iatoolkit 2.16.1__tar.gz → 2.16.3__tar.gz

{iatoolkit-2.16.1/src/iatoolkit.egg-info → iatoolkit-2.16.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 2.16.1
+Version: 2.16.3
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT

{iatoolkit-2.16.1 → iatoolkit-2.16.3}/src/iatoolkit/__init__.py

@@ -3,7 +3,7 @@
 #
 # IAToolkit is open source software.
 
-__version__ = "2.16.1"
+__version__ = "2.16.3"
 
 # Expose main classes and functions at the top level of the package
 

{iatoolkit-2.16.1 → iatoolkit-2.16.3}/src/iatoolkit/services/profile_service.py

@@ -316,6 +316,9 @@ class ProfileService:
             persisted = False
             user_by_google_sub = self.profile_repo.get_user_by_google_sub(google_identity.subject)
 
+            provisioning_outcome = "existing_google_subject"
+            policy_metadata = {}
+
             if user_by_google_sub:
                 logging.debug(
                     "Google login matched existing google_sub. company=%s email=%s user_id=%s",
@@ -357,6 +360,7 @@ class ProfileService:
                         email,
                     )
                     first_name, last_name = self._resolve_google_names(email, google_identity)
+                    provisioning_outcome = "new_google_user"
                     user = User(
                         email=email,
                         password=None,
@@ -381,7 +385,15 @@ class ProfileService:
                     email=email,
                     invite_token=None,
                 )
+                policy_metadata = dict(policy_decision.metadata or {})
                 if not policy_decision.allowed:
+                    logging.info(
+                        "Google login blocked by signup policy. company=%s email=%s policy=%s metadata=%s",
+                        company_short_name,
+                        email,
+                        policy_metadata.get("policy_mode") or "unknown",
+                        policy_metadata,
+                    )
                     if policy_decision.reason_message:
                         message = policy_decision.reason_message
                     elif policy_decision.reason_key:
@@ -394,6 +406,7 @@ class ProfileService:
                         "reason_code": "SIGNUP_NOT_ALLOWED",
                     }
                 user.companies.append(company)
+                provisioning_outcome = "company_associated" if user.id is not None else provisioning_outcome
                 persisted = True
 
             if user.id is None:
@@ -403,6 +416,7 @@ class ProfileService:
                     email,
                 )
                 self.profile_repo.create_user(user)
+                provisioning_outcome = "created_and_associated"
             elif persisted:
                 logging.debug(
                     "Google login saving existing user updates. company=%s email=%s user_id=%s",
@@ -412,6 +426,15 @@ class ProfileService:
                 )
                 self.profile_repo.save_user(user)
 
+            logging.info(
+                "Google login provisioning success. company=%s email=%s outcome=%s policy_mode=%s metadata=%s",
+                company_short_name,
+                email,
+                provisioning_outcome,
+                (policy_metadata.get("policy_mode") or "existing_membership"),
+                policy_metadata,
+            )
+
             user_role = self.profile_repo.get_user_role_in_company(company.id, user.id)
             return self._build_session_user_profile(user, company, user_role)
         except Exception as e:

{iatoolkit-2.16.1 → iatoolkit-2.16.3}/src/iatoolkit/views/login_view.py

@@ -183,11 +183,7 @@ class GoogleLoginCallbackView(BaseLoginView):
         if not isinstance(pending_states, dict):
             pending_states = {}
 
-        pending_state = pending_states.pop(state, None)
-        if pending_states:
-            SessionManager.set('google_oauth_states', pending_states)
-        else:
-            SessionManager.remove('google_oauth_states')
+        pending_state = pending_states.get(state)
 
         company_short_name = (pending_state or {}).get('company_short_name')
         current_lang = (pending_state or {}).get('lang') or request.args.get('lang') or 'en'
@@ -215,6 +211,12 @@ class GoogleLoginCallbackView(BaseLoginView):
             flash(self.i18n_service.t('errors.auth.google_login_failed'), 'error')
             return redirect(url_for('home', company_short_name=company_short_name, lang=current_lang))
 
+        pending_states.pop(state, None)
+        if pending_states:
+            SessionManager.set('google_oauth_states', pending_states)
+        else:
+            SessionManager.remove('google_oauth_states')
+
         redirect_uri = url_for(
             'login_google_callback',
             _external=True,

{iatoolkit-2.16.1 → iatoolkit-2.16.3/src/iatoolkit.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 2.16.1
+Version: 2.16.3
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT