ffbb-data-client 2.4.4__tar.gz → 2.4.6__tar.gz

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/CHANGELOG.md

@@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.4.6] - 2026-08-29
+
+### Performance & Modern Standards (FastAPI Lifespan)
+- **FastAPI Lifespan Context Manager**: Gestion propre du cycle de vie startup/shutdown avec fermeture asynchrone des sockets HTTP et pools de connexions lors de l'arrêt du serveur REST.
+
+## [2.4.5] - 2026-08-29
+
+### Security & Hardening (CodeQL / SSRF Pipeline Unification)
+- **SSRF Elimination (CWE-918)**: Unification de l'ensemble des requêtes HTTP (sync & async) au travers de `make_http_request_with_retry` et élimination des appels directs non encapsulés à `session.get()` / `session.post()`.
+
 ## [2.4.4] - 2026-08-29
 
 ### Security & Hardening (CodeQL / SSRF Resolution)

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ffbb-data-client
-Version: 2.4.4
+Version: 2.4.6
 Summary: API FFBB — SDK Python moderne & asynchrone pour les donnees officielles de la Federation Francaise de BasketBall (clubs, classements, calendriers, lives, Meilisearch). Alternative moderne a ffbb-api-client.
 Home-page: https://github.com/nickdesi/ffbb-data-client
 Author: nickdesi

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/RELEASE_NOTES.md

@@ -1,6 +1,20 @@
 # Release Notes - FFBB Data Client
 
-## Version 2.4.4 (Latest Release)
+## Version 2.4.6 (Latest Release)
+
+### 🚀 FastAPI Lifespan & Connection Cleanup
+- Implemented modern `@asynccontextmanager` lifespan on FastAPI app to guarantee non-leaking HTTP connection pools on server shutdown.
+
+---
+
+## Version 2.4.5
+
+### 🔒 Complete CodeQL Pipeline Unification
+- **Zero Raw Sinks**: All sync and async requests now route through sanitized retry wrappers.
+
+---
+
+## Version 2.4.4
 
 ### 🔒 Complete CodeQL SSRF Mitigation (CWE-918)
 - **SSRF Taint Graph Elimination**: Reconstructed HTTP request targets via parsed components in `http_requests_utils.py` and `retry_utils.py`.

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/src/ffbb_data_client/api.py

@@ -7,6 +7,7 @@ and hosts the official documentation website at /.
 from __future__ import annotations
 
 import re
+from contextlib import asynccontextmanager
 from datetime import datetime
 from pathlib import Path
 from typing import Any
@@ -19,6 +20,7 @@ from fastapi.responses import FileResponse, HTMLResponse
 from fastapi.staticfiles import StaticFiles
 
 from .clients.ffbb_data_client import FFBBDataClient
+from .utils.retry_utils import aclose_default_clients
 
 # Directories
 _BASE_DIR = Path(__file__).resolve().parent.parent.parent
@@ -26,12 +28,21 @@ _WEBSITE_DIR = _BASE_DIR / "website"
 if not _WEBSITE_DIR.exists():
     _WEBSITE_DIR = Path("/app/website")
 
+
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    """Lifespan context manager for startup and graceful shutdown (FastAPI/Context7 standard)."""
+    yield
+    await aclose_default_clients()
+
+
 app = FastAPI(
     title="FFBB Data Client API",
     description="API REST moderne & asynchrone pour les données officielles de la Fédération Française de BasketBall.",
     version="1.0.0",
     docs_url="/docs",
     redoc_url="/redoc",
+    lifespan=lifespan,
 )
 
 # Enable CORS for all origins

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/src/ffbb_data_client/helpers/http_requests_utils.py

@@ -182,53 +182,30 @@ def http_get(
         logger.debug(f"Making GET request to {url}")
         start_time = time.time()
 
-    # Use retry logic if configured
-    if retry_config and timeout_config:
-        response = make_http_request_with_retry(
-            "GET",
-            url,
-            headers,
-            cached_session=cached_session,
-            retry_config=retry_config,
-            timeout_config=timeout_config,
-            debug=debug,
-        )
-    else:
-        # Fallback to reusable client to keep connections warm across calls.
-        if cached_session:
-            response = cached_session.get(
-                url, headers=headers, timeout=_build_timeout(timeout_config or timeout)
-            )
-        else:
-            response = _get_default_sync_client(timeout).get(
-                url, headers=headers, timeout=_build_timeout(timeout_config or timeout)
-            )
+    t_config = timeout_config or TimeoutConfig(total_timeout=timeout)
+    r_config = retry_config or RetryConfig(max_attempts=0)
+
+    response = make_http_request_with_retry(
+        "GET",
+        url,
+        headers,
+        cached_session=cached_session,
+        retry_config=r_config,
+        timeout_config=t_config,
+        debug=debug,
+    )
 
     if response.status_code in (401, 403) and "Authorization" in headers:
         if _handle_token_refresh(url, headers, debug):
-            if retry_config and timeout_config:
-                response = make_http_request_with_retry(
-                    "GET",
-                    url,
-                    headers,
-                    cached_session=cached_session,
-                    retry_config=retry_config,
-                    timeout_config=timeout_config,
-                    debug=debug,
-                )
-            else:
-                if cached_session:
-                    response = cached_session.get(
-                        url,
-                        headers=headers,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
-                else:
-                    response = _get_default_sync_client(timeout).get(
-                        url,
-                        headers=headers,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
+            response = make_http_request_with_retry(
+                "GET",
+                url,
+                headers,
+                cached_session=cached_session,
+                retry_config=r_config,
+                timeout_config=t_config,
+                debug=debug,
+            )
 
     if debug:
         end_time = time.time()
@@ -272,63 +249,32 @@ def http_post(
         logger.debug(f"Making POST request to {url} {data_str}")
         start_time = time.time()
 
-    # Use retry logic if configured
-    if retry_config and timeout_config:
-        response = make_http_request_with_retry(
-            "POST",
-            url,
-            headers,
-            data=data,
-            cached_session=cached_session,
-            retry_config=retry_config,
-            timeout_config=timeout_config,
-            debug=debug,
-        )
-    else:
-        # Fallback to reusable client to keep connections warm across calls.
-        if cached_session:
-            response = cached_session.post(
-                url,
-                headers=headers,
-                json=data,
-                timeout=_build_timeout(timeout_config or timeout),
-            )
-        else:
-            response = _get_default_sync_client(timeout).post(
-                url,
-                headers=headers,
-                json=data,
-                timeout=_build_timeout(timeout_config or timeout),
-            )
+    t_config = timeout_config or TimeoutConfig(total_timeout=timeout)
+    r_config = retry_config or RetryConfig(max_attempts=0)
+
+    response = make_http_request_with_retry(
+        "POST",
+        url,
+        headers,
+        data=data,
+        cached_session=cached_session,
+        retry_config=r_config,
+        timeout_config=t_config,
+        debug=debug,
+    )
 
     if response.status_code in (401, 403) and "Authorization" in headers:
         if _handle_token_refresh(url, headers, debug):
-            if retry_config and timeout_config:
-                response = make_http_request_with_retry(
-                    "POST",
-                    url,
-                    headers,
-                    data=data,
-                    cached_session=cached_session,
-                    retry_config=retry_config,
-                    timeout_config=timeout_config,
-                    debug=debug,
-                )
-            else:
-                if cached_session:
-                    response = cached_session.post(
-                        url,
-                        headers=headers,
-                        json=data,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
-                else:
-                    response = _get_default_sync_client(timeout).post(
-                        url,
-                        headers=headers,
-                        json=data,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
+            response = make_http_request_with_retry(
+                "POST",
+                url,
+                headers,
+                data=data,
+                cached_session=cached_session,
+                retry_config=r_config,
+                timeout_config=t_config,
+                debug=debug,
+            )
 
     if debug:
         end_time = time.time()
@@ -437,53 +383,30 @@ async def http_get_async(
         logger.debug(f"Making async GET request to {url}")
         start_time = time.time()
 
-    # Use retry logic if configured
-    if retry_config and timeout_config:
-        response = await make_http_request_with_retry_async(
-            "GET",
-            url,
-            headers,
-            cached_session=cached_session,
-            retry_config=retry_config,
-            timeout_config=timeout_config,
-            debug=debug,
-        )
-    else:
-        # Fallback to reusable async client to keep connections warm across calls.
-        if cached_session:
-            response = await cached_session.get(
-                url, headers=headers, timeout=_build_timeout(timeout_config or timeout)
-            )
-        else:
-            response = await (await _get_default_async_client(timeout)).get(
-                url, headers=headers, timeout=_build_timeout(timeout_config or timeout)
-            )
+    t_config = timeout_config or TimeoutConfig(total_timeout=timeout)
+    r_config = retry_config or RetryConfig(max_attempts=0)
+
+    response = await make_http_request_with_retry_async(
+        "GET",
+        url,
+        headers,
+        cached_session=cached_session,
+        retry_config=r_config,
+        timeout_config=t_config,
+        debug=debug,
+    )
 
     if response.status_code in (401, 403) and "Authorization" in headers:
         if _handle_token_refresh(url, headers, debug):
-            if retry_config and timeout_config:
-                response = await make_http_request_with_retry_async(
-                    "GET",
-                    url,
-                    headers,
-                    cached_session=cached_session,
-                    retry_config=retry_config,
-                    timeout_config=timeout_config,
-                    debug=debug,
-                )
-            else:
-                if cached_session:
-                    response = await cached_session.get(
-                        url,
-                        headers=headers,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
-                else:
-                    response = await (await _get_default_async_client(timeout)).get(
-                        url,
-                        headers=headers,
-                        timeout=_build_timeout(timeout_config or timeout),
-                    )
+            response = await make_http_request_with_retry_async(
+                "GET",
+                url,
+                headers,
+                cached_session=cached_session,
+                retry_config=r_config,
+                timeout_config=t_config,
+                debug=debug,
+            )
 
     if debug:
         end_time = time.time()

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/src/ffbb_data_client.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ffbb-data-client
-Version: 2.4.4
+Version: 2.4.6
 Summary: API FFBB — SDK Python moderne & asynchrone pour les donnees officielles de la Federation Francaise de BasketBall (clubs, classements, calendriers, lives, Meilisearch). Alternative moderne a ffbb-api-client.
 Home-page: https://github.com/nickdesi/ffbb-data-client
 Author: nickdesi

{ffbb_data_client-2.4.4 → ffbb_data_client-2.4.6}/src/ffbb_data_client.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.4.4",
+  "tag": "2.4.6",
   "distance": 0,
-  "node": "g292acf54067b4a7dfea2c53e9ef4bd655d9434fc",
+  "node": "g8d5b32a68ca61206b31b4a637fa74be95d173f57",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-08-29"