devnomads 0.3.0__tar.gz → 0.4.0__tar.gz

{devnomads-0.3.0 → devnomads-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devnomads
-Version: 0.3.0
+Version: 0.4.0
 Summary: Python client library for the DevNomads API (transport, DNS, ACME)
 Project-URL: Homepage, https://devnomads.nl
 Author-email: DevNomads <support@devnomads.nl>

{devnomads-0.3.0 → devnomads-0.4.0}/openapi.json

@@ -2926,6 +2926,146 @@
                 ]
             }
         },
+        "/services/servers/{serviceId}/snapshots": {
+            "get": {
+                "tags": [
+                    "Server"
+                ],
+                "summary": "Get list of server snapshots",
+                "description": "Get list of snapshots for a server service",
+                "operationId": "services.servers.snapshots.index",
+                "parameters": [
+                    {
+                        "name": "serviceId",
+                        "in": "path",
+                        "description": "Service ID",
+                        "required": true,
+                        "schema": {
+                            "type": "integer"
+                        }
+                    }
+                ],
+                "responses": {
+                    "200": {
+                        "description": "Success"
+                    }
+                },
+                "security": [
+                    {
+                        "bearerToken": []
+                    }
+                ]
+            },
+            "post": {
+                "tags": [
+                    "Server"
+                ],
+                "summary": "Create server snapshot",
+                "description": "Create a new snapshot for a server service",
+                "operationId": "services.servers.snapshots.create",
+                "parameters": [
+                    {
+                        "name": "serviceId",
+                        "in": "path",
+                        "description": "Service ID",
+                        "required": true,
+                        "schema": {
+                            "type": "integer"
+                        }
+                    }
+                ],
+                "responses": {
+                    "202": {
+                        "description": "Accepted"
+                    }
+                },
+                "security": [
+                    {
+                        "bearerToken": []
+                    }
+                ]
+            }
+        },
+        "/services/servers/{serviceId}/snapshots/{snapshotUuid}/restore": {
+            "get": {
+                "tags": [
+                    "Server"
+                ],
+                "summary": "Restore server snapshot",
+                "description": "Restore a snapshot for a server service",
+                "operationId": "services.servers.snapshots.restore",
+                "parameters": [
+                    {
+                        "name": "serviceId",
+                        "in": "path",
+                        "description": "Service ID",
+                        "required": true,
+                        "schema": {
+                            "type": "integer"
+                        }
+                    },
+                    {
+                        "name": "snapshotUuid",
+                        "in": "path",
+                        "description": "Snapshot UUID",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        }
+                    }
+                ],
+                "responses": {
+                    "202": {
+                        "description": "Accepted"
+                    }
+                },
+                "security": [
+                    {
+                        "bearerToken": []
+                    }
+                ]
+            }
+        },
+        "/services/servers/{serviceId}/snapshots/{snapshotUuid}": {
+            "delete": {
+                "tags": [
+                    "Server"
+                ],
+                "summary": "Delete server snapshot",
+                "description": "Delete a snapshot for a server service",
+                "operationId": "services.servers.snapshots.delete",
+                "parameters": [
+                    {
+                        "name": "serviceId",
+                        "in": "path",
+                        "description": "Service ID",
+                        "required": true,
+                        "schema": {
+                            "type": "integer"
+                        }
+                    },
+                    {
+                        "name": "snapshotUuid",
+                        "in": "path",
+                        "description": "Snapshot UUID",
+                        "required": true,
+                        "schema": {
+                            "type": "string"
+                        }
+                    }
+                ],
+                "responses": {
+                    "202": {
+                        "description": "Accepted"
+                    }
+                },
+                "security": [
+                    {
+                        "bearerToken": []
+                    }
+                ]
+            }
+        },
         "/services": {
             "get": {
                 "tags": [

{devnomads-0.3.0 → devnomads-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "devnomads"
-version = "0.3.0"
+version = "0.4.0"
 description = "Python client library for the DevNomads API (transport, DNS, ACME)"
 readme = "README.md"
 requires-python = ">=3.10"

{devnomads-0.3.0 → devnomads-0.4.0}/src/devnomads/acme/client.py

@@ -88,6 +88,9 @@ def _challenge_for_authz(challenge_types_map: dict[str, str], authz_body) -> str
     ident = getattr(getattr(authz_body, "identifier", None), "value", None)
     if ident is None:
         return None
+    # The map is keyed by lowercased identifiers; lowercase the authz value
+    # too (belt and braces — CAs already lowercase it) so the lookup matches.
+    ident = ident.lower()
     lookup = f"*.{ident}" if getattr(authz_body, "wildcard", False) else ident
     return challenge_types_map.get(lookup)
 
@@ -415,7 +418,17 @@ class AcmeClient:
 
 
 def _normalize_identifiers(names: list[str]) -> list[str]:
-    """IDNA-encode and de-duplicate identifiers, preserving order."""
+    """IDNA-encode, lowercase and de-duplicate identifiers, preserving order.
+
+    DNS names are case-insensitive and ACME servers (Let's Encrypt) echo
+    authorization identifiers back lowercased. Python's IDNA codec, however,
+    preserves the case of plain-ASCII labels, so a mixed-case config entry
+    like ``www.Example.com`` would otherwise key the challenge-type map in a
+    case the CA never uses — the challenge lookup at answer time then misses
+    and issuance fails with "no challenge type configured". Lowercasing here
+    keeps every identifier canonical (punycode output is already lowercase,
+    so this is a no-op for internationalised names).
+    """
 
     identifiers: list[str] = []
     seen: set[str] = set()
@@ -423,7 +436,7 @@ def _normalize_identifiers(names: list[str]) -> list[str]:
         if not name:
             continue
         try:
-            ascii_name = name.encode("idna").decode("ascii")
+            ascii_name = name.encode("idna").decode("ascii").lower()
         except Exception:  # noqa: BLE001  # nosec B112
             continue
         if ascii_name not in seen:
@@ -442,11 +455,14 @@ def _normalize_challenge_types(
 
     result: dict[str, str] = {}
     for ident in identifiers:
+        # ``identifiers`` are already IDNA-normalised and lowercased; resolve
+        # each against the caller's map case-insensitively so a mixed-case
+        # key (``www.Example.com``) still matches its lowercased identifier.
         ct = challenge_types.get(ident)
         if ct is None:
             for key, value in challenge_types.items():
                 try:
-                    if key.encode("idna").decode("ascii") == ident:
+                    if key.encode("idna").decode("ascii").lower() == ident:
                         ct = value
                         break
                 except Exception:  # noqa: BLE001  # nosec B112

{devnomads-0.3.0 → devnomads-0.4.0}/src/devnomads/api/_services.py

@@ -717,6 +717,43 @@ class ServersResource:
         path = f"/services/servers/{service_id}/state/{state}"
         return self._client.request("GET", path, params=params)
 
+    @property
+    def snapshots(self) -> ServersSnapshotsResource:
+        return ServersSnapshotsResource(self._client)
+
+
+class ServersSnapshotsResource:
+    """Generated resource accessor."""
+
+    def __init__(self, client: Client) -> None:
+        self._client = client
+
+    def create(
+        self, service_id: str, params: dict | None = None, body: Any = None
+    ) -> Any:
+        """Create server snapshot"""
+        path = f"/services/servers/{service_id}/snapshots"
+        return self._client.request("POST", path, params=params, json_body=body)
+
+    def delete(
+        self, service_id: str, snapshot_uuid: str, params: dict | None = None
+    ) -> Any:
+        """Delete server snapshot"""
+        path = f"/services/servers/{service_id}/snapshots/{snapshot_uuid}"
+        return self._client.request("DELETE", path, params=params)
+
+    def list(self, service_id: str, params: dict | None = None) -> Any:
+        """Get list of server snapshots"""
+        path = f"/services/servers/{service_id}/snapshots"
+        return self._client.request("GET", path, params=params)
+
+    def restore(
+        self, service_id: str, snapshot_uuid: str, params: dict | None = None
+    ) -> Any:
+        """Restore server snapshot"""
+        path = f"/services/servers/{service_id}/snapshots/{snapshot_uuid}/restore"
+        return self._client.request("GET", path, params=params)
+
 
 class SitesResource:
     """Generated resource accessor."""

{devnomads-0.3.0 → devnomads-0.4.0}/tests/test_acme_client.py

@@ -51,6 +51,29 @@ def test_challenge_for_authz_wildcard_reprefixes():
     assert _challenge_for_authz({"*.example.com": "dns-01"}, body) == "dns-01"
 
 
+def test_normalize_identifiers_lowercases():
+    # DNS is case-insensitive and CAs lowercase identifiers; a mixed-case
+    # ASCII label must not survive with its original case (Python's IDNA
+    # codec would otherwise preserve it).
+    assert _normalize_identifiers(["www.Ahlersbuilding.BE"]) == [
+        "www.ahlersbuilding.be"
+    ]
+
+
+def test_mixed_case_challenge_map_resolves_against_lowercased_authz():
+    """Regression: a mixed-case config entry keyed the challenge-type map in
+    a case the CA never uses, so the challenge lookup missed and issuance
+    failed with "no challenge type configured". The map must resolve against
+    the lowercased authorization identifier the CA echoes back."""
+    # certmonger builds the map keyed by the original (mixed) case:
+    challenge_types = {"www.Ahlersbuilding.be": "dns-01"}
+    identifiers = _normalize_identifiers(["www.Ahlersbuilding.be"])
+    types_map = _normalize_challenge_types(challenge_types, identifiers)
+    # LE hands back the identifier lowercased:
+    body = _authz("www.ahlersbuilding.be", False)
+    assert _challenge_for_authz(types_map, body) == "dns-01"
+
+
 def test_split_fullchain():
     leaf = "-----BEGIN CERTIFICATE-----\nAAA\n-----END CERTIFICATE-----\n"
     rest = "-----BEGIN CERTIFICATE-----\nBBB\n-----END CERTIFICATE-----\n"