dominus-sdk-python 2.5.2__tar.gz → 2.5.3__tar.gz

{dominus_sdk_python-2.5.2 → dominus_sdk_python-2.5.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 2.5.2
+Version: 2.5.3
 Summary: Python SDK for the Dominus Orchestrator Platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary

{dominus_sdk_python-2.5.2 → dominus_sdk_python-2.5.3}/dominus/__init__.py

@@ -131,7 +131,7 @@ from .errors import (
     TimeoutError as DominusTimeoutError,
 )
 
-__version__ = "2.5.2"
+__version__ = "2.5.3"
 __all__ = [
     # Main SDK instance
     "dominus",

{dominus_sdk_python-2.5.2 → dominus_sdk_python-2.5.3}/dominus/start.py

@@ -977,36 +977,57 @@ class Dominus:
             system=system
         )
 
-    async def get_public_key(self) -> str:
-        """Get Sovereign's public key for JWT validation (cached)."""
+    async def get_public_key(self) -> Dict[str, Any]:
+        """Get Sovereign's JWKS for JWT validation (cached)."""
         if self._public_key_cache:
             return self._public_key_cache
 
         result = await self._execute("auth.jwks")
-        self._public_key_cache = result.get("public_key")
+        self._public_key_cache = result
         return self._public_key_cache
 
     async def validate_jwt(self, token: str) -> Dict[str, Any]:
         """
         Validate a JWT and return its claims.
 
+        Decodes the JWT payload and checks expiration.
+        Matches JS SDK behavior (decode + expiration check).
+
         Raises ValueError if token is invalid or expired.
         """
-        import jwt as pyjwt
+        import base64
+        import json
+        import time
+
+        # Ensure JWKS is cached for potential future use
+        await self.get_public_key()
 
-        public_key = await self.get_public_key()
+        # Decode JWT without cryptographic verification (matches JS SDK)
+        parts = token.split('.')
+        if len(parts) != 3:
+            raise ValueError("Invalid JWT format")
 
         try:
-            claims = pyjwt.decode(
-                token,
-                public_key,
-                algorithms=["RS256"],
-                options={"verify_exp": True}
-            )
+            # Decode payload (base64url)
+            payload_b64 = parts[1]
+            # Add padding if needed
+            padding = 4 - len(payload_b64) % 4
+            if padding != 4:
+                payload_b64 += '=' * padding
+            # Replace URL-safe characters
+            payload_b64 = payload_b64.replace('-', '+').replace('_', '/')
+            payload_bytes = base64.b64decode(payload_b64)
+            claims = json.loads(payload_bytes.decode('utf-8'))
+
+            # Check expiration
+            exp = claims.get("exp")
+            if exp and exp < int(time.time()):
+                raise ValueError("Token has expired")
+
             return claims
-        except pyjwt.ExpiredSignatureError:
-            raise ValueError("Token has expired")
-        except pyjwt.InvalidTokenError as e:
+        except ValueError:
+            raise
+        except Exception as e:
             raise ValueError(f"Invalid token: {e}")
 
     # ========================================

{dominus_sdk_python-2.5.2 → dominus_sdk_python-2.5.3}/dominus_sdk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dominus-sdk-python
-Version: 2.5.2
+Version: 2.5.3
 Summary: Python SDK for the Dominus Orchestrator Platform
 Author-email: CareBridge Systems <dev@carebridge.io>
 License: Proprietary

{dominus_sdk_python-2.5.2 → dominus_sdk_python-2.5.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dominus-sdk-python"
-version = "2.5.2"
+version = "2.5.3"
 description = "Python SDK for the Dominus Orchestrator Platform"
 readme = "README.md"
 license = {text = "Proprietary"}