elements-api 2025.11.4.dev0__tar.gz → 2025.11.5__tar.gz

{elements_api-2025.11.4.dev0/src/py/elements_api.egg-info → elements_api-2025.11.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: elements-api
-Version: 2025.11.4.dev0
+Version: 2025.11.5
 Summary: Elements API Client
 License-File: LICENSE
 Requires-Dist: grpcio

{elements_api-2025.11.4.dev0 → elements_api-2025.11.5}/src/py/elements_api/elements_base_api.py

@@ -31,16 +31,21 @@ def json_from_jwt(jwt_token: str) -> dict[str, object]:
         return {}
 
 
-def is_token_expiring(jwt_token_str, within_secs=300) -> bool:
-    claims = json_from_jwt(jwt_token_str)
+def is_token_expiring(jwt_token: str, within_secs=300) -> bool:
+    claims = json_from_jwt(jwt_token)
     return claims.get('exp') < time.time() + within_secs
 
 
-def is_offline_token(jwt_token_str) -> bool:
-    claims = json_from_jwt(jwt_token_str)
+def is_offline_token(jwt_token: str) -> bool:
+    claims = json_from_jwt(jwt_token)
     return claims.get('typ') == 'Offline'
 
 
+def get_token_issuing_client(jwt_token: str):
+    claims = json_from_jwt(jwt_token)
+    return claims.get('azp')
+
+
 def check_access_token(func) -> bool:
     # decorator
     @wraps(func)
@@ -62,10 +67,8 @@ class ElementsBaseApi(ABC):
         self._root_certificates_file = root_certificates_file
         self._channel = None
         self.api_token: Optional[str] = os.environ.get(API_TOKEN, "").strip() if api_token is None else api_token.strip()
-
         # check if this is an offline token, which is a refresh token, and obtain access tokens from it periodically
-        self.is_offline_token: bool = is_offline_token(self.api_token)
-        self.access_token: Optional[str] = self.api_token if not is_offline_token else None
+        self.access_token: Optional[str] = self.api_token if not is_offline_token(self.api_token) else None
         self.access_token_expiration_threshold = int(os.getenv('ACCESS_TOKEN_EXPIRATION_THRESHOLD', '300'))
         # (token will be renewed when it has less than this threshhold before expiry)
         self.options = [('grpc.max_send_message_length', -1),
@@ -158,7 +161,6 @@ class ElementsBaseApi(ABC):
         if self.api_token and not is_offline_token(self.api_token):
             return False  # in which case it is an access token, and it was not refreshed
         # check expiration on the access_token
-
         if self.access_token and not is_token_expiring(
             self.access_token,
             within_secs=self.access_token_expiration_threshold
@@ -174,8 +176,8 @@ class ElementsBaseApi(ABC):
             f'{oidc_base_url}/realms/{oidc_realm}/protocol/openid-connect/token')
 
         # note: api token is an offline token, which is a special refresh token.
-        oidc_client_id = os.getenv('OIDC_CLIENT_ID', 'login-ui')
-        oidc_client_secret = os.getenv('OIDC_CLIENT_SECRET')
+        oidc_client_id = get_token_issuing_client(self.api_token)
+        # there will be no secret since typically a login client issues this token
 
         request_json = {
             'refresh_token': self.api_token,
@@ -183,8 +185,6 @@ class ElementsBaseApi(ABC):
             'grant_type': 'refresh_token',
             'scope': 'openid offline_access'
         }
-        if oidc_client_secret:
-            request_json['client_secret'] = oidc_client_secret
 
         response = requests.post(
             oidc_token_endpoint,

{elements_api-2025.11.4.dev0 → elements_api-2025.11.5/src/py/elements_api.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: elements-api
-Version: 2025.11.4.dev0
+Version: 2025.11.5
 Summary: Elements API Client
 License-File: LICENSE
 Requires-Dist: grpcio