django-whatsapp-api-wrapper 0.2.2__tar.gz → 0.3.0__tar.gz

{django_whatsapp_api_wrapper-0.2.2 → django_whatsapp_api_wrapper-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-whatsapp-api-wrapper
-Version: 0.2.2
+Version: 0.3.0
 Summary: 
 License: MIT
 License-File: LICENSE
@@ -74,6 +74,35 @@ WHATSAPP_CLOUD_API_WABA_ID=
 WHATSAPP_CLOUD_API_VERIFY_TOKEN=
 ```
 
+4) Configure a autenticação para as rotas de templates (opcional, mas recomendado):
+
+```python
+# settings.py
+
+# Opção 1: Usar Token Authentication do DRF (padrão)
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+]
+
+# Opção 2: Usar JWT (se você já tem configurado)
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework_simplejwt.authentication.JWTAuthentication',
+]
+
+# Opção 3: Usar API Key simples
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+WHATSAPP_API_KEY = "sua_api_key_secreta_aqui"
+
+# Permissões (padrão: IsAuthenticated)
+WHATSAPP_API_PERMISSION_CLASSES = [
+    'rest_framework.permissions.IsAuthenticated',
+]
+```
+
+**Importante:** Se não configurar a autenticação, as rotas de templates usarão `TokenAuthentication` por padrão.
+
 O endpoint de webhook ficará disponível em:
 
 - GET/POST: `/whatsapp-api-wrapper/webhook/`
@@ -142,10 +171,82 @@ m2.send()
 
 ---
 
+## Autenticação
+
+### Proteção das Rotas de Templates
+
+Por padrão, todas as rotas de templates (`/templates/`) são protegidas e requerem autenticação. O webhook permanece público (necessário para o WhatsApp).
+
+### Opções de Autenticação
+
+#### 1. Token Authentication (Padrão)
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+]
+```
+
+Uso:
+```bash
+curl -H "Authorization: Token seu_token_aqui" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 2. JWT Authentication
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework_simplejwt.authentication.JWTAuthentication',
+]
+```
+
+Uso:
+```bash
+curl -H "Authorization: Bearer seu_jwt_token" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 3. API Key Authentication
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+WHATSAPP_API_KEY = "sua_api_key_secreta"
+```
+
+Uso:
+```bash
+curl -H "X-WhatsApp-API-Key: sua_api_key_secreta" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 4. Múltiplas Autenticações
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+```
+
+### Permissões Customizadas
+```python
+# settings.py
+WHATSAPP_API_PERMISSION_CLASSES = [
+    'rest_framework.permissions.IsAuthenticated',
+    # ou 'rest_framework.permissions.IsAdminUser',
+    # ou 'myapp.permissions.CustomPermission',
+]
+```
+
 ## Templates
 
 Endpoints REST (DRF) para gerenciar Message Templates do WhatsApp (proxy para Graph API). Todos os endpoints abaixo partem do prefixo que você incluir no projeto, por exemplo: `.../whatsapp-api-wrapper/`.
 
+**⚠️ Importante:** Todos os endpoints de templates requerem autenticação (veja seção Autenticação acima).
+
 Requisitos de ambiente: `WHATSAPP_CLOUD_API_TOKEN`, `WHATSAPP_CLOUD_API_VERSION`, `WHATSAPP_CLOUD_API_WABA_ID`.
 
 Aqui a documentação OFICIAL: 

{django_whatsapp_api_wrapper-0.2.2 → django_whatsapp_api_wrapper-0.3.0}/README.md

@@ -41,6 +41,35 @@ WHATSAPP_CLOUD_API_WABA_ID=
 WHATSAPP_CLOUD_API_VERIFY_TOKEN=
 ```
 
+4) Configure a autenticação para as rotas de templates (opcional, mas recomendado):
+
+```python
+# settings.py
+
+# Opção 1: Usar Token Authentication do DRF (padrão)
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+]
+
+# Opção 2: Usar JWT (se você já tem configurado)
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework_simplejwt.authentication.JWTAuthentication',
+]
+
+# Opção 3: Usar API Key simples
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+WHATSAPP_API_KEY = "sua_api_key_secreta_aqui"
+
+# Permissões (padrão: IsAuthenticated)
+WHATSAPP_API_PERMISSION_CLASSES = [
+    'rest_framework.permissions.IsAuthenticated',
+]
+```
+
+**Importante:** Se não configurar a autenticação, as rotas de templates usarão `TokenAuthentication` por padrão.
+
 O endpoint de webhook ficará disponível em:
 
 - GET/POST: `/whatsapp-api-wrapper/webhook/`
@@ -109,10 +138,82 @@ m2.send()
 
 ---
 
+## Autenticação
+
+### Proteção das Rotas de Templates
+
+Por padrão, todas as rotas de templates (`/templates/`) são protegidas e requerem autenticação. O webhook permanece público (necessário para o WhatsApp).
+
+### Opções de Autenticação
+
+#### 1. Token Authentication (Padrão)
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+]
+```
+
+Uso:
+```bash
+curl -H "Authorization: Token seu_token_aqui" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 2. JWT Authentication
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework_simplejwt.authentication.JWTAuthentication',
+]
+```
+
+Uso:
+```bash
+curl -H "Authorization: Bearer seu_jwt_token" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 3. API Key Authentication
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+WHATSAPP_API_KEY = "sua_api_key_secreta"
+```
+
+Uso:
+```bash
+curl -H "X-WhatsApp-API-Key: sua_api_key_secreta" \
+     "$BASE/whatsapp-api-wrapper/templates/"
+```
+
+#### 4. Múltiplas Autenticações
+```python
+# settings.py
+WHATSAPP_API_AUTHENTICATION_CLASSES = [
+    'rest_framework.authentication.TokenAuthentication',
+    'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+]
+```
+
+### Permissões Customizadas
+```python
+# settings.py
+WHATSAPP_API_PERMISSION_CLASSES = [
+    'rest_framework.permissions.IsAuthenticated',
+    # ou 'rest_framework.permissions.IsAdminUser',
+    # ou 'myapp.permissions.CustomPermission',
+]
+```
+
 ## Templates
 
 Endpoints REST (DRF) para gerenciar Message Templates do WhatsApp (proxy para Graph API). Todos os endpoints abaixo partem do prefixo que você incluir no projeto, por exemplo: `.../whatsapp-api-wrapper/`.
 
+**⚠️ Importante:** Todos os endpoints de templates requerem autenticação (veja seção Autenticação acima).
+
 Requisitos de ambiente: `WHATSAPP_CLOUD_API_TOKEN`, `WHATSAPP_CLOUD_API_VERSION`, `WHATSAPP_CLOUD_API_WABA_ID`.
 
 Aqui a documentação OFICIAL: 

{django_whatsapp_api_wrapper-0.2.2 → django_whatsapp_api_wrapper-0.3.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "django-whatsapp-api-wrapper"
-version = "0.2.2"
+version = "0.3.0"
 description = ""
 authors = ["Your Name <you@example.com>"]
 readme = "README.md"

django_whatsapp_api_wrapper-0.3.0/src/django_whatsapp_api_wrapper/authentication/__init__.py

@@ -0,0 +1,4 @@
+from .api_key import APIKeyAuthentication
+from .base import BaseAuthenticatedAPIView
+
+__all__ = ['APIKeyAuthentication', 'BaseAuthenticatedAPIView']

django_whatsapp_api_wrapper-0.3.0/src/django_whatsapp_api_wrapper/authentication/api_key.py

@@ -0,0 +1,32 @@
+from django.contrib.auth.models import AnonymousUser
+from django.conf import settings
+from rest_framework import authentication
+from rest_framework import exceptions
+
+
+class APIKeyAuthentication(authentication.BaseAuthentication):
+    """
+    Simple API key authentication for WhatsApp API endpoints.
+    
+    Clients should authenticate by passing the API key in the "X-WhatsApp-API-Key" header.
+    For example:
+        X-WhatsApp-API-Key: your_api_key_here
+    """
+    
+    def authenticate(self, request):
+        api_key = request.META.get('HTTP_X_WHATSAPP_API_KEY')
+        if not api_key:
+            return None
+        
+        expected_api_key = getattr(settings, 'WHATSAPP_API_KEY', None)
+        if not expected_api_key:
+            raise exceptions.AuthenticationFailed('WHATSAPP_API_KEY not configured in settings')
+        
+        if api_key != expected_api_key:
+            raise exceptions.AuthenticationFailed('Invalid API key')
+        
+        # Return a tuple of (user, auth) where user can be AnonymousUser for API key auth
+        return (AnonymousUser(), api_key)
+
+    def authenticate_header(self, request):
+        return 'X-WhatsApp-API-Key'

django_whatsapp_api_wrapper-0.3.0/src/django_whatsapp_api_wrapper/authentication/base.py

@@ -0,0 +1,54 @@
+from django.conf import settings
+from rest_framework.views import APIView
+from rest_framework.authentication import TokenAuthentication
+from rest_framework.permissions import IsAuthenticated
+
+
+class BaseAuthenticatedAPIView(APIView):
+    """
+    Base API view with configurable authentication for WhatsApp API endpoints.
+    
+    Authentication and permission classes can be configured via Django settings:
+    
+    WHATSAPP_API_AUTHENTICATION_CLASSES = [
+        'rest_framework.authentication.TokenAuthentication',
+        # or 'rest_framework_simplejwt.authentication.JWTAuthentication',
+        # or 'django_whatsapp_api_wrapper.authentication.APIKeyAuthentication',
+    ]
+    
+    WHATSAPP_API_PERMISSION_CLASSES = [
+        'rest_framework.permissions.IsAuthenticated',
+    ]
+    """
+    
+    def __init__(self, *args, **kwargs):
+        super().__init__(*args, **kwargs)
+        
+        # Get authentication classes from settings
+        auth_classes_setting = getattr(settings, 'WHATSAPP_API_AUTHENTICATION_CLASSES', None)
+        if auth_classes_setting:
+            self.authentication_classes = self._import_classes(auth_classes_setting)
+        else:
+            # Default to TokenAuthentication if no setting is provided
+            self.authentication_classes = [TokenAuthentication]
+        
+        # Get permission classes from settings
+        perm_classes_setting = getattr(settings, 'WHATSAPP_API_PERMISSION_CLASSES', None)
+        if perm_classes_setting:
+            self.permission_classes = self._import_classes(perm_classes_setting)
+        else:
+            # Default to IsAuthenticated if no setting is provided
+            self.permission_classes = [IsAuthenticated]
+    
+    def _import_classes(self, class_paths):
+        """Import classes from string paths."""
+        classes = []
+        for class_path in class_paths:
+            try:
+                module_path, class_name = class_path.rsplit('.', 1)
+                module = __import__(module_path, fromlist=[class_name])
+                cls = getattr(module, class_name)
+                classes.append(cls)
+            except (ImportError, AttributeError, ValueError) as e:
+                raise ImportError(f"Could not import '{class_path}': {e}")
+        return classes

{django_whatsapp_api_wrapper-0.2.2 → django_whatsapp_api_wrapper-0.3.0}/src/django_whatsapp_api_wrapper/templates/views.py

@@ -1,7 +1,7 @@
-from rest_framework.views import APIView
 from rest_framework.response import Response
 from rest_framework import status
 
+from ..authentication.base import BaseAuthenticatedAPIView
 from .client import TemplateAPI
 from .serializers import (
     TemplateCreateSerializer,
@@ -13,7 +13,7 @@ from .serializers import (
 )
 
 
-class TemplateByIdView(APIView):
+class TemplateByIdView(BaseAuthenticatedAPIView):
     def get(self, request, template_id: str):
         api = TemplateAPI()
         resp = api.get_template_by_id(template_id)
@@ -27,7 +27,7 @@ class TemplateByIdView(APIView):
         return Response(resp.json() if resp.content else None, status=resp.status_code)
 
 
-class TemplateByNameView(APIView):
+class TemplateByNameView(BaseAuthenticatedAPIView):
     def get(self, request):
         serializer = TemplateNameSerializer(data=request.query_params)
         serializer.is_valid(raise_exception=True)
@@ -43,7 +43,7 @@ class TemplateByNameView(APIView):
         return Response(resp.json() if resp.content else None, status=resp.status_code)
 
 
-class TemplateListCreateView(APIView):
+class TemplateListCreateView(BaseAuthenticatedAPIView):
     def get(self, request):
         serializer = TemplateListQuerySerializer(data=request.query_params)
         serializer.is_valid(raise_exception=True)
@@ -59,14 +59,14 @@ class TemplateListCreateView(APIView):
         return Response(resp.json(), status=resp.status_code)
 
 
-class TemplateNamespaceView(APIView):
+class TemplateNamespaceView(BaseAuthenticatedAPIView):
     def get(self, request):
         api = TemplateAPI()
         resp = api.get_namespace()
         return Response(resp.json(), status=resp.status_code)
 
 
-class TemplateDeleteByIdView(APIView):
+class TemplateDeleteByIdView(BaseAuthenticatedAPIView):
     def delete(self, request):
         serializer = TemplateDeleteByIdSerializer(data=request.query_params)
         serializer.is_valid(raise_exception=True)