fractal-server 2.17.0a1__py3-none-any.whl → 2.17.0a2__py3-none-any.whl

fractal_server/__init__.py

@@ -1 +1 @@
-__VERSION__ = "2.17.0a1"
+__VERSION__ = "2.17.0a2"

fractal_server/app/routes/api/__init__.py

@@ -9,6 +9,7 @@ from fractal_server.app.models import UserOAuth
 from fractal_server.app.routes.auth import current_active_superuser
 from fractal_server.config import get_db_settings
 from fractal_server.config import get_email_settings
+from fractal_server.config import get_oauth_settings
 from fractal_server.config import get_settings
 from fractal_server.syringe import Inject
 
@@ -45,3 +46,11 @@ async def view_email_settings(
 ):
     settings = Inject(get_email_settings)
     return settings.model_dump()
+
+
+@router_api.get("/settings/oauth/")
+async def view_oauth_settings(
+    user: UserOAuth = Depends(current_active_superuser),
+):
+    settings = Inject(get_oauth_settings)
+    return settings.model_dump()

fractal_server/app/routes/auth/oauth.py

@@ -1,50 +1,56 @@
 from fastapi import APIRouter
+from httpx_oauth.clients.github import GitHubOAuth2
+from httpx_oauth.clients.google import GoogleOAuth2
+from httpx_oauth.clients.openid import OpenID
 
 from . import cookie_backend
 from . import fastapi_users
-from ....config import get_settings
-from ....syringe import Inject
+from fractal_server.config import get_oauth_settings
+from fractal_server.config import get_settings
+from fractal_server.config import OAuthSettings
+from fractal_server.syringe import Inject
 
-router_oauth = APIRouter()
 
+def _create_client_github(cfg: OAuthSettings) -> GitHubOAuth2:
+    return GitHubOAuth2(
+        client_id=cfg.OAUTH_CLIENT_ID.get_secret_value(),
+        client_secret=cfg.OAUTH_CLIENT_SECRET.get_secret_value(),
+    )
 
-# OAUTH CLIENTS
 
-# NOTE: settings.OAUTH_CLIENTS are collected by
-# Settings.collect_oauth_clients(). If no specific client is specified in the
-# environment variables (e.g. by setting OAUTH_FOO_CLIENT_ID and
-# OAUTH_FOO_CLIENT_SECRET), this list is empty
+def _create_client_google(cfg: OAuthSettings) -> GoogleOAuth2:
+    return GoogleOAuth2(
+        client_id=cfg.OAUTH_CLIENT_ID.get_secret_value(),
+        client_secret=cfg.OAUTH_CLIENT_SECRET.get_secret_value(),
+    )
 
-# Note: dependency injection should be wrapped within a function call to make
-# it truly lazy. This function could then be called on startup of the FastAPI
-# app (cf. fractal_server.main)
-settings = Inject(get_settings)
 
-for client_config in settings.OAUTH_CLIENTS_CONFIG:
-    client_name = client_config.CLIENT_NAME.lower()
+def _create_client_oidc(cfg: OAuthSettings) -> OpenID:
+    return OpenID(
+        client_id=cfg.OAUTH_CLIENT_ID.get_secret_value(),
+        client_secret=cfg.OAUTH_CLIENT_SECRET.get_secret_value(),
+        openid_configuration_endpoint=cfg.OAUTH_OIDC_CONFIG_ENDPOINT,
+    )
 
-    if client_name == "google":
-        from httpx_oauth.clients.google import GoogleOAuth2
 
-        client = GoogleOAuth2(
-            client_config.CLIENT_ID,
-            client_config.CLIENT_SECRET.get_secret_value(),
-        )
-    elif client_name == "github":
-        from httpx_oauth.clients.github import GitHubOAuth2
+def get_oauth_router() -> APIRouter | None:
+    """
+    Get the `APIRouter` object for OAuth endpoints.
+    """
+    router_oauth = APIRouter()
+    settings = Inject(get_settings)
+    oauth_settings = Inject(get_oauth_settings)
+    if not oauth_settings.is_set:
+        return None
 
-        client = GitHubOAuth2(
-            client_config.CLIENT_ID,
-            client_config.CLIENT_SECRET.get_secret_value(),
-        )
-    else:
-        from httpx_oauth.clients.openid import OpenID
+    client_name = oauth_settings.OAUTH_CLIENT_NAME
 
-        client = OpenID(
-            client_config.CLIENT_ID,
-            client_config.CLIENT_SECRET.get_secret_value(),
-            client_config.OIDC_CONFIGURATION_ENDPOINT,
-        )
+    if client_name == "google":
+        client = _create_client_google(oauth_settings)
+    elif client_name == "github":
+        client = _create_client_github(oauth_settings)
+    else:
+        client = _create_client_oidc(oauth_settings)
 
     router_oauth.include_router(
         fastapi_users.get_oauth_router(
@@ -53,13 +59,14 @@ for client_config in settings.OAUTH_CLIENTS_CONFIG:
             settings.JWT_SECRET_KEY,
             is_verified_by_default=False,
             associate_by_email=True,
-            redirect_url=client_config.REDIRECT_URL,
+            redirect_url=oauth_settings.OAUTH_REDIRECT_URL,
         ),
         prefix=f"/{client_name}",
     )
 
+    # Add trailing slash to all routes' paths
+    for route in router_oauth.routes:
+        if not route.path.endswith("/"):
+            route.path = f"{route.path}/"
 
-# Add trailing slash to all routes' paths
-for route in router_oauth.routes:
-    if not route.path.endswith("/"):
-        route.path = f"{route.path}/"
+    return router_oauth

fractal_server/app/routes/auth/router.py

@@ -3,7 +3,7 @@ from fastapi import APIRouter
 from .current_user import router_current_user
 from .group import router_group
 from .login import router_login
-from .oauth import router_oauth
+from .oauth import get_oauth_router
 from .register import router_register
 from .users import router_users
 
@@ -14,4 +14,6 @@ router_auth.include_router(router_current_user)
 router_auth.include_router(router_login)
 router_auth.include_router(router_users)
 router_auth.include_router(router_group)
-router_auth.include_router(router_oauth)
+router_oauth = get_oauth_router()
+if router_oauth is not None:
+    router_auth.include_router(router_oauth)

fractal_server/config/__init__.py

@@ -3,6 +3,7 @@ from ._email import EmailSettings
 from ._email import PublicEmailSettings  # noqa F401
 from ._init_data import InitDataSettings
 from ._main import Settings
+from ._oauth import OAuthSettings
 
 
 def get_db_settings(db_settings=DatabaseSettings()) -> DatabaseSettings:
@@ -21,3 +22,7 @@ def get_init_data_settings(
     init_data_settings=InitDataSettings(),
 ) -> InitDataSettings:
     return init_data_settings
+
+
+def get_oauth_settings(oauth_settings=OAuthSettings()) -> OAuthSettings:
+    return oauth_settings

fractal_server/config/_main.py

@@ -1,12 +1,7 @@
 import logging
-from os import environ
-from os import getenv
 from typing import Literal
 from typing import TypeVar
 
-from pydantic import BaseModel
-from pydantic import Field
-from pydantic import model_validator
 from pydantic import SecretStr
 from pydantic_settings import BaseSettings
 from pydantic_settings import SettingsConfigDict
@@ -22,48 +17,6 @@ class FractalConfigurationError(ValueError):
 T = TypeVar("T")
 
 
-class OAuthClientConfig(BaseModel):
-    """
-    OAuth Client Config Model
-
-    This model wraps the variables that define a client against an Identity
-    Provider. As some providers are supported by the libraries used within the
-    server, some attributes are optional.
-
-    Attributes:
-        CLIENT_NAME:
-            The name of the client
-        CLIENT_ID:
-            ID of client
-        CLIENT_SECRET:
-            Secret to authorise against the identity provider
-        OIDC_CONFIGURATION_ENDPOINT:
-            OpenID configuration endpoint,
-            allowing to discover the required endpoints automatically
-        REDIRECT_URL:
-            String to be used as `redirect_url` argument for
-            `fastapi_users.get_oauth_router`, and then in
-            `httpx_oauth.integrations.fastapi.OAuth2AuthorizeCallback`.
-    """
-
-    CLIENT_NAME: str
-    CLIENT_ID: str
-    CLIENT_SECRET: SecretStr
-    OIDC_CONFIGURATION_ENDPOINT: str | None = None
-    REDIRECT_URL: str | None = None
-
-    @model_validator(mode="before")
-    @classmethod
-    def check_configuration(cls, values):
-        if values.get("CLIENT_NAME") not in ["GOOGLE", "GITHUB"]:
-            if not values.get("OIDC_CONFIGURATION_ENDPOINT"):
-                raise FractalConfigurationError(
-                    f"Missing OAUTH_{values.get('CLIENT_NAME')}"
-                    "_OIDC_CONFIGURATION_ENDPOINT"
-                )
-        return values
-
-
 class Settings(BaseSettings):
     """
     Contains all the configuration variables for Fractal Server
@@ -73,8 +26,6 @@ class Settings(BaseSettings):
 
     model_config = SettingsConfigDict(**SETTINGS_CONFIG_DICT)
 
-    OAUTH_CLIENTS_CONFIG: list[OAuthClientConfig] = Field(default_factory=list)
-
     # JWT TOKEN
     JWT_EXPIRE_SECONDS: int = 180
     """
@@ -95,52 +46,6 @@ class Settings(BaseSettings):
     Cookie token lifetime, in seconds.
     """
 
-    @model_validator(mode="before")
-    @classmethod
-    def collect_oauth_clients(cls, values):
-        """
-        Automatic collection of OAuth Clients
-
-        This method collects the environment variables relative to a single
-        OAuth client and saves them within the `Settings` object in the form
-        of an `OAuthClientConfig` instance.
-
-        Fractal can support an arbitrary number of OAuth providers, which are
-        automatically detected by parsing the environment variable names. In
-        particular, to set the provider `FOO`, one must specify the variables
-
-            OAUTH_FOO_CLIENT_ID
-            OAUTH_FOO_CLIENT_SECRET
-            ...
-
-        etc (cf. OAuthClientConfig).
-        """
-        oauth_env_variable_keys = [
-            key for key in environ.keys() if key.startswith("OAUTH_")
-        ]
-        clients_available = {
-            var.split("_")[1] for var in oauth_env_variable_keys
-        }
-
-        values["OAUTH_CLIENTS_CONFIG"] = []
-        for client in clients_available:
-            prefix = f"OAUTH_{client}"
-            oauth_client_config = OAuthClientConfig(
-                CLIENT_NAME=client,
-                CLIENT_ID=getenv(f"{prefix}_CLIENT_ID", None),
-                CLIENT_SECRET=getenv(f"{prefix}_CLIENT_SECRET", None),
-                OIDC_CONFIGURATION_ENDPOINT=getenv(
-                    f"{prefix}_OIDC_CONFIGURATION_ENDPOINT", None
-                ),
-                REDIRECT_URL=getenv(f"{prefix}_REDIRECT_URL", None),
-            )
-            values["OAUTH_CLIENTS_CONFIG"].append(oauth_client_config)
-        return values
-
-    ###########################################################################
-    # FRACTAL SPECIFIC
-    ###########################################################################
-
     # Note: we do not use ResourceType here to avoid circular imports
     FRACTAL_RUNNER_BACKEND: Literal[
         "local", "slurm_ssh", "slurm_sudo"

fractal_server/config/_oauth.py

@@ -0,0 +1,69 @@
+from typing import Annotated
+from typing import Self
+
+from pydantic import model_validator
+from pydantic import SecretStr
+from pydantic import StringConstraints
+from pydantic_settings import BaseSettings
+from pydantic_settings import SettingsConfigDict
+
+from ._settings_config import SETTINGS_CONFIG_DICT
+from fractal_server.types import NonEmptyStr
+
+
+class OAuthSettings(BaseSettings):
+    """
+    Minimal set of configurations needed for operating on the database (e.g
+    for schema migrations).
+    """
+
+    model_config = SettingsConfigDict(**SETTINGS_CONFIG_DICT)
+
+    OAUTH_CLIENT_NAME: (
+        Annotated[
+            NonEmptyStr,
+            StringConstraints(to_lower=True),
+        ]
+        | None
+    ) = None
+    """
+    The name of the client.
+    """
+    OAUTH_CLIENT_ID: SecretStr | None = None
+    """
+    ID of client.
+    """
+    OAUTH_CLIENT_SECRET: SecretStr | None = None
+    """
+    Secret to authorise against the identity provider.
+    """
+    OAUTH_OIDC_CONFIG_ENDPOINT: str | None = None
+    """
+    OpenID configuration endpoint, for autodiscovery of relevant endpoints.
+    """
+    OAUTH_REDIRECT_URL: str | None = None
+    """
+    String to be used as `redirect_url` argument in
+    `fastapi_users.get_oauth_router`, and then in
+    `httpx_oauth.integrations.fastapi.OAuth2AuthorizeCallback`
+    """
+
+    @model_validator(mode="after")
+    def check_configuration(self: Self) -> Self:
+        if (
+            self.OAUTH_CLIENT_NAME not in ["google", "github", None]
+            and self.OAUTH_OIDC_CONFIG_ENDPOINT is None
+        ):
+            raise ValueError(
+                f"{self.OAUTH_OIDC_CONFIG_ENDPOINT=} but "
+                f"{self.OAUTH_CLIENT_NAME=}"
+            )
+        return self
+
+    @property
+    def is_set(self) -> bool:
+        return None not in (
+            self.OAUTH_CLIENT_NAME,
+            self.OAUTH_CLIENT_ID,
+            self.OAUTH_CLIENT_SECRET,
+        )

{fractal_server-2.17.0a1.dist-info → fractal_server-2.17.0a2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fractal-server
-Version: 2.17.0a1
+Version: 2.17.0a2
 Summary: Backend component of the Fractal analytics platform
 License-Expression: BSD-3-Clause
 License-File: LICENSE

{fractal_server-2.17.0a1.dist-info → fractal_server-2.17.0a2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-fractal_server/__init__.py,sha256=L3Rv58fODvev5pxb4-ztERQa1un75OhiJ3K21aCCoW0,25
+fractal_server/__init__.py,sha256=kG6ZmOBm3VGbdOMy3xMdyb1FsLP0_JDO6tzPBeFLCi8,25
 fractal_server/__main__.py,sha256=UubAVie8iODHu1jj3brTFVqzsEZrL070LjnE3XacpF0,10777
 fractal_server/alembic.ini,sha256=MWwi7GzjzawI9cCAK1LW7NxIBQDUqD12-ptJoq5JpP0,3153
 fractal_server/app/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -33,7 +33,7 @@ fractal_server/app/routes/admin/v2/resource.py,sha256=ogUBRPIDUYEuwo7yYzVXz6w11n
 fractal_server/app/routes/admin/v2/task.py,sha256=e1UxsA6CWeYqvnHqxySE78ckRuE0EK60X02VMnkG2gg,4309
 fractal_server/app/routes/admin/v2/task_group.py,sha256=7-Axk5SG6Nw02p7pc6Q6_EtO9Ncy74pVXvt2GCG-Iuc,6043
 fractal_server/app/routes/admin/v2/task_group_lifecycle.py,sha256=h3OYIwhzG8eCaXFGTZlAIQlpgvlaknrskbVVaTBwCp8,10006
-fractal_server/app/routes/api/__init__.py,sha256=hvUMBSencPaDwoCDvD1wfwTCVgneASyCNgmJVr_729k,1166
+fractal_server/app/routes/api/__init__.py,sha256=wyEcQ8hXPvqU8M-YPVaRHMFheuDdfRvdX2sDQtMgxpg,1423
 fractal_server/app/routes/api/v2/__init__.py,sha256=D3sRRsqkmZO6kBxUjg40q0aRDsnuXI4sOOfn0xF9JsM,2820
 fractal_server/app/routes/api/v2/_aux_functions.py,sha256=8xnXYPjzo1yZfcg18b5ZY5tu9OQ1e55fOnX1IEmDSHk,15019
 fractal_server/app/routes/api/v2/_aux_functions_history.py,sha256=PXsqMQ3sfkABqAMI7v1_VAzUEDF_-kvaZyyhEicqsCw,4431
@@ -64,9 +64,9 @@ fractal_server/app/routes/auth/_aux_auth.py,sha256=fyGxBVb6yrVrsE7-2tTyiJ7orb9Jz
 fractal_server/app/routes/auth/current_user.py,sha256=jvr5AX3tSmxV7HMY8OIiojcYxcX4mF-UIUNwG8CqvVo,7110
 fractal_server/app/routes/auth/group.py,sha256=gSyB9iuwCqT6CMDHyO8hYIQ1J341gs8SDrRdHppOMT0,7890
 fractal_server/app/routes/auth/login.py,sha256=tSu6OBLOieoBtMZB4JkBAdEgH2Y8KqPGSbwy7NIypIo,566
-fractal_server/app/routes/auth/oauth.py,sha256=M92lGae_qtBTMC9N8Ylg1wCdJrUEYTZ9Moo9_g4xgNA,1978
+fractal_server/app/routes/auth/oauth.py,sha256=iI2vEdvDlEE5BrFz5Krq96VUk39HDuE0NzqW9fS3dDE,2261
 fractal_server/app/routes/auth/register.py,sha256=DlHq79iOvGd_gt2v9uwtsqIKeO6i_GKaW59VIkllPqY,587
-fractal_server/app/routes/auth/router.py,sha256=tzJrygXFZlmV_uWelVqTOJMEH-3Fr7ydwlgx1LxRjxY,527
+fractal_server/app/routes/auth/router.py,sha256=-E87A8h2UvcLucy5xjzKiWbXHVKcqxUmmZGeV_utEzA,598
 fractal_server/app/routes/auth/users.py,sha256=tYttZjyrsTLiOb5PZyMiAo4DD2ZEuPhPpSSw8ZIcJuc,8184
 fractal_server/app/routes/aux/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 fractal_server/app/routes/aux/_job.py,sha256=nqqdcW5B7fL_PbvHf57_TcifjUfcMgl04tKNvG2sV1U,628
@@ -98,11 +98,12 @@ fractal_server/app/security/__init__.py,sha256=eiYSoUA0XrRGKGKnBOK1KxLhQT9gK0H11
 fractal_server/app/security/signup_email.py,sha256=RgU9ia092778j35W4Iil3Ke9wNpPzKH6rjpE0zM9Zb4,1486
 fractal_server/app/shutdown.py,sha256=ViSNJyXWU_iWPSDOOMGNh_iQdUFrdPh_jvf8vVKLpAo,1950
 fractal_server/app/user_settings.py,sha256=5thFLR6de-CiaUyDZG9Bpn-P97vraDk4TP85eDuh8io,898
-fractal_server/config/__init__.py,sha256=ffFoy46WHk4fJRWkeBZNa4dKKEYdP3Kf7pDRAN1sZKM,594
+fractal_server/config/__init__.py,sha256=VrS810yeeEcZg_NI2-x8KJoAuVMnbumA-sWOLAeHEI4,729
 fractal_server/config/_database.py,sha256=YOBi3xuJno5wLGw1hKsjLm-bftaxVWiBNIQWVTMX3Ag,1661
 fractal_server/config/_email.py,sha256=iiUP5Be9AzDDJmVsWfTFzLt9XreTFt9pRcX7f9eRNvw,5682
 fractal_server/config/_init_data.py,sha256=w4fUSFhQtCeN_HiUnLldLBL19Yvawva5iUV-vJcdvcA,838
-fractal_server/config/_main.py,sha256=H7ePa0_TDfP0_xE2fdmIebmjhW9CPnUurDHMjFlMY-g,7073
+fractal_server/config/_main.py,sha256=NaKnNjkGZQdHjWPRuwa42I2a024Yqg3zuFUM0vMJzlo,3630
+fractal_server/config/_oauth.py,sha256=OYWqJnL0yn8ymagKb4fK-2zNqXVBbumRWwZrr9TFUms,1926
 fractal_server/config/_settings_config.py,sha256=tsyXQOnn9QKCFJD6hRo_dJXlQQyl70DbqgHMJoZ1xnY,144
 fractal_server/data_migrations/2_14_10.py,sha256=jzMg2c1zNO8C_Nho_9_EZJD6kR1-gkFNpNrMR5Hr8hM,1598
 fractal_server/data_migrations/README.md,sha256=_3AEFvDg9YkybDqCLlFPdDmGJvr6Tw7HRI14aZ3LOIw,398
@@ -258,8 +259,8 @@ fractal_server/types/validators/_workflow_task_arguments_validators.py,sha256=HL
 fractal_server/urls.py,sha256=QjIKAC1a46bCdiPMu3AlpgFbcv6a4l3ABcd5xz190Og,471
 fractal_server/utils.py,sha256=SYVVUuXe_nWyrJLsy7QA-KJscwc5PHEXjvsW4TK7XQI,2180
 fractal_server/zip_tools.py,sha256=H0w7wS5yE4ebj7hw1_77YQ959dl2c-L0WX6J_ro1TY4,4884
-fractal_server-2.17.0a1.dist-info/METADATA,sha256=wjRm3y1357YAUgiA9dHf3G-T4FE4gzoqEiHMkmnO9TM,4319
-fractal_server-2.17.0a1.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
-fractal_server-2.17.0a1.dist-info/entry_points.txt,sha256=8tV2kynvFkjnhbtDnxAqImL6HMVKsopgGfew0DOp5UY,58
-fractal_server-2.17.0a1.dist-info/licenses/LICENSE,sha256=QKAharUuhxL58kSoLizKJeZE3mTCBnX6ucmz8W0lxlk,1576
-fractal_server-2.17.0a1.dist-info/RECORD,,
+fractal_server-2.17.0a2.dist-info/METADATA,sha256=n4uYAbw37IIC0oulT2SUSeS_HzVc530TCATRLONVXdU,4319
+fractal_server-2.17.0a2.dist-info/WHEEL,sha256=zp0Cn7JsFoX2ATtOhtaFYIiE2rmFAD4OcMhtUki8W3U,88
+fractal_server-2.17.0a2.dist-info/entry_points.txt,sha256=8tV2kynvFkjnhbtDnxAqImL6HMVKsopgGfew0DOp5UY,58
+fractal_server-2.17.0a2.dist-info/licenses/LICENSE,sha256=QKAharUuhxL58kSoLizKJeZE3mTCBnX6ucmz8W0lxlk,1576
+fractal_server-2.17.0a2.dist-info/RECORD,,