dnastack-client-library 3.1.207__py3-none-any.whl → 3.1.209__py3-none-any.whl

dnastack/constants.py

@@ -1,5 +1,5 @@
 import os
 
-__version__ = "3.1.207"
+__version__ = "3.1.209"
 
 LOCAL_STORAGE_DIRECTORY = os.path.join(os.path.expanduser("~"), '.dnastack')

dnastack/http/authenticators/oauth2.py

@@ -255,16 +255,12 @@ class OAuth2Authenticator(Authenticator):
                 except JSONDecodeError:
                     error_msg = refresh_token_res.text
 
-                # Handle Wallet-specific implementation
-                reauthentication_required = (
-                        refresh_token_res.status_code == 401
-                        or
-                        (refresh_token_res.status_code == 400 and 'JWT expired' in error_msg)
-                )
-
-                if not reauthentication_required:
-                    event_details['reason'] = 'Invalid state while refreshing tokens'
-                    self.events.dispatch('refresh-failure', event_details)
+                # Handle token refresh failure based on HTTP status.
+                # 400/401 = the refresh token is invalid (expired, revoked, key rotated, etc.)
+                #           -> prompt the user to re-authenticate
+                # 5xx     = transient server error, re-login won't help
+                #           -> raise InvalidStateError
+                reauthentication_required = refresh_token_res.status_code in (400, 401)
 
                 exception_details = {
                     'debug_mode': currently_in_debug_mode(),
@@ -285,8 +281,12 @@ class OAuth2Authenticator(Authenticator):
                     }
 
                 if reauthentication_required:
-                    raise ReauthenticationRequired('Refresh token expired')
+                    logger.warning(f'Refresh token rejected by server (HTTP {refresh_token_res.status_code}): {error_msg}')
+                    raise ReauthenticationRequired(f'Refresh token rejected: {error_msg}')
                 else:
+                    event_details['reason'] = 'Invalid state while refreshing tokens'
+                    self.events.dispatch('refresh-failure', event_details)
+
                     raise InvalidStateError('Unable to refresh the access token',
                                             details=exception_details)
         finally:

dnastack/http/authenticators/oauth2_adapter/cloud_providers.py

@@ -4,12 +4,15 @@ from enum import Enum
 from pydantic import BaseModel, Field
 import logging
 
+import boto3
+
 from dnastack.common.tracing import Span
 from dnastack.http.client_factory import HttpClientFactory
 
 
 class CloudProvider(str, Enum):
     GCP = "gcp"
+    AWS = "aws"
 
 
 class CloudMetadataProvider(ABC):
@@ -89,6 +92,44 @@ class GCPMetadataProvider(CloudMetadataProvider):
             return None
 
 
+class AWSMetadataProvider(CloudMetadataProvider):
+    """Amazon Web Services metadata provider using STS GetWebIdentityToken."""
+
+    def __init__(self, timeout: int = 5):
+        super().__init__(timeout)
+        self._session: Optional[boto3.Session] = None
+
+    @property
+    def name(self) -> str:
+        return CloudProvider.AWS.value
+
+    def is_available(self) -> bool:
+        """Check if AWS credentials are available."""
+        try:
+            self._session = boto3.Session()
+            credentials = self._session.get_credentials()
+            return credentials is not None
+        except Exception:
+            return False
+
+    def get_identity_token(self, audience: str, trace_context: Span) -> Optional[str]:
+        """Fetch AWS identity token from STS GetWebIdentityToken."""
+        try:
+            if self._session is None:
+                self._session = boto3.Session()
+
+            sts_client = self._session.client('sts')
+            response = sts_client.get_web_identity_token(Audience=[audience])
+            token = response.get('WebIdentityToken')
+            if token:
+                self._logger.debug(f'Successfully fetched AWS identity token for audience: {audience}')
+            return token
+
+        except Exception as e:
+            self._logger.warning(f'Failed to fetch AWS identity token: {e}')
+            return None
+
+
 class CloudMetadataConfig(BaseModel):
     """Configuration model for cloud metadata provider."""
     timeout: int = Field(5, ge=1, le=30, description="Timeout for metadata service request (1-30 seconds).")
@@ -98,6 +139,7 @@ class CloudProviderFactory:
     """Factory for creating cloud metadata providers."""
     _providers = {
         CloudProvider.GCP: GCPMetadataProvider,
+        CloudProvider.AWS: AWSMetadataProvider,
     }
 
     @classmethod

{dnastack_client_library-3.1.207.dist-info → dnastack_client_library-3.1.209.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dnastack-client-library
-Version: 3.1.207
+Version: 3.1.209
 Summary: DNAstack's GA4GH library and CLI
 Author-email: DNAstack <devs@dnastack.com>
 License: Apache License, Version 2.0
@@ -36,6 +36,7 @@ Requires-Dist: python-dotenv
 Requires-Dist: pip>=21.3.1
 Requires-Dist: packaging>=21.3
 Requires-Dist: selenium>=4.1.0
+Requires-Dist: boto3>=1.42.30
 Provides-Extra: test
 Requires-Dist: selenium>=3.141.0; extra == "test"
 Requires-Dist: pyjwt>=2.1.0; extra == "test"

{dnastack_client_library-3.1.207.dist-info → dnastack_client_library-3.1.209.dist-info}/RECORD

@@ -1,6 +1,6 @@
 dnastack/__init__.py,sha256=mslf7se8vBSK_HkqWTGPdibeVhT4xyKXgzQBV7dEK1M,333
 dnastack/__main__.py,sha256=EKmtIs4TBseQJi-OT_U6LqRyKLiyrGTBuTQg9zE-G2I,4376
-dnastack/constants.py,sha256=ATOtsE118-FzkYW3GE1qbxQMUBSg9xDjPCGSqbHtQtA,113
+dnastack/constants.py,sha256=Cfd54tZ7BhkWKBRgpXZi0KUD7b5Kxn89WjwHArZw5nc,113
 dnastack/feature_flags.py,sha256=UMNDB07R_ep6Fx3iClhzwOpkWfyYnb418FpoJo50CGs,1411
 dnastack/json_path.py,sha256=TyghhDf7nGQmnsUWBhenU_fKsE_Ez-HLVER6HgH5-hU,2700
 dnastack/omics_cli.py,sha256=ZppKZTHv_XjUUZyRIzSkx0Ug5ODAYrCOTsU0ezCOVrA,3694
@@ -189,18 +189,18 @@ dnastack/http/authenticators/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NM
 dnastack/http/authenticators/abstract.py,sha256=Q74LnZwsMKs5TfGI_4oZtXBCpgJKkkimkv_Y8YPHuoM,9246
 dnastack/http/authenticators/constants.py,sha256=mSpBnm5lMMmMJwr13KIfCoOXXJLP4qGDkFprYXALu8o,1278
 dnastack/http/authenticators/factory.py,sha256=zjV5xMZKlkKqUHA2QDXmut-2HxTnqAz8vwxTBEkMg60,2627
-dnastack/http/authenticators/oauth2.py,sha256=FKAoCCt_s9XmtVcOJpdll09XSU-lqxne_VO3zqm2DkE,20066
+dnastack/http/authenticators/oauth2.py,sha256=6shpSY9v7Ccs6Iy4GjWgx22uq9r_wkEg3z4xeWlHlxE,20298
 dnastack/http/authenticators/oauth2_adapter/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 dnastack/http/authenticators/oauth2_adapter/abstract.py,sha256=Tm4Nnroo5_vp0UgZHhcEDVRRbhIrvVdfPr8nTyihoH4,2832
 dnastack/http/authenticators/oauth2_adapter/client_credential.py,sha256=2iVOof4YZEVGizDRDBISbv8U_xIemtUnHzzxa3mxswc,2770
-dnastack/http/authenticators/oauth2_adapter/cloud_providers.py,sha256=UHQ-YHHr5ipqSQVzCfr95Uv3zkFcop_RCpK4q6a2yJg,4317
+dnastack/http/authenticators/oauth2_adapter/cloud_providers.py,sha256=sWto8WfK2-8xjx3SbrRMIaYg2V8cwohR1XIU6xTXzfA,5763
 dnastack/http/authenticators/oauth2_adapter/device_code_flow.py,sha256=dXI5CyUcsqYg6gf5vDC_3eY6Cc-H1C8W7FeD_24j92A,6750
 dnastack/http/authenticators/oauth2_adapter/factory.py,sha256=ZtNXOklWEim-26ooNoPp3ji_hRg1vf4fHHnY94F0wLI,1087
 dnastack/http/authenticators/oauth2_adapter/models.py,sha256=7UsC8DkStMBx7Bz_xHQNi_J1UO_H4nfHme7oBhokj2I,1339
 dnastack/http/authenticators/oauth2_adapter/token_exchange.py,sha256=nSuAsSKWa_UNqHSbPMOEk4komaFITYAnE04Sk5WOrLc,6332
-dnastack_client_library-3.1.207.dist-info/licenses/LICENSE,sha256=uwybO-wUbQhxkosgjhJlxmYATMy-AzoULFO9FUedE34,11580
-dnastack_client_library-3.1.207.dist-info/METADATA,sha256=plCNoaEWQp1W31XbH_9uJFvo-N1vqxKTVHjg0YYfddo,1761
-dnastack_client_library-3.1.207.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-dnastack_client_library-3.1.207.dist-info/entry_points.txt,sha256=Y6OeicsiyGn3-8D-SiV4NiKlJgXfkSqK88kFBR6R1rY,89
-dnastack_client_library-3.1.207.dist-info/top_level.txt,sha256=P2RgRyqJ7hfNy1wLVRoVLJYEppUVkCX3syGK9zBqkt8,9
-dnastack_client_library-3.1.207.dist-info/RECORD,,
+dnastack_client_library-3.1.209.dist-info/licenses/LICENSE,sha256=uwybO-wUbQhxkosgjhJlxmYATMy-AzoULFO9FUedE34,11580
+dnastack_client_library-3.1.209.dist-info/METADATA,sha256=wi1ZarZ4hhrHe-Lle2I5OpuE9fDFMUN_2CxB1Lb8z9k,1791
+dnastack_client_library-3.1.209.dist-info/WHEEL,sha256=wUyA8OaulRlbfwMtmQsvNngGrxQHAvkKcvRmdizlJi0,92
+dnastack_client_library-3.1.209.dist-info/entry_points.txt,sha256=Y6OeicsiyGn3-8D-SiV4NiKlJgXfkSqK88kFBR6R1rY,89
+dnastack_client_library-3.1.209.dist-info/top_level.txt,sha256=P2RgRyqJ7hfNy1wLVRoVLJYEppUVkCX3syGK9zBqkt8,9
+dnastack_client_library-3.1.209.dist-info/RECORD,,

{dnastack_client_library-3.1.207.dist-info → dnastack_client_library-3.1.209.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (80.9.0)
+Generator: setuptools (80.10.2)
 Root-Is-Purelib: true
 Tag: py3-none-any