_count == 1
+    assert len(set(results)) == 1
+
+
+@pytest.mark.asyncio
+async def test_execute_sets_default_timeout() -> None:
+    """Verify execute() applies the 30s default request timeout."""
+    client = DeezerBaseClient(arl="test_arl")
+    client._jwt = _make_jwt(exp=time.time() + 600)  # noqa: SLF001
+    client._jwt_expires_at = time.time() + 600  # noqa: SLF001
+
+    gql_cm = _mock_post_context_manager(json.dumps({"data": {"me": {"id": "1"}}}).encode())
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=gql_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        await client.execute(query="{ me { id } }")
+
+    timeout = mock_instance.post.call_args.kwargs["timeout"]
+    assert timeout.total == DeezerBaseClient.REQUEST_TIMEOUT_SECONDS
+
+
 # ---------------------------------------------------------------------------
 # 4. Error handling (mocked HTTP)
 # ---------------------------------------------------------------------------
@@ -556,6 +666,130 @@ async def test_check_audiobook_ids_empty_input() -> None:
     assert result == set()
 
 
+@pytest.mark.asyncio
+async def test_check_audiobook_ids_chunks_large_input() -> None:
+    """Verify large ID lists are split into multiple aliased queries."""
+    client = DeezerBaseClient(arl="test_arl")
+    client._jwt = _make_jwt(exp=time.time() + 600)  # noqa: SLF001
+    client._jwt_expires_at = time.time() + 600  # noqa: SLF001
+
+    chunk_size = DeezerBaseClient.AUDIOBOOK_CHECK_CHUNK_SIZE
+    album_ids = [str(n) for n in range(chunk_size * 2 + 10)]
+
+    def _chunk_response(size: int) -> AsyncMock:
+        data = {f"a{i}": {"id": "x", "displayTitle": "Book"} for i in range(size)}
+        return _mock_post_context_manager(json.dumps({"data": data}).encode())
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(
+            side_effect=[
+                _chunk_response(chunk_size),
+                _chunk_response(chunk_size),
+                _chunk_response(10),
+            ]
+        )
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        result = await client.check_audiobook_ids(album_ids)
+
+    assert mock_instance.post.call_count == 3
+    assert result == set(album_ids)
+
+
+@pytest.mark.asyncio
+async def test_check_audiobook_ids_escapes_ids() -> None:
+    """Verify IDs are JSON-escaped and cannot break out of the query string."""
+    client = DeezerBaseClient(arl="test_arl")
+    client._jwt = _make_jwt(exp=time.time() + 600)  # noqa: SLF001
+    client._jwt_expires_at = time.time() + 600  # noqa: SLF001
+
+    gql_cm = _mock_post_context_manager(json.dumps({"data": {"a0": None}}).encode())
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=gql_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        await client.check_audiobook_ids(['123") { id } evil: me { id'])
+
+    query = mock_instance.post.call_args.kwargs["json"]["query"]
+    assert 'audiobookId: "123\\") { id } evil: me { id"' in query
+
+
+@pytest.mark.asyncio
+async def test_check_audiobook_ids_swallows_alias_scoped_errors() -> None:
+    """Verify per-alias not-found errors yield an empty set (none are audiobooks)."""
+    client = DeezerBaseClient(arl="test_arl")
+    client._jwt = _make_jwt(exp=time.time() + 600)  # noqa: SLF001
+    client._jwt_expires_at = time.time() + 600  # noqa: SLF001
+
+    gql_cm = _mock_post_context_manager(
+        json.dumps(
+            {
+                "data": None,
+                "errors": [
+                    {"message": "Audiobook not found", "path": ["a0"]},
+                    {"message": "Audiobook not found", "path": ["a1"]},
+                ],
+            }
+        ).encode(),
+    )
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=gql_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        result = await client.check_audiobook_ids(["111", "222"])
+
+    assert result == set()
+
+
+@pytest.mark.asyncio
+async def test_check_audiobook_ids_raises_on_query_level_errors() -> None:
+    """Verify non-alias errors (e.g. complexity limit) surface instead of being swallowed."""
+    client = DeezerBaseClient(arl="test_arl")
+    client._jwt = _make_jwt(exp=time.time() + 600)  # noqa: SLF001
+    client._jwt_expires_at = time.time() + 600  # noqa: SLF001
+
+    gql_cm = _mock_post_context_manager(
+        json.dumps(
+            {
+                "data": None,
+                "errors": [{"message": "Query complexity limit exceeded"}],
+            }
+        ).encode(),
+    )
+
+    with patch("deezer_python_gql.base_client.ClientSession") as mock_cls:
+        mock_instance = MagicMock()
+        mock_instance.post = MagicMock(return_value=gql_cm)
+        mock_instance.close = AsyncMock()
+        mock_cls.return_value = mock_instance
+
+        with pytest.raises(GraphQLClientGraphQLMultiError):
+            await client.check_audiobook_ids(["111", "222"])
+
+
+def test_get_data_error_uses_response_operation_name() -> None:
+    """Verify GraphQL errors are attributed to the operation carried by the response."""
+    client = DeezerBaseClient(arl="test")
+    response = GQLResponse(
+        status=200,
+        data=json.dumps({"data": None, "errors": [{"message": "boom"}]}).encode(),
+        is_success=True,
+        operation_name="GetTrack",
+    )
+
+    with pytest.raises(GraphQLClientGraphQLMultiError) as exc_info:
+        client.get_data(response)
+    assert exc_info.value.operation_name == "GetTrack"
+
+
 # ---------------------------------------------------------------------------
 # 6. Model smoke tests (one per query — fixture-based)
 # ---------------------------------------------------------------------------