devora-django 0.1.0__tar.gz → 0.1.2__tar.gz

devora_django-0.1.2/PKG-INFO

@@ -0,0 +1,199 @@
+Metadata-Version: 2.5
+Name: devora-django
+Version: 0.1.2
+Summary: Django adapter for the Devora Python backend SDK
+Project-URL: Documentation, https://docs.devora.sh
+Project-URL: Repository, https://github.com/getdevora/devora-sdks
+Project-URL: Issues, https://github.com/getdevora/devora-sdks/issues
+Author: Devora
+License-Expression: MIT
+License-File: LICENSE
+Keywords: devora,django,impersonation,sdk,security
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Framework :: Django
+Classifier: Framework :: Django :: 5.2
+Classifier: Framework :: Django :: 6.0
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Requires-Python: <4.0,>=3.10
+Requires-Dist: devora-python<0.2.0,>=0.1.2
+Requires-Dist: django!=6.0.0,!=6.0.1,!=6.0.2,!=6.0.3,!=6.0.4,!=6.0.5,!=6.0.6,!=6.0.7,<7.0,>=5.2.17
+Requires-Dist: sqlparse>=0.6.0
+Description-Content-Type: text/markdown
+
+# devora-django
+
+Recording, masking and capture policy are configured in the Devora dashboard and
+authorized server-side for each session. This backend SDK takes no capture
+settings, and `devora_sdk()` ignores keyword arguments it does not recognize,
+so check option names carefully. See
+[capture settings](https://github.com/getdevora/devora-sdks/blob/main/SETTINGS.md).
+
+Django adapter for the Devora Python backend SDK.
+
+## Requirements
+
+- Python `>=3.10,<4.0`
+- Django `>=5.2.17,<7.0`, excluding `6.0.0` through `6.0.7` (on Django 6.0, use `6.0.8` or newer)
+- Outbound HTTPS access from your backend to the Devora API
+
+## Install
+
+```bash
+pip install devora-python devora-django
+```
+
+## Quick Start
+
+```python
+# devora_integration.py
+import os
+
+from devora_sdk import DEVORA_ENDPOINTS, devora_sdk
+
+sdk = devora_sdk(
+    api_key=os.environ["DEVORA_API_KEY"],  # pk_server_live_...
+    secret_key=os.environ["DEVORA_SECRET_KEY"],  # sk_server_live_...
+    org_id=os.environ["DEVORA_ORG_ID"],
+)
+
+
+@sdk.register(DEVORA_ENDPOINTS.USER_SEARCH)
+def search_users(req):
+    # Match name, email and the exact user ID with a parameterised query.
+    term = req.query.get("term", "")
+    limit = int(req.query.get("limit", 10))
+    users = search_customer_users(term, limit)
+    return {
+        "users": [
+            {
+                "id": u.id,
+                "name": u.name,
+                "email": u.email,
+                "attributes": {"company": u.company, "role": u.role, "plan": u.plan},
+            }
+            for u in users
+        ]
+    }
+
+
+@sdk.register(DEVORA_ENDPOINTS.TERMINATE)
+def terminate(req):
+    session_id = req.params["id"]
+    reason = (req.body or {}).get("reason")
+    # YOU IMPLEMENT: mark this Devora session revoked so every credential issued for it
+    # is rejected, including one issued after this call. Must be idempotent: Devora
+    # retries with a new request id (up to 5 attempts over 6 hours).
+    auth.revoke_impersonation_session(session_id=session_id, reason=reason)
+    return {"success": True}
+```
+
+User search should match name, email and the exact user ID. `attributes` are optional display fields such as company, role or plan: up to 12 per user, lowercase keys like `last_login`, and string, number, boolean or `null` values. Devora drops invalid entries silently; see [Search results and templates](https://docs.devora.sh/guide/search-results) for the limits and how your team lays out results.
+
+```python
+# urls.py
+from django.urls import include, path
+from devora_sdk_django import django_urlpatterns
+from .devora_integration import sdk
+
+urlpatterns = [
+    path("devora/", include(django_urlpatterns(sdk))),
+]
+```
+
+Register every handler before building the URL patterns; routes registered
+later are not mounted. If any handler is an `async def` function, use
+`async_django_urlpatterns(sdk)` instead (it runs sync handlers in a worker
+thread too); `django_urlpatterns` answers an async handler with
+`400 HANDLER_ERROR`.
+
+Each verified request is claimed once from Devora before your handler runs, so
+replay protection needs no storage on your side; your backend only needs
+outbound HTTPS access to the Devora API. See
+[SIGNING.md](https://github.com/getdevora/devora-sdks/blob/main/SIGNING.md#request-claims).
+
+The terminate body is `{"reason": ..., "terminatedBy": ...}`; Devora retries a
+failed call (up to 5 attempts over 6 hours) with a new request id, so keep the
+handler idempotent. Return a 2xx, or 429/503 with `Retry-After` when overloaded; any
+other 4xx stops the retries. See
+[Session lifecycle & cleanup](https://docs.devora.sh/guide/session-lifecycle).
+
+For protected application routes, install the guard middleware and return the
+context dict your `IMPERSONATE` handler stored, read back from your
+authenticated request state.
+
+```python
+# devora_guard.py
+from devora_sdk_django import create_impersonation_guard
+from .devora_integration import sdk
+
+
+def get_impersonation_context(request):
+    # YOU IMPLEMENT: return the dict your IMPERSONATE handler stored, read from
+    # your verified session (never from headers or JSON the browser can set), or None.
+    return getattr(request.user, "devora", None)
+
+
+DevoraGuardMiddleware = create_impersonation_guard(
+    sdk=sdk,
+    get_impersonation_context=get_impersonation_context,
+)
+```
+
+Add `"yourapp.devora_guard.DevoraGuardMiddleware"` to `settings.MIDDLEWARE`,
+after your own authentication middleware, so `request.user` is set when the
+guard runs.
+
+Blocked API calls get a JSON error. Blocked page loads and form posts (an
+`Accept` header with `text/html` and without `application/json`, no JSON body,
+not an XHR) get a small, uncached HTML page with the reason and a back link. To show your own template, pass `render_blocked`, a
+synchronous function that receives the request, the status code and the error
+body and returns a response:
+
+```python
+from django.shortcuts import render
+
+
+def render_blocked(request, status_code, body):
+    return render(request, "impersonation_blocked.html", {"error": body.get("error")}, status=status_code)
+
+
+DevoraGuardMiddleware = create_impersonation_guard(
+    sdk=sdk,
+    get_impersonation_context=get_impersonation_context,
+    render_blocked=render_blocked,
+)
+```
+
+`expires_at` must be a Unix timestamp in milliseconds. If your JWT stores Unix
+seconds, multiply by `1000` when building the impersonation context. `actor`,
+`subject`, `auth_method`, `authorization_source`, and `recording_allowed` are
+all required — the guard rejects the context as invalid without them, even
+though the dataclass marks them optional for construction convenience.
+
+## Cross-Origin-Opener-Policy
+
+Django's `SecurityMiddleware` sends `Cross-Origin-Opener-Policy: same-origin`
+by default. That cuts the page opened by a Devora impersonation link off from
+the dashboard tab that opened it, so the link cannot be redeemed. Set
+`SECURE_CROSS_ORIGIN_OPENER_POLICY = None`, or send `unsafe-none` on the
+route your Devora links land on.
+
+## Request body limits
+
+SDK views read at most `max_body_size + 1` bytes before parsing (1 MiB by default)
+and reject oversized declared lengths without reading. The browser-session view
+uses a 4 KiB limit. Async SDK views perform this bounded read off the event loop.
+Set `DATA_UPLOAD_MAX_MEMORY_SIZE = 1024 * 1024` and keep earlier middleware from
+buffering larger SDK bodies. WSGI/ASGI servers and reverse proxies also need
+request-size and read-timeout limits: Django's ASGI handler can spool a request
+before a view runs, and the SDK cannot bound that prior allocation.
+
+Options, error codes and the browser-session bridge are documented in the
+[Python reference](https://docs.devora.sh/reference/python).

devora_django-0.1.2/README.md

@@ -0,0 +1,170 @@
+# devora-django
+
+Recording, masking and capture policy are configured in the Devora dashboard and
+authorized server-side for each session. This backend SDK takes no capture
+settings, and `devora_sdk()` ignores keyword arguments it does not recognize,
+so check option names carefully. See
+[capture settings](https://github.com/getdevora/devora-sdks/blob/main/SETTINGS.md).
+
+Django adapter for the Devora Python backend SDK.
+
+## Requirements
+
+- Python `>=3.10,<4.0`
+- Django `>=5.2.17,<7.0`, excluding `6.0.0` through `6.0.7` (on Django 6.0, use `6.0.8` or newer)
+- Outbound HTTPS access from your backend to the Devora API
+
+## Install
+
+```bash
+pip install devora-python devora-django
+```
+
+## Quick Start
+
+```python
+# devora_integration.py
+import os
+
+from devora_sdk import DEVORA_ENDPOINTS, devora_sdk
+
+sdk = devora_sdk(
+    api_key=os.environ["DEVORA_API_KEY"],  # pk_server_live_...
+    secret_key=os.environ["DEVORA_SECRET_KEY"],  # sk_server_live_...
+    org_id=os.environ["DEVORA_ORG_ID"],
+)
+
+
+@sdk.register(DEVORA_ENDPOINTS.USER_SEARCH)
+def search_users(req):
+    # Match name, email and the exact user ID with a parameterised query.
+    term = req.query.get("term", "")
+    limit = int(req.query.get("limit", 10))
+    users = search_customer_users(term, limit)
+    return {
+        "users": [
+            {
+                "id": u.id,
+                "name": u.name,
+                "email": u.email,
+                "attributes": {"company": u.company, "role": u.role, "plan": u.plan},
+            }
+            for u in users
+        ]
+    }
+
+
+@sdk.register(DEVORA_ENDPOINTS.TERMINATE)
+def terminate(req):
+    session_id = req.params["id"]
+    reason = (req.body or {}).get("reason")
+    # YOU IMPLEMENT: mark this Devora session revoked so every credential issued for it
+    # is rejected, including one issued after this call. Must be idempotent: Devora
+    # retries with a new request id (up to 5 attempts over 6 hours).
+    auth.revoke_impersonation_session(session_id=session_id, reason=reason)
+    return {"success": True}
+```
+
+User search should match name, email and the exact user ID. `attributes` are optional display fields such as company, role or plan: up to 12 per user, lowercase keys like `last_login`, and string, number, boolean or `null` values. Devora drops invalid entries silently; see [Search results and templates](https://docs.devora.sh/guide/search-results) for the limits and how your team lays out results.
+
+```python
+# urls.py
+from django.urls import include, path
+from devora_sdk_django import django_urlpatterns
+from .devora_integration import sdk
+
+urlpatterns = [
+    path("devora/", include(django_urlpatterns(sdk))),
+]
+```
+
+Register every handler before building the URL patterns; routes registered
+later are not mounted. If any handler is an `async def` function, use
+`async_django_urlpatterns(sdk)` instead (it runs sync handlers in a worker
+thread too); `django_urlpatterns` answers an async handler with
+`400 HANDLER_ERROR`.
+
+Each verified request is claimed once from Devora before your handler runs, so
+replay protection needs no storage on your side; your backend only needs
+outbound HTTPS access to the Devora API. See
+[SIGNING.md](https://github.com/getdevora/devora-sdks/blob/main/SIGNING.md#request-claims).
+
+The terminate body is `{"reason": ..., "terminatedBy": ...}`; Devora retries a
+failed call (up to 5 attempts over 6 hours) with a new request id, so keep the
+handler idempotent. Return a 2xx, or 429/503 with `Retry-After` when overloaded; any
+other 4xx stops the retries. See
+[Session lifecycle & cleanup](https://docs.devora.sh/guide/session-lifecycle).
+
+For protected application routes, install the guard middleware and return the
+context dict your `IMPERSONATE` handler stored, read back from your
+authenticated request state.
+
+```python
+# devora_guard.py
+from devora_sdk_django import create_impersonation_guard
+from .devora_integration import sdk
+
+
+def get_impersonation_context(request):
+    # YOU IMPLEMENT: return the dict your IMPERSONATE handler stored, read from
+    # your verified session (never from headers or JSON the browser can set), or None.
+    return getattr(request.user, "devora", None)
+
+
+DevoraGuardMiddleware = create_impersonation_guard(
+    sdk=sdk,
+    get_impersonation_context=get_impersonation_context,
+)
+```
+
+Add `"yourapp.devora_guard.DevoraGuardMiddleware"` to `settings.MIDDLEWARE`,
+after your own authentication middleware, so `request.user` is set when the
+guard runs.
+
+Blocked API calls get a JSON error. Blocked page loads and form posts (an
+`Accept` header with `text/html` and without `application/json`, no JSON body,
+not an XHR) get a small, uncached HTML page with the reason and a back link. To show your own template, pass `render_blocked`, a
+synchronous function that receives the request, the status code and the error
+body and returns a response:
+
+```python
+from django.shortcuts import render
+
+
+def render_blocked(request, status_code, body):
+    return render(request, "impersonation_blocked.html", {"error": body.get("error")}, status=status_code)
+
+
+DevoraGuardMiddleware = create_impersonation_guard(
+    sdk=sdk,
+    get_impersonation_context=get_impersonation_context,
+    render_blocked=render_blocked,
+)
+```
+
+`expires_at` must be a Unix timestamp in milliseconds. If your JWT stores Unix
+seconds, multiply by `1000` when building the impersonation context. `actor`,
+`subject`, `auth_method`, `authorization_source`, and `recording_allowed` are
+all required — the guard rejects the context as invalid without them, even
+though the dataclass marks them optional for construction convenience.
+
+## Cross-Origin-Opener-Policy
+
+Django's `SecurityMiddleware` sends `Cross-Origin-Opener-Policy: same-origin`
+by default. That cuts the page opened by a Devora impersonation link off from
+the dashboard tab that opened it, so the link cannot be redeemed. Set
+`SECURE_CROSS_ORIGIN_OPENER_POLICY = None`, or send `unsafe-none` on the
+route your Devora links land on.
+
+## Request body limits
+
+SDK views read at most `max_body_size + 1` bytes before parsing (1 MiB by default)
+and reject oversized declared lengths without reading. The browser-session view
+uses a 4 KiB limit. Async SDK views perform this bounded read off the event loop.
+Set `DATA_UPLOAD_MAX_MEMORY_SIZE = 1024 * 1024` and keep earlier middleware from
+buffering larger SDK bodies. WSGI/ASGI servers and reverse proxies also need
+request-size and read-timeout limits: Django's ASGI handler can spool a request
+before a view runs, and the SDK cannot bound that prior allocation.
+
+Options, error codes and the browser-session bridge are documented in the
+[Python reference](https://docs.devora.sh/reference/python).

{devora_django-0.1.0 → devora_django-0.1.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "devora-django"
-version = "0.1.0"
+version = "0.1.2"
 description = "Django adapter for the Devora Python backend SDK"
 readme = "README.md"
 requires-python = ">=3.10,<4.0"
@@ -27,7 +27,7 @@ classifiers = [
 	"Typing :: Typed",
 ]
 dependencies = [
-	"devora-python>=0.1.0,<0.2.0",
+	"devora-python>=0.1.2,<0.2.0",
 	# Security floors: the lowest versions without known advisories (audited 2026-09-28).
 	"Django>=5.2.17,<7.0,!=6.0.0,!=6.0.1,!=6.0.2,!=6.0.3,!=6.0.4,!=6.0.5,!=6.0.6,!=6.0.7",
 	"sqlparse>=0.6.0",

{devora_django-0.1.0 → devora_django-0.1.2}/src/devora_sdk_django/adapter.py

@@ -59,6 +59,39 @@ class DjangoImpersonationGuardOptions:
 	on_liveness_unavailable: str = "deny"
 	is_impersonation_allowed: Optional[Callable[[Any, ImpersonationContext], bool]] = None
 	bridge_path: Optional[str] = None
+	render_blocked: Optional[Callable[[Any, int, Mapping[str, Any]], Any]] = None
+
+
+def _wants_html(request: Any) -> bool:
+	"""A browser page load or form post, as opposed to a fetch/XHR/API call."""
+	headers = request.headers
+	if headers.get("X-Requested-With") == "XMLHttpRequest":
+		return False
+	if "application/json" in (headers.get("Content-Type") or ""):
+		return False
+	accept = headers.get("Accept") or ""
+	return "text/html" in accept and "application/json" not in accept
+
+
+def _blocked_html_response(request: Any, status_code: int, body: Mapping[str, Any]) -> Any:
+	"""Default page for a blocked page load or form post: plain, escaped, never cached."""
+	from django.http import HttpResponse
+	from django.utils.html import escape
+
+	message = escape(str(body.get("error") or "This action is not allowed during impersonation"))
+	html = (
+		'<!doctype html><html lang="en"><head><meta charset="utf-8">'
+		'<meta name="viewport" content="width=device-width, initial-scale=1">'
+		"<title>Action not allowed</title></head>"
+		'<body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1rem">'
+		"<h1 style=\"font-size:1.25rem\">This action is not allowed in this session</h1>"
+		f"<p>{message}.</p>"
+		'<p><a href="javascript:history.back()">Go back</a></p>'
+		"</body></html>"
+	)
+	response = HttpResponse(html, status=status_code, content_type="text/html; charset=utf-8")
+	response["Cache-Control"] = "private, no-store"
+	return response
 
 
 def django_urlpatterns(sdk: Any, options: Optional[DjangoAdapterOptions] = None) -> list[Any]:
@@ -234,6 +267,7 @@ def create_impersonation_guard(
 	on_liveness_unavailable: str = "deny",
 	is_impersonation_allowed: Optional[Callable[[Any, ImpersonationContext], bool]] = None,
 	bridge_path: Optional[str] = None,
+	render_blocked: Optional[Callable[[Any, int, Mapping[str, Any]], Any]] = None,
 ) -> Callable[[Callable[..., Any]], Callable[..., Any]]:
 	"""Django middleware factory (also usable as a view decorator).
 
@@ -245,6 +279,11 @@ def create_impersonation_guard(
 	including ``SCRIPT_NAME``). Deny rules also match ``path_info`` and the path
 	with an ``i18n_patterns`` language prefix removed. ``bridge_path`` enables the
 	read-scope allowance for a mounted browser-session bridge (off by default).
+
+	Blocked API calls (fetch/XHR, JSON) get a JSON error. Blocked page loads and
+	form posts get a small HTML page instead, or whatever
+	``render_blocked(request, status_code, body)`` returns, so a server-rendered
+	app can show its own template.
 	"""
 	options = DjangoImpersonationGuardOptions(
 		sdk=sdk,
@@ -257,6 +296,7 @@ def create_impersonation_guard(
 		on_liveness_unavailable=on_liveness_unavailable,
 		is_impersonation_allowed=is_impersonation_allowed,
 		bridge_path=bridge_path,
+		render_blocked=render_blocked,
 	)
 	liveness = (
 		SessionLivenessChecker(sdk, liveness_cache_ttl_ms, on_liveness_unavailable)
@@ -324,6 +364,9 @@ def create_impersonation_guard(
 			)
 
 		status_code, body = _guard_response(decision.status_code, decision.body, options.blocked_response)
+		if _wants_html(request):
+			render = options.render_blocked or _blocked_html_response
+			return render(request, status_code, body)
 		return _private_json_response(body, status=status_code)
 
 	def guard_failed() -> Any:

devora_django-0.1.0/PKG-INFO

@@ -1,141 +0,0 @@
-Metadata-Version: 2.5
-Name: devora-django
-Version: 0.1.0
-Summary: Django adapter for the Devora Python backend SDK
-Project-URL: Documentation, https://docs.devora.sh
-Project-URL: Repository, https://github.com/getdevora/devora-sdks
-Project-URL: Issues, https://github.com/getdevora/devora-sdks/issues
-Author: Devora
-License-Expression: MIT
-License-File: LICENSE
-Keywords: devora,django,impersonation,sdk,security
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Framework :: Django
-Classifier: Framework :: Django :: 5.2
-Classifier: Framework :: Django :: 6.0
-Classifier: Intended Audience :: Developers
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
-Classifier: Programming Language :: Python :: 3.14
-Classifier: Typing :: Typed
-Requires-Python: <4.0,>=3.10
-Requires-Dist: devora-python<0.2.0,>=0.1.0
-Requires-Dist: django!=6.0.0,!=6.0.1,!=6.0.2,!=6.0.3,!=6.0.4,!=6.0.5,!=6.0.6,!=6.0.7,<7.0,>=5.2.17
-Requires-Dist: sqlparse>=0.6.0
-Description-Content-Type: text/markdown
-
-# devora-django
-
-Recording, masking and activity preferences are configured in Devora Settings.
-SDK initialization overrides are ignored. New sessions retain the server's policy
-snapshot across exchange and resume. Developer privacy labels take effect only
-when selected in Settings; sensitive-field protection remains mandatory.
-See [migration details](https://github.com/getdevora/devora-sdks/blob/main/SETTINGS.md).
-
-Django adapter for the Devora Python backend SDK.
-
-## Requirements
-
-- Python `>=3.10,<4.0`
-- Django `>=5.2,<7.0`
-
-## Install
-
-```bash
-pip install devora-python devora-django
-```
-
-## Quick Start
-
-```python
-# devora_integration.py
-from devora_sdk import DEVORA_ENDPOINTS, devora_sdk
-
-sdk = devora_sdk(
-    api_key="pk_server_live_...",
-    secret_key="sk_server_live_...",
-    org_id="org_...",
-)
-
-
-@sdk.register(DEVORA_ENDPOINTS.USER_SEARCH)
-def search_users(req):
-    return {"users": search_customer_users(req.query.get("term", ""))}
-```
-
-```python
-# urls.py
-from django.urls import include, path
-from devora_sdk_django import django_urlpatterns
-from .devora_integration import sdk
-
-urlpatterns = [
-    path("devora/", include(django_urlpatterns(sdk))),
-]
-```
-
-Use `async_django_urlpatterns(sdk)` instead when your exposed handlers are
-async functions.
-
-For protected application routes, install the guard middleware and extract a
-trusted impersonation context from your authenticated request state.
-
-```python
-from devora_sdk import ImpersonationContext
-from devora_sdk_django import create_impersonation_guard
-from .devora_integration import sdk
-
-
-def get_impersonation_context(request):
-    devora = getattr(request.user, "devora", None)
-    if not devora:
-        return None
-    return ImpersonationContext(
-        is_impersonation=devora["isImpersonation"],
-        scope=devora["scope"],
-        session_id=devora["sessionId"],
-        expires_at=devora["expiresAt"],
-        actor=devora["actor"],
-        subject=devora["subject"],
-        auth_method=devora["authMethod"],
-        authorization_source=devora["authorizationSource"],
-        recording_allowed=devora["recordingAllowed"],
-        impersonator=devora.get("impersonator"),
-    )
-
-
-DevoraGuardMiddleware = create_impersonation_guard(
-    sdk=sdk,
-    get_impersonation_context=get_impersonation_context,
-)
-```
-
-Add `"yourapp.devora_integration.DevoraGuardMiddleware"` to `settings.MIDDLEWARE`,
-after your own authentication middleware.
-
-`expires_at` must be a Unix timestamp in milliseconds. If your JWT stores Unix
-seconds, multiply by `1000` when building the impersonation context. `actor`,
-`subject`, `auth_method`, `authorization_source`, and `recording_allowed` are
-all required — the guard rejects the context as invalid without them, even
-though the dataclass marks them optional for construction convenience.
-
-## Cross-Origin-Opener-Policy
-
-Django's `SecurityMiddleware` sends `Cross-Origin-Opener-Policy: same-origin`
-by default. That cuts the page opened by a Devora impersonation link off from
-the dashboard tab that opened it, so the link cannot be redeemed. Set
-`SECURE_CROSS_ORIGIN_OPENER_POLICY = None`, or send `unsafe-none` on the
-route your Devora links land on.
-
-## Request body limits
-
-SDK views read at most `max_body_size + 1` bytes before parsing (1 MiB by default)
-and reject oversized declared lengths without reading. The browser-session view
-uses a 4 KiB limit. Async SDK views perform this bounded read off the event loop.
-Set `DATA_UPLOAD_MAX_MEMORY_SIZE = 1024 * 1024` and keep earlier middleware from
-buffering larger SDK bodies. WSGI/ASGI servers and reverse proxies also need
-request-size and read-timeout limits: Django's ASGI handler can spool a request
-before a view runs, and the SDK cannot bound that prior allocation.

devora_django-0.1.0/README.md

@@ -1,112 +0,0 @@
-# devora-django
-
-Recording, masking and activity preferences are configured in Devora Settings.
-SDK initialization overrides are ignored. New sessions retain the server's policy
-snapshot across exchange and resume. Developer privacy labels take effect only
-when selected in Settings; sensitive-field protection remains mandatory.
-See [migration details](https://github.com/getdevora/devora-sdks/blob/main/SETTINGS.md).
-
-Django adapter for the Devora Python backend SDK.
-
-## Requirements
-
-- Python `>=3.10,<4.0`
-- Django `>=5.2,<7.0`
-
-## Install
-
-```bash
-pip install devora-python devora-django
-```
-
-## Quick Start
-
-```python
-# devora_integration.py
-from devora_sdk import DEVORA_ENDPOINTS, devora_sdk
-
-sdk = devora_sdk(
-    api_key="pk_server_live_...",
-    secret_key="sk_server_live_...",
-    org_id="org_...",
-)
-
-
-@sdk.register(DEVORA_ENDPOINTS.USER_SEARCH)
-def search_users(req):
-    return {"users": search_customer_users(req.query.get("term", ""))}
-```
-
-```python
-# urls.py
-from django.urls import include, path
-from devora_sdk_django import django_urlpatterns
-from .devora_integration import sdk
-
-urlpatterns = [
-    path("devora/", include(django_urlpatterns(sdk))),
-]
-```
-
-Use `async_django_urlpatterns(sdk)` instead when your exposed handlers are
-async functions.
-
-For protected application routes, install the guard middleware and extract a
-trusted impersonation context from your authenticated request state.
-
-```python
-from devora_sdk import ImpersonationContext
-from devora_sdk_django import create_impersonation_guard
-from .devora_integration import sdk
-
-
-def get_impersonation_context(request):
-    devora = getattr(request.user, "devora", None)
-    if not devora:
-        return None
-    return ImpersonationContext(
-        is_impersonation=devora["isImpersonation"],
-        scope=devora["scope"],
-        session_id=devora["sessionId"],
-        expires_at=devora["expiresAt"],
-        actor=devora["actor"],
-        subject=devora["subject"],
-        auth_method=devora["authMethod"],
-        authorization_source=devora["authorizationSource"],
-        recording_allowed=devora["recordingAllowed"],
-        impersonator=devora.get("impersonator"),
-    )
-
-
-DevoraGuardMiddleware = create_impersonation_guard(
-    sdk=sdk,
-    get_impersonation_context=get_impersonation_context,
-)
-```
-
-Add `"yourapp.devora_integration.DevoraGuardMiddleware"` to `settings.MIDDLEWARE`,
-after your own authentication middleware.
-
-`expires_at` must be a Unix timestamp in milliseconds. If your JWT stores Unix
-seconds, multiply by `1000` when building the impersonation context. `actor`,
-`subject`, `auth_method`, `authorization_source`, and `recording_allowed` are
-all required — the guard rejects the context as invalid without them, even
-though the dataclass marks them optional for construction convenience.
-
-## Cross-Origin-Opener-Policy
-
-Django's `SecurityMiddleware` sends `Cross-Origin-Opener-Policy: same-origin`
-by default. That cuts the page opened by a Devora impersonation link off from
-the dashboard tab that opened it, so the link cannot be redeemed. Set
-`SECURE_CROSS_ORIGIN_OPENER_POLICY = None`, or send `unsafe-none` on the
-route your Devora links land on.
-
-## Request body limits
-
-SDK views read at most `max_body_size + 1` bytes before parsing (1 MiB by default)
-and reject oversized declared lengths without reading. The browser-session view
-uses a 4 KiB limit. Async SDK views perform this bounded read off the event loop.
-Set `DATA_UPLOAD_MAX_MEMORY_SIZE = 1024 * 1024` and keep earlier middleware from
-buffering larger SDK bodies. WSGI/ASGI servers and reverse proxies also need
-request-size and read-timeout limits: Django's ASGI handler can spool a request
-before a view runs, and the SDK cannot bound that prior allocation.