earthaccess-auth 0.1.0b2__tar.gz

earthaccess_auth-0.1.0b2/.codespellignore

@@ -0,0 +1,2 @@
+ges
+cach

earthaccess_auth-0.1.0b2/.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,23 @@
+---
+name: Bug report
+about: Something in earthaccess-auth doesn't work as documented
+labels: bug
+---
+
+## What happened
+
+<!-- What did you do, what did you expect, and what happened instead? -->
+
+## Reproduction
+
+```python
+# Minimal code to reproduce. Please REDACT credentials, tokens, and
+# anything from your .netrc — never paste an EARTHDATA_TOKEN value.
+```
+
+## Environment
+
+- `earthaccess-auth` version:
+- Python version:
+- Operating system:
+- Installed extras (`fsspec`/`obstore`), if any:

earthaccess_auth-0.1.0b2/.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,18 @@
+---
+name: Feature request
+about: Suggest an improvement to earthaccess-auth
+labels: enhancement
+---
+
+## The problem
+
+<!-- What are you trying to do that the package doesn't support today? -->
+
+## Proposed solution
+
+<!-- What would the API or behavior look like? -->
+
+## Alternatives considered
+
+<!-- Note: features beyond EDL auth (search, download) belong in
+     https://github.com/earthaccess-dev/earthaccess instead. -->

earthaccess_auth-0.1.0b2/.github/dependabot.yml

@@ -0,0 +1,25 @@
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      uv-dependencies:
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 14
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      gha-dependencies:
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 14

earthaccess_auth-0.1.0b2/.github/pull_request_template.md

@@ -0,0 +1,9 @@
+<!-- Thanks for contributing! Please see CONTRIBUTING.md. -->
+
+## What this PR does
+
+## Checklist
+
+- [ ] Tests added or updated
+- [ ] `CHANGELOG.md` entry added (for user-visible changes)
+- [ ] `uv run pytest`, `uv run mypy`, and `uvx prek run -a` pass locally

earthaccess_auth-0.1.0b2/.github/workflows/docs.yml

@@ -0,0 +1,55 @@
+# Docs are built and hosted by Read the Docs (including pull request
+# previews); this job is only the strict-build gate for CI.
+name: Docs
+
+on:
+  push:
+    branches:
+      - main
+    paths:
+      - "docs/**"
+      - "src/**"
+      - "examples/**"
+      - "mkdocs.yml"
+      - "pyproject.toml"
+      - ".github/workflows/docs.yml"
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - "docs/**"
+      - "src/**"
+      - "examples/**"
+      - "mkdocs.yml"
+      - "pyproject.toml"
+      - ".github/workflows/docs.yml"
+  workflow_dispatch:
+
+concurrency:
+  group: docs-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Test docs build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: docs
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Build docs (strict)
+        run: uv run --locked --group docs mkdocs build --strict

earthaccess_auth-0.1.0b2/.github/workflows/publish.yml

@@ -0,0 +1,39 @@
+name: Publish
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build package
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+          # hatch-vcs derives the version from the tag, so the full history
+          # and tags must be present.
+          fetch-depth: 0
+
+      - uses: hynek/build-and-inspect-python-package@2abe76da66d0a6a4a227101f9348ee855797cfa5 # v3.0.1
+
+  publish:
+    name: Publish to PyPI
+    needs: ["build"]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/earthaccess-auth
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: Packages
+          path: dist
+
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1

earthaccess_auth-0.1.0b2/.github/workflows/scorecard.yml

@@ -0,0 +1,41 @@
+name: OpenSSF Scorecard
+
+on:
+  branch_protection_rule:
+  schedule:
+    # Tuesdays at 07:20 UTC.
+    - cron: "20 7 * * 2"
+  push:
+    branches:
+      - main
+
+permissions: read-all
+
+jobs:
+  analysis:
+    name: Scorecard analysis
+    runs-on: ubuntu-latest
+    permissions:
+      # Needed to upload the results to the code-scanning dashboard and to
+      # publish them to the OpenSSF REST API.
+      security-events: write
+      id-token: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Run analysis
+        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          publish_results: true
+
+      - name: Upload artifact
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5

earthaccess_auth-0.1.0b2/.github/workflows/sync-bucket-registry.yml

@@ -0,0 +1,80 @@
+name: Sync S3 bucket registry from CMR
+
+on:
+  schedule:
+    # Mondays at 06:00 UTC.
+    - cron: "0 6 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  sync:
+    name: Sweep CMR and diff against the vendored bucket registry
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # only the sync branch, via create-pull-request below
+      pull-requests: write
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: sync-bucket-registry
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Install package
+        run: uv sync --locked --no-default-groups
+
+      - name: Sweep CMR for the current bucket -> endpoint mapping
+        run: |
+          uv run --no-sync python scripts/sync_bucket_registry.py \
+            --output scripts/bucket_registry.latest.json
+
+      - name: Diff against the vendored BUCKET_ENDPOINTS (for the PR body)
+        id: diff
+        run: |
+          uv run --no-sync python scripts/sync_bucket_registry.py \
+            --check > drift.txt || true
+          {
+            echo "summary<<EOF"
+            cat drift.txt
+            echo "EOF"
+          } >> "$GITHUB_OUTPUT"
+
+      # bucket_registry.latest.json only changes when the live CMR sweep's
+      # output differs from what's committed, so this naturally no-ops (no
+      # PR opened) when there's no drift.
+      - name: Open a PR if the sweep changed
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        with:
+          commit-message: "chore: update CMR bucket registry snapshot"
+          title: "chore: CMR bucket registry drift detected"
+          body: |
+            The weekly CMR sweep (`scripts/sync_bucket_registry.py`) found a
+            different bucket -> `s3credentials` endpoint mapping than what's
+            committed in `scripts/bucket_registry.latest.json`.
+
+            Diff against the vendored `BUCKET_ENDPOINTS` in
+            `src/earthaccess_auth/daac.py`:
+
+            ```
+            ${{ steps.diff.outputs.summary }}
+            ```
+
+            If this reflects a real, intentional CMR change (new mission, new
+            DAAC, endpoint migration), update `BUCKET_ENDPOINTS` in `daac.py` by
+            hand to match before merging — see
+            `docs/explanation/cmr-s3-buckets.md`.
+          branch: sync/bucket-registry
+          delete-branch: true
+          add-paths: scripts/bucket_registry.latest.json

earthaccess_auth-0.1.0b2/.github/workflows/test.yml

@@ -0,0 +1,118 @@
+name: Tests
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: lint
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Run pre-commit hooks via prek
+        env:
+          # Guards interactive commits, not CI checkouts of main itself.
+          SKIP: no-commit-to-branch
+        run: uvx prek@0.4.13 run --all-files --show-diff-on-failure
+
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: typecheck
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12"
+
+      - name: Typecheck
+        run: uv run --locked --group typecheck mypy
+
+  core-tests:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.12", "3.13"]
+      fail-fast: false
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: core-${{ matrix.python-version }}
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      # No extras on purpose: this env must contain only the auth core's
+      # runtime deps plus the test runner, to prove nothing heavy leaks in.
+      # Adapter tests self-skip via importorskip.
+      - name: Install auth core with minimal dependencies
+        run: uv sync --locked --no-default-groups --group test
+
+      - name: Test
+        run: uv run --no-sync pytest --verbose --color=yes --tb=native --cov=earthaccess_auth --cov-report=term-missing
+
+  extras-tests:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.12", "3.13"]
+      fail-fast: false
+
+    steps:
+      - name: Checkout sources
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        with:
+          enable-cache: true
+          cache-suffix: extras-${{ matrix.python-version }}
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install auth core with adapter extras
+        run: uv sync --locked --no-default-groups --group test --extra fsspec --extra obstore
+
+      - name: Test
+        run: uv run --no-sync pytest --verbose --color=yes --tb=native --cov=earthaccess_auth --cov-report=term-missing

earthaccess_auth-0.1.0b2/.github/workflows/zizmor.yml

@@ -0,0 +1,28 @@
+name: "GitHub Actions Security Analysis with zizmor 🌈"
+
+on:
+  push:
+    branches:
+      - "main"
+    paths:
+      - ".github/workflows/*"
+  pull_request:
+    paths:
+      - ".github/workflows/*"
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: "Run zizmor 🌈"
+    runs-on: "ubuntu-latest"
+    permissions:
+      security-events: "write" # Required for upload-sarif (used by zizmor-action) to upload SARIF files.
+    steps:
+      - name: "Checkout repository"
+        uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: "Run zizmor 🌈"
+        uses: "zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054" # v0.6.2

earthaccess_auth-0.1.0b2/.gitignore

@@ -0,0 +1,22 @@
+__pycache__/
+*.py[cod]
+*.egg-info/
+build/
+dist/
+site/
+.venv/
+venv/
+.env
+.python-version
+.mypy_cache/
+.pytest_cache/
+.ruff_cache/
+.nox/
+.coverage
+.coverage.*
+coverage.xml
+htmlcov/
+src/earthaccess_auth/_version.py
+.DS_Store
+.idea/
+.vscode/

earthaccess_auth-0.1.0b2/.pre-commit-config.yaml

@@ -0,0 +1,69 @@
+ci:
+  autoupdate_schedule: "quarterly"
+  autoupdate_commit_msg: "chore: update pre-commit hooks"
+  autofix_prs: false # Comment "pre-commit.ci autofix" on a PR to trigger
+
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      # Validate format
+      - id: check-yaml
+      - id: check-toml
+      - id: check-json
+      # Check for common mistakes
+      - id: check-added-large-files
+      - id: check-case-conflict
+      - id: check-merge-conflict
+      - id: check-executables-have-shebangs
+      - id: check-shebang-scripts-are-executable
+      - id: check-symlinks
+      - id: check-vcs-permalinks
+      - id: destroyed-symlinks
+      - id: detect-private-key
+      - id: end-of-file-fixer
+      - id: mixed-line-ending
+      - id: no-commit-to-branch # protects `main` by default
+      - id: trailing-whitespace
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.16.2
+    hooks:
+      - id: ruff
+        args: ["--fix", "--show-fixes", "--exit-non-zero-on-fix"]
+      - id: ruff-format
+
+  - repo: https://github.com/astral-sh/uv-pre-commit
+    rev: "0.11.26"
+    hooks:
+      # Asserts that the lockfile is valid for pyproject.toml.
+      # If it fails, update the lockfile by running:
+      #
+      #   prek run -a --hook-stage manual uv-lock
+      #
+      # Or, if you have `uv` installed, run `uv lock`.
+      - id: uv-lock
+        args: ["--locked", "--offline"]
+      - id: uv-lock
+        stages: ["manual"]
+
+  - repo: https://github.com/google/yamlfmt
+    rev: v0.21.0
+    hooks:
+      - id: yamlfmt
+        entry: python scripts/yamlfmt.py
+        types_or: [yaml]
+
+  - repo: https://github.com/citation-file-format/cffconvert
+    rev: "054bda51dbe278b3e86f27c890e3f3ac877d616c"
+    hooks:
+      - id: "validate-cff"
+        args:
+          - "--verbose"
+
+  - repo: https://github.com/codespell-project/codespell
+    rev: "v2.4.2"
+    hooks:
+      - id: "codespell"
+        exclude: ".codespellignore|tests/.*"
+        additional_dependencies: ["tomli"]

earthaccess_auth-0.1.0b2/.readthedocs.yaml

@@ -0,0 +1,19 @@
+# See https://docs.readthedocs.io/en/stable/config-file/v2.html for details
+version: 2
+
+build:
+  os: ubuntu-22.04
+  tools:
+    python: "3.12"
+  jobs:
+    pre_create_environment:
+      - asdf plugin add uv
+      - asdf install uv latest
+      - asdf global uv latest
+    create_environment:
+      - uv venv "${READTHEDOCS_VIRTUALENV_PATH}"
+    install:
+      - UV_PROJECT_ENVIRONMENT="${READTHEDOCS_VIRTUALENV_PATH}" uv sync --frozen --group docs
+
+mkdocs:
+  configuration: mkdocs.yml

earthaccess_auth-0.1.0b2/.yamlfmt.yml

@@ -0,0 +1,3 @@
+formatter:
+  retain_line_breaks_single: true
+  scan_folded_as_literal: true

earthaccess_auth-0.1.0b2/CHANGELOG.md

@@ -0,0 +1,37 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Common Changelog](https://common-changelog.org/)
+and this project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+`earthaccess-auth` was extracted from
+[earthaccess](https://github.com/earthaccess-dev/earthaccess) — see its
+changelog for history predating the extraction.
+
+## [Unreleased]
+
+### Added
+
+- Initial release. Extracted from `earthaccess`: EDL login (`login`, `Auth`),
+  the DAAC registry, systems (`PROD`/`UAT`), and the two login exceptions.
+  Optional `fsspec` and `obstore` extras add an authenticated HTTPS session
+  and an S3 credential provider, respectively.
+  ([#1423](https://github.com/earthaccess-dev/earthaccess/pull/1423))
+
+### Changed
+
+Behavior differences from the implementation extracted out of `earthaccess`:
+
+- `Auth.login` raises `ValueError` for unknown strategy names instead of
+  silently returning an unauthenticated instance.
+- `Auth.login` on an already-authenticated instance is now a no-op unless a
+  different `system` is requested.
+- `Auth.get_s3_credentials` raises instead of returning an empty dict:
+  `ValueError` when unauthenticated, and the new
+  `S3CredentialsRequestFailure` when the `s3credentials` endpoint rejects
+  the request (e.g. unaccepted EULA).
+- `find_provider_by_shortname` applies a 15-second timeout to its CMR
+  request instead of potentially hanging forever.
+- Python 3.12 or newer is required.
+
+[Unreleased]: https://github.com/earthaccess-dev/earthaccess-auth/commits/main/

earthaccess_auth-0.1.0b2/CITATION.cff

@@ -0,0 +1,19 @@
+cff-version: 1.2.0
+message: "Please cite this software using these metadata."
+
+title: "earthaccess-auth"
+abstract: "NASA Earthdata Login (EDL) authentication core, extracted from earthaccess"
+type: "software"
+license: "MIT"
+repository-code: "https://github.com/earthaccess-dev/earthaccess-auth"
+url: "https://earthaccess-auth.readthedocs.io/"
+contact:
+  - name: "The earthaccess community"
+    website: "https://github.com/earthaccess-dev/earthaccess/discussions"
+authors:
+  - name: "The earthaccess community"
+keywords:
+  - "authentication"
+  - "NASA"
+  - "Earthdata"
+  - "EDL"