fastapi-startkit-auth 0.6.3__tar.gz → 0.7.0__tar.gz

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/CHANGELOG.md

@@ -66,7 +66,7 @@ Each item lists what changed and what to do.
   in `SessionConfig.csrf_exempt_paths`.
 - **OAuth client store defaults to `"database"`** (the ORM `oauth_clients`
   table). *Migrate:* publish and run the migrations, or set
-  `OAuth2Config(clients=OAuthClientsConfig(store="memory"))`.
+  `OAuth2Config(clients=OAuthClientConfig(store="memory"))`.
 - **The in-memory OAuth client store is async.** `InMemoryClientRepository`
   methods (`register`, `add`, `find`, `all`, `authenticate`, `revoke`,
   `delete`) are coroutines, like `OrmClientRepository`, and `store="memory"` now
@@ -74,6 +74,14 @@ Each item lists what changed and what to do.
   synchronous custom store passed with `store="instance"` keeps the sync grants.
   *Migrate:*
   `await` client-store calls and the `handle` / `issue_code` of those grants.
+- **Exception classes take an `Exception` suffix.** `AuthError` is now
+  `AuthException`, and every subclass gets the suffix (`InvalidToken` →
+  `InvalidTokenException`, `InsufficientScope` → `MissingScopeException`, and so
+  on). Wire error codes and HTTP statuses are unchanged. The old names remain as
+  deprecated aliases. *Migrate:* import the `*Exception` names.
+- **Bad password on the password grant raises `InvalidCredentialsException`**, a
+  subclass of `InvalidGrantException`. The response is unchanged (`invalid_grant`,
+  400), so existing `except InvalidGrantException` blocks still catch it.
 - **Persistent stores are named `"database"`.** `store="orm"` still works for
   sessions, API tokens, OAuth tokens and OAuth clients, but emits a
   `DeprecationWarning` and will be removed in a future release. *Migrate:*

fastapi_startkit_auth-0.7.0/PKG-INFO

@@ -0,0 +1,67 @@
+Metadata-Version: 2.4
+Name: fastapi-startkit-auth
+Version: 0.7.0
+Summary: Laravel-style authentication for FastAPI: OAuth2/JWT authorization server, cookie/session guard, SPA + CSRF protection, and Sanctum-style API tokens.
+Keywords: fastapi,oauth2,jwt,auth,passport,sanctum,authentication,authorization,security,tokens,session,cookie,csrf,spa,starter-kit
+Author: Bedram Tamang
+Author-email: Bedram Tamang <tmgbedu@gmail.com>
+License-Expression: MIT
+License-File: LICENSE.md
+Classifier: Development Status :: 4 - Beta
+Classifier: Framework :: FastAPI
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Internet :: WWW/HTTP :: Session
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Dist: fastapi>=0.110
+Requires-Dist: pyjwt>=2.10.1
+Requires-Dist: bcrypt>=4.1
+Requires-Dist: pydantic>=2
+Requires-Dist: python-multipart>=0.0.9
+Requires-Dist: masonite-orm>=2.18 ; extra == 'masoniteorm'
+Requires-Dist: fastapi-startkit[database]>=0.60,<1.0 ; python_full_version >= '3.12' and extra == 'startkit'
+Requires-Dist: pytest>=8 ; extra == 'test'
+Requires-Dist: pytest-asyncio>=0.23 ; extra == 'test'
+Requires-Dist: httpx>=0.27 ; extra == 'test'
+Requires-Dist: aiosqlite>=0.20 ; extra == 'test'
+Requires-Dist: asyncpg>=0.29 ; extra == 'test'
+Requires-Python: >=3.10
+Project-URL: Homepage, https://github.com/fastapi-startkit/fastapi-startkit-auth
+Project-URL: Repository, https://github.com/fastapi-startkit/fastapi-startkit-auth
+Project-URL: Issues, https://github.com/fastapi-startkit/fastapi-startkit-auth/issues
+Project-URL: Changelog, https://github.com/fastapi-startkit/fastapi-startkit-auth/blob/main/CHANGELOG.md
+Provides-Extra: masoniteorm
+Provides-Extra: startkit
+Provides-Extra: test
+Description-Content-Type: text/markdown
+
+# FastAPI Startkit Auth
+
+FastAPI Startkit Auth provides authentication for FastAPI: an OAuth2/JWT authorization server, cookie/session guards, SPA + CSRF protection, and API tokens.
+
+## Official Documentation
+
+Documentation for FastAPI Startkit Auth can be found on the [FastAPI Startkit website](https://fastapi-startkit.github.io/docs/authentication).
+
+## Contributing
+
+Thank you for considering contributing to FastAPI Startkit Auth! The contribution guide can be found in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## Code of Conduct
+
+In order to ensure that the FastAPI Startkit community is welcoming to all, please review and abide by the code of conduct in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## Security Vulnerabilities
+
+If you discover a security vulnerability within FastAPI Startkit Auth, please report it privately to the maintainers rather than opening a public issue. Details can be found in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## License
+
+FastAPI Startkit Auth is open-sourced software licensed under the [MIT license](LICENSE.md).

fastapi_startkit_auth-0.7.0/README.md

@@ -0,0 +1,23 @@
+# FastAPI Startkit Auth
+
+FastAPI Startkit Auth provides authentication for FastAPI: an OAuth2/JWT authorization server, cookie/session guards, SPA + CSRF protection, and API tokens.
+
+## Official Documentation
+
+Documentation for FastAPI Startkit Auth can be found on the [FastAPI Startkit website](https://fastapi-startkit.github.io/docs/authentication).
+
+## Contributing
+
+Thank you for considering contributing to FastAPI Startkit Auth! The contribution guide can be found in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## Code of Conduct
+
+In order to ensure that the FastAPI Startkit community is welcoming to all, please review and abide by the code of conduct in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## Security Vulnerabilities
+
+If you discover a security vulnerability within FastAPI Startkit Auth, please report it privately to the maintainers rather than opening a public issue. Details can be found in the [FastAPI Startkit documentation](https://fastapi-startkit.github.io/docs/authentication).
+
+## License
+
+FastAPI Startkit Auth is open-sourced software licensed under the [MIT license](LICENSE.md).

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [project]
 name = "fastapi-startkit-auth"
-version = "0.6.3"
+version = "0.7.0"
 description = "Laravel-style authentication for FastAPI: OAuth2/JWT authorization server, cookie/session guard, SPA + CSRF protection, and Sanctum-style API tokens."
 readme = "README.md"
 license = "MIT"
-license-files = ["LICENSE"]
+license-files = ["LICENSE.md"]
 keywords = [
     "fastapi",
     "oauth2",

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/__init__.py

@@ -18,7 +18,9 @@ from .config import (
     ApiTokenConfig,
     AuthConfig,
     OAuth2Config,
+    OAuthClientConfig,
     OAuthClientsConfig,
+    OAuthTokenConfig,
     OAuthTokensConfig,
     SessionConfig,
 )
@@ -31,18 +33,32 @@ from .dependencies import (
 )
 from .exceptions import (
     AccessDenied,
+    AccessDeniedException,
+    AuthenticationException,
     AuthError,
+    AuthException,
     CsrfTokenMismatch,
+    CsrfTokenMismatchException,
     InsufficientScope,
     InvalidClient,
+    InvalidClientException,
+    InvalidCredentialsException,
     InvalidGrant,
+    InvalidGrantException,
     InvalidScope,
+    InvalidScopeException,
     InvalidSession,
     InvalidTarget,
+    InvalidTargetException,
     InvalidToken,
+    InvalidTokenException,
+    MissingScopeException,
     UnauthorizedClient,
+    UnauthorizedClientException,
     UnsupportedGrantType,
+    UnsupportedGrantTypeException,
     UnsupportedResponseType,
+    UnsupportedResponseTypeException,
 )
 from .policy import GrantPolicy
 from .facade import AsyncAuth, Auth
@@ -62,13 +78,15 @@ from .sessions.models import SessionRecord
 from .sessions.store import InMemorySessionStore, SessionStore
 from .tokens.service import AsyncTokenService, TokenService
 
-__version__ = "0.6.3"
+__version__ = "0.7.0"
 
 __all__ = (
     "AuthConfig",
     "SessionConfig",
     "OAuth2Config",
+    "OAuthClientConfig",
     "OAuthClientsConfig",
+    "OAuthTokenConfig",
     "OAuthTokensConfig",
     "ApiTokenConfig",
     "AuthProvider",
@@ -85,23 +103,37 @@ __all__ = (
     "InMemoryClientRepository",
     "OrmClientRepository",
     "OrmSessionStore",
-    "AccessDenied",
-    "UnauthorizedClient",
-    "UnsupportedGrantType",
-    "UnsupportedResponseType",
+    "AccessDeniedException",
+    "UnauthorizedClientException",
+    "UnsupportedGrantTypeException",
+    "UnsupportedResponseTypeException",
     "current_user",
     "optional_user",
     "require_scopes",
     "require_abilities",
-    "AuthError",
+    "AuthException",
     "AsyncMisconfiguration",
+    "InvalidGrantException",
+    "InvalidClientException",
+    "InvalidCredentialsException",
+    "InvalidTokenException",
+    "MissingScopeException",
+    "InvalidScopeException",
+    "InvalidTargetException",
+    "GrantPolicy",
+    "AuthenticationException",
+    "CsrfTokenMismatchException",
+    "AccessDenied",
+    "UnauthorizedClient",
+    "UnsupportedGrantType",
+    "UnsupportedResponseType",
+    "AuthError",
     "InvalidGrant",
     "InvalidClient",
     "InvalidToken",
     "InsufficientScope",
     "InvalidScope",
     "InvalidTarget",
-    "GrantPolicy",
     "InvalidSession",
     "CsrfTokenMismatch",
     "Auth",

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/apitokens/manager.py

@@ -7,7 +7,7 @@ from dataclasses import dataclass
 from typing import Any
 
 from ..concurrency import call
-from ..exceptions import InvalidToken
+from ..exceptions import InvalidTokenException
 from .models import ApiTokenRecord
 from .repository import ApiTokenRepository, generate_token_secret, hash_token_secret
 
@@ -29,7 +29,7 @@ def _check_secret(record: ApiTokenRecord | None, secret: str) -> None:
     expected = record.token_hash if record is not None else _DUMMY_HASH
     matched = secrets.compare_digest(hash_token_secret(secret), expected)
     if record is None or not matched or record.expired:
-        raise InvalidToken(_GENERIC_FAILURE)
+        raise InvalidTokenException(_GENERIC_FAILURE)
 
 
 def _creation_fields(

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/commands/oauth2_client.py

@@ -5,7 +5,7 @@ from cleo.helpers import option
 from fastapi_startkit.console import Command
 
 from ..concurrency import call
-from ..exceptions import InvalidScope
+from ..exceptions import InvalidScopeException
 
 
 def _valid_redirect(uri: str | None) -> bool:
@@ -45,7 +45,7 @@ class OAuth2ClientCommand(Command):
             return 1
         try:
             manager.grant_policy.check_scopes(scopes)
-        except InvalidScope as error:
+        except InvalidScopeException as error:
             self.line_error(str(error))
             return 1
         client, secret = asyncio.run(

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/config/__init__.py

@@ -6,7 +6,9 @@ from .auth import (
     AuthConfig,
     OAuth2Config,
     OAuth2Guard,
+    OAuthClientConfig,
     OAuthClientsConfig,
+    OAuthTokenConfig,
     OAuthTokensConfig,
     SessionConfig,
     SessionGuard,
@@ -19,7 +21,9 @@ __all__ = (
     "AuthConfig",
     "SessionConfig",
     "OAuth2Config",
+    "OAuthClientConfig",
     "OAuthClientsConfig",
+    "OAuthTokenConfig",
     "OAuthTokensConfig",
     "ApiTokenConfig",
     "SessionGuard",

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/config/auth.py

@@ -8,14 +8,14 @@ from typing import Any, Literal, TypeVar
 ConfigT = TypeVar("ConfigT")
 
 
-def _canonical_store(store: str, section: str) -> str:
-    if store == "orm":
+def _canonical_driver(driver: str, section: str) -> str:
+    if driver == "orm":
         # stacklevel 4: this helper, __post_init__, the dataclass __init__, then the caller.
         warnings.warn(
-            f'{section}(store="orm") is deprecated; use store="database".', DeprecationWarning, stacklevel=4
+            f'{section}(driver="orm") is deprecated; use driver="database".', DeprecationWarning, stacklevel=4
         )
         return "database"
-    return store
+    return driver
 
 
 @dataclass
@@ -41,11 +41,11 @@ class ApiTokenGuard:
 class SessionConfig:
     """Cookie sessions, enabled by ``AuthSessionProvider``.
 
-    ``store`` is "memory", "database" (the ORM ``sessions`` table; "orm" is a
+    ``driver`` is "memory", "database" (the ORM ``sessions`` table; "orm" is a
     deprecated alias) or "instance" (a ready-made store under ``instance``).
     """
 
-    store: str = "memory"
+    driver: str = "memory"
     connection: str | None = None
     instance: Any = None
     cookie: str = "startkit_session"
@@ -63,7 +63,7 @@ class SessionConfig:
     csrf_exempt_paths: list[str] = field(default_factory=list)
 
     def __post_init__(self) -> None:
-        self.store = _canonical_store(self.store, "SessionConfig")
+        self.driver = _canonical_driver(self.driver, "SessionConfig")
 
 
 @dataclass
@@ -74,7 +74,7 @@ class ApiTokenConfig:
     accept the ``session_guard`` cookie session from those origins.
     """
 
-    store: str = "memory"
+    driver: str = "memory"
     connection: str | None = None
     instance: Any = None
     header: str = "Authorization"
@@ -84,7 +84,7 @@ class ApiTokenConfig:
     session_guard: str = "web"
 
     def __post_init__(self) -> None:
-        self.store = _canonical_store(self.store, "ApiTokenConfig")
+        self.driver = _canonical_driver(self.driver, "ApiTokenConfig")
 
     @property
     def stateful(self) -> bool:
@@ -92,25 +92,42 @@ class ApiTokenConfig:
 
 
 @dataclass
-class OAuthClientsConfig:
+class OAuthClientConfig:
     """Where OAuth clients live: "database" (the ORM ``oauth_clients`` table), "memory" or "instance"."""
 
-    store: str = "database"
+    driver: str = "database"
     connection: str | None = None
     instance: Any = None
 
     def __post_init__(self) -> None:
-        self.store = _canonical_store(self.store, "OAuthClientsConfig")
+        self.driver = _canonical_driver(self.driver, "OAuthClientConfig")
 
 
 @dataclass
-class OAuthTokensConfig:
-    store: str = "memory"
+class OAuthTokenConfig:
+    driver: str = "memory"
     connection: str | None = None
     instance: Any = None
 
     def __post_init__(self) -> None:
-        self.store = _canonical_store(self.store, "OAuthTokensConfig")
+        self.driver = _canonical_driver(self.driver, "OAuthTokenConfig")
+
+
+def _deprecated_alias(config_type: type[ConfigT], old_name: str) -> type[ConfigT]:
+    class Alias(config_type):
+        def __init__(self, *args: Any, **kwargs: Any) -> None:
+            warnings.warn(
+                f"{old_name} is deprecated; use {config_type.__name__}.", DeprecationWarning, stacklevel=2
+            )
+            super().__init__(*args, **kwargs)
+
+    Alias.__name__ = old_name
+    Alias.__qualname__ = old_name
+    return Alias
+
+
+OAuthClientsConfig = _deprecated_alias(OAuthClientConfig, "OAuthClientsConfig")
+OAuthTokensConfig = _deprecated_alias(OAuthTokenConfig, "OAuthTokensConfig")
 
 
 DEFAULT_GRANT_TYPES = ("authorization_code", "client_credentials", "refresh_token")
@@ -145,12 +162,12 @@ class OAuth2Config:
     require_redirect_uri: bool = True
     grant_types: list[str] = field(default_factory=lambda: list(DEFAULT_GRANT_TYPES))
     authorization_guard: str | None = None
-    tokens: OAuthTokensConfig = field(default_factory=OAuthTokensConfig)
-    clients: OAuthClientsConfig = field(default_factory=OAuthClientsConfig)
+    tokens: OAuthTokenConfig = field(default_factory=OAuthTokenConfig)
+    clients: OAuthClientConfig = field(default_factory=OAuthClientConfig)
 
     def __post_init__(self) -> None:
-        self.tokens = resolve_config(self.tokens, OAuthTokensConfig)
-        self.clients = resolve_config(self.clients, OAuthClientsConfig)
+        self.tokens = resolve_config(self.tokens, OAuthTokenConfig)
+        self.clients = resolve_config(self.clients, OAuthClientConfig)
 
 
 # v0.6 AuthConfig attributes that moved to OAuth2Config; still read, with a warning.

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/dependencies.py

@@ -6,7 +6,7 @@ from fastapi import Depends, Request
 from fastapi.security import OAuth2PasswordBearer
 
 from .concurrency import call
-from .exceptions import AuthError, InsufficientScope, InvalidToken
+from .exceptions import AuthenticationException, AuthException, InvalidTokenException, MissingScopeException
 from .guards.guard import AuthContext
 from .manager import AuthManager
 from .request_context import _auth_request
@@ -46,7 +46,7 @@ async def resolve_context(request: Request, manager: AuthManager, guard: str | N
         return await call(authenticate, request)
     token = _bearer_token(request)
     if not token:
-        raise InvalidToken("Not authenticated.")
+        raise AuthenticationException("Not authenticated.")
     return await call(resolved.user_from_token, token)
 
 
@@ -62,14 +62,14 @@ async def current_context(
 async def auth(context: AuthContext = Depends(current_context)) -> AuthContext:
     """Like ``current_context`` but also rejects user-less (client_credentials) tokens."""
     if context.user is None:
-        raise InvalidToken("This token is not associated with a user.")
+        raise InvalidTokenException("This token is not associated with a user.")
     return context
 
 
 def current_user(context: AuthContext = Depends(current_context)) -> Any:
     """Return the authenticated user model (401 if the token carries no user)."""
     if context.user is None:
-        raise InvalidToken("This token is not associated with a user.")
+        raise InvalidTokenException("This token is not associated with a user.")
     return context.user
 
 
@@ -81,7 +81,7 @@ async def optional_user(
     """Return the authenticated user, or ``None`` if unauthenticated/invalid."""
     try:
         return (await resolve_context(request, manager)).user
-    except AuthError:
+    except AuthException:
         return None
 
 
@@ -96,7 +96,7 @@ def require_scopes(*scopes: str, mode: str = "all") -> Callable[..., AuthContext
     def dependency(context: AuthContext = Depends(current_context)) -> AuthContext:
         ok = context.can_any(required) if mode == "any" else context.can_all(required)
         if not ok:
-            raise InsufficientScope(
+            raise MissingScopeException(
                 f"Requires scope(s): {' '.join(required)} (mode={mode})."
             )
         return context

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/exceptions.py

@@ -1,4 +1,4 @@
-"""Auth error hierarchy.
+"""Auth exception hierarchy.
 
 Error codes follow the OAuth2 error registry (RFC 6749 §5.2) so they can be
 surfaced verbatim in token-endpoint responses.
@@ -6,7 +6,7 @@ surfaced verbatim in token-endpoint responses.
 from __future__ import annotations
 
 
-class AuthError(Exception):
+class AuthException(Exception):
     """Base class for all authentication/authorization failures."""
 
     error = "invalid_request"
@@ -20,99 +20,124 @@ class AuthError(Exception):
         return {"error": self.error, "error_description": self.description}
 
 
-class InvalidRequest(AuthError):
+class InvalidRequestException(AuthException):
     """The request is missing a required parameter or is otherwise malformed."""
 
     error = "invalid_request"
     status_code = 400
 
 
-class InvalidClient(AuthError):
+class InvalidClientException(AuthException):
     """Client authentication failed (unknown client or bad secret)."""
 
     error = "invalid_client"
     status_code = 401
 
 
-class InvalidGrant(AuthError):
+class InvalidGrantException(AuthException):
     """The provided credentials, code, or refresh token are invalid or expired."""
 
     error = "invalid_grant"
     status_code = 400
 
 
-class UnsupportedGrantType(AuthError):
+class InvalidCredentialsException(InvalidGrantException):
+    """The username or password is incorrect (password grant)."""
+
+    error = "invalid_grant"
+    status_code = 400
+
+
+class UnsupportedGrantTypeException(AuthException):
     """The authorization server does not support this grant type."""
 
     error = "unsupported_grant_type"
     status_code = 400
 
 
-class UnauthorizedClient(AuthError):
+class UnauthorizedClientException(AuthException):
     """The client is not permitted to use this grant type."""
 
     error = "unauthorized_client"
     status_code = 400
 
 
-class InvalidToken(AuthError):
+class InvalidTokenException(AuthException):
     """The access token is expired, malformed, revoked, or otherwise invalid."""
 
     error = "invalid_token"
     status_code = 401
 
 
-class InvalidSession(AuthError):
+class AuthenticationException(AuthException):
     """The session cookie is missing, expired, or no longer valid."""
 
     error = "invalid_session"
     status_code = 401
 
 
-class CsrfTokenMismatch(AuthError):
+class CsrfTokenMismatchException(AuthException):
     """The request is missing a valid CSRF token for this session."""
 
     error = "csrf_token_mismatch"
     status_code = 403
 
 
-class InsufficientScope(AuthError):
+class MissingScopeException(AuthException):
     """The token does not carry the scopes required for this resource."""
 
     error = "insufficient_scope"
     status_code = 403
 
 
-class ThrottleException(AuthError):
+class ThrottleException(AuthException):
     """Too many requests for this action; retry later."""
 
     error = "throttled"
     status_code = 429
 
 
-class InvalidScope(AuthError):
+class InvalidScopeException(AuthException):
     """The requested scope is unknown or not allowed."""
 
     error = "invalid_scope"
     status_code = 400
 
 
-class InvalidTarget(AuthError):
+class InvalidTargetException(AuthException):
     """The requested resource is unknown or does not match the grant (RFC 8707)."""
 
     error = "invalid_target"
     status_code = 400
 
 
-class UnsupportedResponseType(AuthError):
+class UnsupportedResponseTypeException(AuthException):
     """The authorization endpoint only issues authorization codes."""
 
     error = "unsupported_response_type"
     status_code = 400
 
 
-class AccessDenied(AuthError):
+class AccessDeniedException(AuthException):
     """The resource owner did not approve the authorization request."""
 
     error = "access_denied"
     status_code = 400
+
+
+# Deprecated aliases for the names used before the Exception-suffix rename.
+# Remove them in the next major release.
+AuthError = AuthException
+InvalidRequest = InvalidRequestException
+InvalidClient = InvalidClientException
+InvalidGrant = InvalidGrantException
+UnsupportedGrantType = UnsupportedGrantTypeException
+UnauthorizedClient = UnauthorizedClientException
+InvalidToken = InvalidTokenException
+InvalidSession = AuthenticationException
+CsrfTokenMismatch = CsrfTokenMismatchException
+InsufficientScope = MissingScopeException
+InvalidScope = InvalidScopeException
+InvalidTarget = InvalidTargetException
+UnsupportedResponseType = UnsupportedResponseTypeException
+AccessDenied = AccessDeniedException

{fastapi_startkit_auth-0.6.3 → fastapi_startkit_auth-0.7.0}/src/fastapi_startkit_auth/facade.py

@@ -6,7 +6,7 @@ from fastapi import Depends, Request
 
 from .dependencies import _bearer_token, get_auth_manager, resolve_context
 from .concurrency import call, ensure_sync
-from .exceptions import AuthError
+from .exceptions import AuthException
 from .guards.session import AsyncSessionGuard, SessionGuard
 from .manager import AuthManager
 from .providers.base import user_is_active, user_is_active_async
@@ -26,7 +26,7 @@ class Auth:
         @api.post("/login")
         def login(payload: Credentials, auth: Auth = Depends(Auth.scoped)):
             if not auth.attempt(payload.model_dump()):
-                raise InvalidSession("Invalid credentials.")
+                raise AuthenticationException("Invalid credentials.")
             return {"ok": True}
 
         @api.post("/logout")
@@ -97,7 +97,7 @@ class Auth:
             if token is None:
                 return None
             return ensure_sync(resolved.user_from_token(token), "The guard's user_from_token").user
-        except AuthError:
+        except AuthException:
             return None
 
     @ScopedMethod
@@ -174,7 +174,7 @@ class AsyncAuth:
     async def user(self, guard: str | None = None) -> Any | None:
         try:
             return (await resolve_context(self._request, self._manager, guard)).user
-        except AuthError:
+        except AuthException:
             return None
 
     @ScopedMethod