eficens-iam-sdk 0.1.0__tar.gz

eficens_iam_sdk-0.1.0/PKG-INFO

@@ -0,0 +1,56 @@
+Metadata-Version: 2.4
+Name: eficens-iam-sdk
+Version: 0.1.0
+Summary: Python SDK for the Eficens IAM service
+Author: Eficens
+License: MIT
+Project-URL: Homepage, https://github.com/SheshadriChamarty/IAM
+Project-URL: Repository, https://github.com/SheshadriChamarty/IAM
+Project-URL: Issues, https://github.com/SheshadriChamarty/IAM/issues
+Keywords: iam,auth,authorization,rbac,eficens
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: httpx<1.0,>=0.28
+
+# Python IAM SDK
+
+Thin Python client for the IAM service.
+
+## Install
+
+```bash
+pip install eficens-iam-sdk
+```
+
+## Usage
+
+```python
+from iam_sdk import IamClient
+
+iam = IamClient(
+    base_url="https://api-iam.eficensittest.com/v1",
+    project_id="your-project-id",
+    api_key="your-project-api-key",
+)
+
+tokens = iam.login("user@example.com", "secret")
+profile = iam.introspect(tokens.access_token)
+allowed = iam.check("todo.tasks.create", tokens.access_token)
+```
+
+## Surface
+
+- `login(email, password)`
+- `refresh(refresh_token)`
+- `exchange_id_token(id_token)`
+- `introspect(access_token)`
+- `check(permission, access_token)`
+- `batch_check(checks, access_token)`

eficens_iam_sdk-0.1.0/README.md

@@ -0,0 +1,34 @@
+# Python IAM SDK
+
+Thin Python client for the IAM service.
+
+## Install
+
+```bash
+pip install eficens-iam-sdk
+```
+
+## Usage
+
+```python
+from iam_sdk import IamClient
+
+iam = IamClient(
+    base_url="https://api-iam.eficensittest.com/v1",
+    project_id="your-project-id",
+    api_key="your-project-api-key",
+)
+
+tokens = iam.login("user@example.com", "secret")
+profile = iam.introspect(tokens.access_token)
+allowed = iam.check("todo.tasks.create", tokens.access_token)
+```
+
+## Surface
+
+- `login(email, password)`
+- `refresh(refresh_token)`
+- `exchange_id_token(id_token)`
+- `introspect(access_token)`
+- `check(permission, access_token)`
+- `batch_check(checks, access_token)`

eficens_iam_sdk-0.1.0/pyproject.toml

@@ -0,0 +1,36 @@
+[build-system]
+requires = ["setuptools>=68", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "eficens-iam-sdk"
+version = "0.1.0"
+description = "Python SDK for the Eficens IAM service"
+readme = "README.md"
+license = { text = "MIT" }
+authors = [{ name = "Eficens" }]
+requires-python = ">=3.10"
+keywords = ["iam", "auth", "authorization", "rbac", "eficens"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Typing :: Typed",
+]
+dependencies = [
+  "httpx>=0.28,<1.0",
+]
+[project.urls]
+Homepage = "https://github.com/SheshadriChamarty/IAM"
+Repository = "https://github.com/SheshadriChamarty/IAM"
+Issues = "https://github.com/SheshadriChamarty/IAM/issues"
+
+[tool.setuptools]
+package-dir = {"" = "src"}
+
+[tool.setuptools.packages.find]
+where = ["src"]

eficens_iam_sdk-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

eficens_iam_sdk-0.1.0/src/eficens_iam_sdk.egg-info/PKG-INFO

@@ -0,0 +1,56 @@
+Metadata-Version: 2.4
+Name: eficens-iam-sdk
+Version: 0.1.0
+Summary: Python SDK for the Eficens IAM service
+Author: Eficens
+License: MIT
+Project-URL: Homepage, https://github.com/SheshadriChamarty/IAM
+Project-URL: Repository, https://github.com/SheshadriChamarty/IAM
+Project-URL: Issues, https://github.com/SheshadriChamarty/IAM/issues
+Keywords: iam,auth,authorization,rbac,eficens
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Typing :: Typed
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: httpx<1.0,>=0.28
+
+# Python IAM SDK
+
+Thin Python client for the IAM service.
+
+## Install
+
+```bash
+pip install eficens-iam-sdk
+```
+
+## Usage
+
+```python
+from iam_sdk import IamClient
+
+iam = IamClient(
+    base_url="https://api-iam.eficensittest.com/v1",
+    project_id="your-project-id",
+    api_key="your-project-api-key",
+)
+
+tokens = iam.login("user@example.com", "secret")
+profile = iam.introspect(tokens.access_token)
+allowed = iam.check("todo.tasks.create", tokens.access_token)
+```
+
+## Surface
+
+- `login(email, password)`
+- `refresh(refresh_token)`
+- `exchange_id_token(id_token)`
+- `introspect(access_token)`
+- `check(permission, access_token)`
+- `batch_check(checks, access_token)`

eficens_iam_sdk-0.1.0/src/eficens_iam_sdk.egg-info/SOURCES.txt

@@ -0,0 +1,9 @@
+README.md
+pyproject.toml
+src/eficens_iam_sdk.egg-info/PKG-INFO
+src/eficens_iam_sdk.egg-info/SOURCES.txt
+src/eficens_iam_sdk.egg-info/dependency_links.txt
+src/eficens_iam_sdk.egg-info/requires.txt
+src/eficens_iam_sdk.egg-info/top_level.txt
+src/iam_sdk/__init__.py
+src/iam_sdk/client.py

eficens_iam_sdk-0.1.0/src/eficens_iam_sdk.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

eficens_iam_sdk-0.1.0/src/eficens_iam_sdk.egg-info/requires.txt

@@ -0,0 +1 @@
+httpx<1.0,>=0.28

eficens_iam_sdk-0.1.0/src/eficens_iam_sdk.egg-info/top_level.txt

@@ -0,0 +1 @@
+iam_sdk

eficens_iam_sdk-0.1.0/src/iam_sdk/__init__.py

@@ -0,0 +1,3 @@
+from .client import IamClient, IamError, TokenResponse
+
+__all__ = ["IamClient", "IamError", "TokenResponse"]

eficens_iam_sdk-0.1.0/src/iam_sdk/client.py

@@ -0,0 +1,132 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from typing import Any
+
+import httpx
+
+
+class IamError(Exception):
+    def __init__(self, message: str, status_code: int, detail: Any = None):
+        super().__init__(message)
+        self.status_code = status_code
+        self.detail = detail
+
+
+@dataclass
+class TokenResponse:
+    access_token: str
+    refresh_token: str
+    token_type: str = "bearer"
+
+
+class IamClient:
+    def __init__(self, base_url: str, project_id: str, api_key: str | None = None, timeout: float = 10.0):
+        self.base_url = base_url.rstrip("/")
+        self.project_id = project_id
+        self.api_key = api_key
+        self.timeout = timeout
+
+    def login(self, email: str, password: str) -> TokenResponse:
+        data = self._request(
+            "/auth/token",
+            method="POST",
+            json={
+                "grant_type": "password",
+                "project_id": self.project_id,
+                "email": email,
+                "password": password,
+            },
+        )
+        return TokenResponse(**data)
+
+    def refresh(self, refresh_token: str) -> TokenResponse:
+        data = self._request(
+            "/auth/token",
+            method="POST",
+            json={
+                "grant_type": "refresh_token",
+                "refresh_token": refresh_token,
+            },
+        )
+        return TokenResponse(**data)
+
+    def exchange_id_token(self, id_token: str) -> TokenResponse:
+        data = self._request(
+            "/auth/token",
+            method="POST",
+            json={
+                "grant_type": "id_token",
+                "project_id": self.project_id,
+                "id_token": id_token,
+            },
+        )
+        return TokenResponse(**data)
+
+    def introspect(self, access_token: str) -> dict[str, Any]:
+        return self._request(
+            "/auth/introspect",
+            method="POST",
+            access_token=access_token,
+            require_api_key=True,
+        )
+
+    def check(self, permission: str, access_token: str) -> bool:
+        result = self._request(
+            "/authz/check",
+            method="POST",
+            access_token=access_token,
+            require_api_key=True,
+            include_project_header=True,
+            json={"permission": permission},
+        )
+        return bool(result["allowed"])
+
+    def batch_check(self, checks: list[dict[str, str]], access_token: str) -> dict[str, Any]:
+        return self._request(
+            "/authz/batch-check",
+            method="POST",
+            access_token=access_token,
+            require_api_key=True,
+            include_project_header=True,
+            json={"checks": checks},
+        )
+
+    def _request(
+        self,
+        path: str,
+        *,
+        method: str,
+        json: dict[str, Any] | None = None,
+        access_token: str | None = None,
+        require_api_key: bool = False,
+        include_project_header: bool = False,
+    ) -> dict[str, Any]:
+        headers: dict[str, str] = {}
+        if access_token:
+            headers["Authorization"] = f"Bearer {access_token}"
+        if require_api_key:
+            if not self.api_key:
+                raise IamError("API key is required for this operation", 0)
+            headers["X-Api-Key"] = self.api_key
+        if include_project_header:
+            headers["X-Project-Id"] = self.project_id
+
+        with httpx.Client(timeout=self.timeout) as client:
+            response = client.request(
+                method,
+                f"{self.base_url}{path}",
+                headers=headers,
+                json=json,
+            )
+
+        if response.is_error:
+            detail: Any
+            try:
+                detail = response.json()
+            except ValueError:
+                detail = None
+            message = detail.get("detail") if isinstance(detail, dict) else response.text or "IAM request failed"
+            raise IamError(str(message), response.status_code, detail)
+
+        return response.json()