idp2aws 0.2.0__tar.gz

idp2aws-0.2.0/.gitignore

@@ -0,0 +1,8 @@
+.venv/
+__pycache__/
+*.egg-info/
+.pytest_cache/
+.idea/
+.python-version
+dist/
+build/

idp2aws-0.2.0/CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+## 0.2.0 (2026-11-10)
+
+First release on PyPI.
+
+- Sign in to a SAML IdP (Google Workspace, Okta, Entra ID) in Chrome, Edge or Playwright's
+  Chromium, and save short-lived AWS keys to a profile in `~/.aws/credentials`.
+- Show the AWS role page, sorted by account name, on the first login for a profile. Later logins
+  use the same role. Use `--pick` to choose again.
+- Commands: `setup`, `login` (`--pick`, `--json` for `credential_process`), `run`, `console`,
+  `profiles`, and `--version`.
+- Config in `~/.idp2aws/config.toml`, with shared settings and optional per-profile overrides.

idp2aws-0.2.0/LICENSE

@@ -0,0 +1,44 @@
+"Commons Clause" License Condition v1.0
+
+The Software is provided to you by the Licensor under the License, as defined
+below, subject to the following condition.
+
+Without limiting other conditions in the License, the grant of rights under the
+License will not include, and the License does not grant to you, the right to
+Sell the Software.
+
+For purposes of the foregoing, "Sell" means practicing any or all of the rights
+granted to you under the License to provide to third parties, for a fee or other
+consideration (including without limitation fees for hosting or consulting/
+support services related to the Software), a product or service whose value
+derives, entirely or substantially, from the functionality of the Software. Any
+license notice or attribution required by the License must also include this
+Commons Clause License Condition notice.
+
+Software: idp2aws
+License: MIT
+Licensor: Saimon
+
+-------------------------------------------------------------------------------
+
+MIT License
+
+Copyright (c) 2026 Saimon
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

idp2aws-0.2.0/PKG-INFO

@@ -0,0 +1,127 @@
+Metadata-Version: 2.5
+Name: idp2aws
+Version: 0.2.0
+Summary: Get short-lived AWS keys by signing in to your SAML IdP in a real browser
+Project-URL: Homepage, https://github.com/saimoncse19/idp2aws
+Project-URL: Documentation, https://github.com/saimoncse19/idp2aws/blob/main/docs/USAGE.md
+Project-URL: Issues, https://github.com/saimoncse19/idp2aws/issues
+Project-URL: Changelog, https://github.com/saimoncse19/idp2aws/blob/main/CHANGELOG.md
+Author: Saimon
+License-Expression: LicenseRef-MIT-Commons-Clause
+License-File: LICENSE
+Keywords: aws,cli,entra-id,google-workspace,okta,saml,sso,sts
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Systems Administration :: Authentication/Directory
+Classifier: Topic :: Utilities
+Requires-Python: >=3.12
+Requires-Dist: boto3>=1.34
+Requires-Dist: playwright>=1.44
+Requires-Dist: typer>=0.12
+Provides-Extra: dev
+Requires-Dist: build>=1; extra == 'dev'
+Requires-Dist: pylint>=3; extra == 'dev'
+Requires-Dist: pytest-mock>=3; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: twine>=5; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# idp2aws
+
+idp2aws gets short-lived AWS keys for you. You sign in to your IdP in a real browser window.
+It works with Google Workspace, Okta, Entra ID and other SAML IdPs that sign you in to AWS
+accounts directly.
+
+```sh
+idp2aws setup 'https://accounts.google.com/o/saml2/initsso?idpid=XXXX&spid=YYYY'
+idp2aws login dev                  # pick a role, idp2aws saves the keys to profile "dev"
+aws --profile dev s3 ls            # use the keys
+idp2aws run dev -- terraform plan  # run one command with the keys
+idp2aws console dev                # open the AWS console
+```
+
+The first login for a profile shows the AWS role page, sorted by account name. idp2aws keeps
+the role that you pick. The next logins for that profile use this role and do not show the page.
+While your IdP session is active, the browser window opens and closes without input from you.
+
+idp2aws does not work with AWS IAM Identity Center. For Identity Center, use `aws sso login`.
+
+## Install
+
+idp2aws needs Python 3.12 or newer, and Google Chrome or Microsoft Edge.
+
+Install from PyPI with pipx or pip:
+
+```sh
+pipx install idp2aws
+pip install idp2aws          # if you manage the virtual environment yourself
+```
+
+Or install from source:
+
+```sh
+pipx install git+https://github.com/saimoncse19/idp2aws.git    # latest code on main
+
+git clone https://github.com/saimoncse19/idp2aws.git && cd idp2aws   # to change the code
+python3.12 -m venv .venv
+.venv/bin/pip install -e .
+```
+
+For step-by-step install on macOS, Linux and Windows, the config file and troubleshooting, see
+[docs/USAGE.md](https://github.com/saimoncse19/idp2aws/blob/main/docs/USAGE.md).
+
+## How it works
+
+1. Chrome opens at the start URL. You sign in to your IdP with your usual 2-Step Verification.
+2. The IdP sends a signed SAML response to the AWS sign-in page.
+3. If you have more than one role and the profile has no role yet, idp2aws lets AWS show its
+   role page. You pick a role and click Sign In.
+4. idp2aws stops the SAML response before it gets to AWS, and closes the window.
+5. idp2aws calls STS `AssumeRoleWithSAML` with the SAML response and gets keys for the role.
+6. idp2aws writes the keys to the profile in `~/.aws/credentials`.
+
+## Development
+
+```sh
+git clone https://github.com/saimoncse19/idp2aws.git && cd idp2aws
+python3.12 -m venv .venv
+source .venv/bin/activate
+pip install -e '.[dev]'
+pytest                 # unit tests
+pytest -m browser      # browser tests: headless Chrome with a fake IdP and AWS role page
+pylint src scripts
+```
+
+The `CI` workflow runs the same checks on each pull request, and also builds the packages.
+
+## Release
+
+idp2aws uses semantic versioning: `MAJOR.MINOR.PATCH`. Each release must be the next patch,
+minor or major version after the latest one on PyPI. After 1.4.2, the only choices are 1.4.3,
+1.5.0 and 2.0.0.
+
+1. Set `__version__` in `src/idp2aws/__init__.py`. This is the only place the version is set.
+2. Add the version and the date to `CHANGELOG.md`.
+3. Merge to `main`.
+4. On GitHub, create a release with the tag `v` plus the version, for example `v1.4.3`.
+
+The `Publish to PyPI` workflow then runs the tests, checks the version and uploads to PyPI. If
+the tag does not match `__version__`, or the version skips or repeats one, the workflow stops
+and uploads nothing. To check a version before you release, run
+`python scripts/check_version.py v1.4.3`.
+
+## License
+
+idp2aws is source-available under the MIT license with the
+[Commons Clause](https://commonsclause.com/). You can use, change and share it for free,
+including at work. You cannot sell it, or sell a product or service whose value comes mainly
+from it. See [LICENSE](https://github.com/saimoncse19/idp2aws/blob/main/LICENSE).

idp2aws-0.2.0/README.md

@@ -0,0 +1,90 @@
+# idp2aws
+
+idp2aws gets short-lived AWS keys for you. You sign in to your IdP in a real browser window.
+It works with Google Workspace, Okta, Entra ID and other SAML IdPs that sign you in to AWS
+accounts directly.
+
+```sh
+idp2aws setup 'https://accounts.google.com/o/saml2/initsso?idpid=XXXX&spid=YYYY'
+idp2aws login dev                  # pick a role, idp2aws saves the keys to profile "dev"
+aws --profile dev s3 ls            # use the keys
+idp2aws run dev -- terraform plan  # run one command with the keys
+idp2aws console dev                # open the AWS console
+```
+
+The first login for a profile shows the AWS role page, sorted by account name. idp2aws keeps
+the role that you pick. The next logins for that profile use this role and do not show the page.
+While your IdP session is active, the browser window opens and closes without input from you.
+
+idp2aws does not work with AWS IAM Identity Center. For Identity Center, use `aws sso login`.
+
+## Install
+
+idp2aws needs Python 3.12 or newer, and Google Chrome or Microsoft Edge.
+
+Install from PyPI with pipx or pip:
+
+```sh
+pipx install idp2aws
+pip install idp2aws          # if you manage the virtual environment yourself
+```
+
+Or install from source:
+
+```sh
+pipx install git+https://github.com/saimoncse19/idp2aws.git    # latest code on main
+
+git clone https://github.com/saimoncse19/idp2aws.git && cd idp2aws   # to change the code
+python3.12 -m venv .venv
+.venv/bin/pip install -e .
+```
+
+For step-by-step install on macOS, Linux and Windows, the config file and troubleshooting, see
+[docs/USAGE.md](https://github.com/saimoncse19/idp2aws/blob/main/docs/USAGE.md).
+
+## How it works
+
+1. Chrome opens at the start URL. You sign in to your IdP with your usual 2-Step Verification.
+2. The IdP sends a signed SAML response to the AWS sign-in page.
+3. If you have more than one role and the profile has no role yet, idp2aws lets AWS show its
+   role page. You pick a role and click Sign In.
+4. idp2aws stops the SAML response before it gets to AWS, and closes the window.
+5. idp2aws calls STS `AssumeRoleWithSAML` with the SAML response and gets keys for the role.
+6. idp2aws writes the keys to the profile in `~/.aws/credentials`.
+
+## Development
+
+```sh
+git clone https://github.com/saimoncse19/idp2aws.git && cd idp2aws
+python3.12 -m venv .venv
+source .venv/bin/activate
+pip install -e '.[dev]'
+pytest                 # unit tests
+pytest -m browser      # browser tests: headless Chrome with a fake IdP and AWS role page
+pylint src scripts
+```
+
+The `CI` workflow runs the same checks on each pull request, and also builds the packages.
+
+## Release
+
+idp2aws uses semantic versioning: `MAJOR.MINOR.PATCH`. Each release must be the next patch,
+minor or major version after the latest one on PyPI. After 1.4.2, the only choices are 1.4.3,
+1.5.0 and 2.0.0.
+
+1. Set `__version__` in `src/idp2aws/__init__.py`. This is the only place the version is set.
+2. Add the version and the date to `CHANGELOG.md`.
+3. Merge to `main`.
+4. On GitHub, create a release with the tag `v` plus the version, for example `v1.4.3`.
+
+The `Publish to PyPI` workflow then runs the tests, checks the version and uploads to PyPI. If
+the tag does not match `__version__`, or the version skips or repeats one, the workflow stops
+and uploads nothing. To check a version before you release, run
+`python scripts/check_version.py v1.4.3`.
+
+## License
+
+idp2aws is source-available under the MIT license with the
+[Commons Clause](https://commonsclause.com/). You can use, change and share it for free,
+including at work. You cannot sell it, or sell a product or service whose value comes mainly
+from it. See [LICENSE](https://github.com/saimoncse19/idp2aws/blob/main/LICENSE).

idp2aws-0.2.0/docs/USAGE.md

@@ -0,0 +1,320 @@
+# Using idp2aws
+
+This guide tells you how to install idp2aws, configure it, use it every day and fix common
+problems.
+
+## What you need
+
+- Python 3.12 or newer.
+- Google Chrome or Microsoft Edge. If you cannot install either, idp2aws can use the Chromium
+  build that Playwright downloads. idp2aws does not support Firefox or Safari.
+- A desktop session. You sign in through a browser window that you can see. So idp2aws does
+  not work over plain SSH to a server.
+- The start URL of your IdP for AWS. For Google Workspace, it looks like this:
+
+  ```
+  https://accounts.google.com/o/saml2/initsso?idpid=XXXXXXXX&spid=YYYYYYYYYYYY&forceauthn=false
+  ```
+
+  `idpid` is the Google id of your company. `spid` is the id of the AWS app in Google. Your
+  Google Workspace admin can give you both.
+
+## Install
+
+You can install idp2aws in two ways:
+
+- From PyPI, with [pipx](https://pipx.pypa.io) or pip. The steps for each operating system
+  follow. pipx puts the `idp2aws` command on your `PATH` and keeps its libraries apart from your
+  other Python tools. `pip install idp2aws` also works, but then you manage the virtual
+  environment.
+- From source, to get the latest code on `main` or to change the code. See
+  [Install from source](#install-from-source).
+
+### macOS
+
+1. Install Python 3.12 and pipx:
+
+   ```sh
+   brew install python@3.12 pipx
+   pipx ensurepath
+   ```
+
+2. Open a new terminal, then install idp2aws:
+
+   ```sh
+   pipx install --python python3.12 idp2aws
+   ```
+
+idp2aws finds Chrome in `/Applications` automatically.
+
+### Linux
+
+These steps are for Debian 12, Ubuntu 24.04 and newer.
+
+1. Install Python and pipx:
+
+   ```sh
+   sudo apt install python3.12 python3.12-venv pipx
+   pipx ensurepath
+   ```
+
+2. Open a new terminal, then install idp2aws:
+
+   ```sh
+   pipx install --python python3.12 idp2aws
+   ```
+
+3. Install Google Chrome from google.com/chrome.
+
+To use Playwright's Chromium instead of Chrome, do these steps:
+
+1. Install idp2aws with the `playwright` command, then install Chromium and the system libraries
+   that it needs:
+
+   ```sh
+   pipx install --python python3.12 --include-deps idp2aws
+   playwright install chromium
+   sudo "$(which playwright)" install-deps chromium
+   ```
+
+2. Add `--browser chromium` when you run `idp2aws setup`.
+
+On Fedora, use `sudo dnf install python3.12 pipx` and the Chrome `.rpm`. Playwright
+`install-deps` supports only Debian and Ubuntu. So on Fedora, Chrome is the easier choice.
+
+### Windows
+
+1. In PowerShell, install Python and pipx:
+
+   ```powershell
+   winget install Python.Python.3.12
+   py -3.12 -m pip install --user pipx
+   py -3.12 -m pipx ensurepath
+   ```
+
+2. Open a new PowerShell window, then install idp2aws:
+
+   ```powershell
+   pipx install idp2aws
+   ```
+
+Windows includes Edge. If you do not have Chrome, add `--browser msedge` when you run
+`idp2aws setup`.
+
+idp2aws keeps its files in `%USERPROFILE%\.idp2aws` and `%USERPROFILE%\.aws\credentials`.
+
+On Windows 11, WSL can show Linux windows on your desktop. So the Linux steps work in WSL.
+WSL on Windows 10 has no display. On Windows 10, install idp2aws on Windows.
+
+### Update or remove
+
+```sh
+pipx upgrade idp2aws
+pipx uninstall idp2aws
+```
+
+`pipx uninstall` does not delete `~/.idp2aws` or your keys in `~/.aws/credentials`.
+
+### Install from source
+
+To install the latest code on `main` without a copy of the repository, use pipx with the Git
+URL:
+
+```sh
+pipx install --python python3.12 git+https://github.com/saimoncse19/idp2aws.git
+```
+
+To change the code and use your changes at once, install from a clone. You need Python 3.12 or
+newer, as in the steps above.
+
+On macOS and Linux:
+
+1. Clone the repository and install idp2aws in a virtual environment:
+
+   ```sh
+   git clone https://github.com/saimoncse19/idp2aws.git && cd idp2aws
+   python3.12 -m venv .venv
+   .venv/bin/pip install -e .
+   ```
+
+2. Put `idp2aws` on your `PATH`:
+
+   ```sh
+   ln -s "$PWD/.venv/bin/idp2aws" ~/.local/bin/idp2aws
+   ```
+
+   If `~/.local/bin` is not on your `PATH`, add it in `~/.zshrc` or `~/.bashrc`.
+
+On Windows, in PowerShell:
+
+1. Clone the repository and install idp2aws in a virtual environment:
+
+   ```powershell
+   git clone https://github.com/saimoncse19/idp2aws.git; cd idp2aws
+   py -3.12 -m venv .venv
+   .venv\Scripts\pip install -e .
+   ```
+
+2. Add the `.venv\Scripts` folder in `idp2aws` to your `PATH`.
+
+With `-e`, idp2aws runs the code in the clone, so a change takes effect the next time you run
+it. To use Playwright's Chromium, run `.venv/bin/playwright install chromium` (on Windows,
+`.venv\Scripts\playwright install chromium`).
+
+To run the tests and lint, see Development in the
+[README](https://github.com/saimoncse19/idp2aws#development).
+
+## Configure idp2aws
+
+Run `idp2aws setup` one time, with your start URL. Put the URL in single quotes, because it
+contains `&`.
+
+```sh
+idp2aws setup 'https://accounts.google.com/o/saml2/initsso?idpid=XXXX&spid=YYYY'
+```
+
+This command creates `~/.idp2aws/config.toml`. The settings at the top apply to all profiles. A
+`[profiles.<name>]` table changes settings for one profile:
+
+```toml
+start_url = "https://accounts.google.com/o/saml2/initsso?idpid=XXXX&spid=YYYY"
+browser = "chrome"
+session_hours = 1
+
+[profiles.dev]
+
+[profiles.prod]
+role_arn = "arn:aws:iam::123456789012:role/Developer"
+session_hours = 4
+```
+
+| Setting | Meaning |
+| --- | --- |
+| `start_url` | The start URL of your IdP for AWS. A profile can use a different URL, for example for a second AWS app. |
+| `browser` | `chrome` for Google Chrome, `msedge` for Microsoft Edge, or `chromium` for Playwright's Chromium. |
+| `session_hours` | How long the keys last, from 1 to 12. This value cannot be more than the maximum session duration of the role in IAM. |
+| `role_arn` | The role that this profile always uses. idp2aws never shows the AWS role page for this profile. |
+
+A profile does not need a table. `idp2aws login <any-name>` works with only the shared
+settings. A table does two things:
+
+- It shows the profile in `idp2aws profiles`.
+- It lets you change settings for that profile.
+
+To keep the idp2aws files in a different folder, set `IDP2AWS_HOME` to that folder.
+
+## Use idp2aws every day
+
+```sh
+idp2aws login dev                  # save keys to profile "dev" in ~/.aws/credentials
+aws --profile dev s3 ls            # use the keys
+idp2aws run dev -- terraform plan  # run one command with the keys
+idp2aws console dev                # open the AWS console
+idp2aws profiles                   # show each profile, its role and when its keys expire
+```
+
+### First login for a profile
+
+1. Run `idp2aws login dev`.
+2. Sign in to your IdP in the browser window.
+3. On the AWS "Select a role" page, pick a role. The page shows the accounts sorted by name.
+4. Click Sign In.
+
+The window closes. idp2aws saves the keys and keeps the role for the profile. The AWS console
+does not open.
+
+### Next logins
+
+- The next logins for the profile use the same role. They do not show the AWS role page.
+- If the saved keys work for more than 5 more minutes, `login` does nothing. Keys with less
+  than 5 minutes left count as expired, so a long command does not fail halfway through.
+- `run` and `console` log in automatically when the keys expired. So you seldom need `login`.
+- To use a different role, run `idp2aws login dev --pick`.
+- `console` works only for commercial AWS accounts, not for GovCloud or China.
+
+### Let the AWS CLI log in automatically
+
+Add a profile to `~/.aws/config` that runs idp2aws when the AWS CLI needs keys:
+
+```ini
+[profile dev-auto]
+credential_process = idp2aws login dev --json
+```
+
+Then `aws --profile dev-auto s3 ls` logs in only when necessary.
+
+Give this profile a name that is different from the profile that idp2aws writes to. Use
+`dev-auto`, not `dev`. If the names are the same, the AWS CLI reads the old keys from
+`~/.aws/credentials` and does not run idp2aws.
+
+If your tools do not use the same `PATH` as your shell, write the full path to `idp2aws`.
+
+## Files
+
+| File | Contents |
+| --- | --- |
+| `~/.idp2aws/config.toml` | Your settings. You edit this file. |
+| `~/.idp2aws/profiles.json` | The last role of each profile and the time when its keys expire. idp2aws writes this file. |
+| `~/.idp2aws/browser-profile/` | The browser profile with your IdP session cookies. To sign out, delete this folder. |
+| `~/.aws/credentials` | The AWS keys, one profile for each idp2aws profile. |
+
+**Warning:** The browser profile and the credentials file give access to your accounts. Protect
+them as you protect passwords. On macOS and Linux, idp2aws makes the credentials file readable
+only by you each time it saves keys.
+
+Chrome encrypts the cookies in the browser profile with a key from the macOS Keychain or the
+Linux keyring. On Linux without a keyring, Chrome uses a weaker fixed key.
+
+## Troubleshooting
+
+**`idp2aws: command not found`**
+The folder where pipx puts commands is not on your `PATH`. Run `pipx ensurepath`, then open a new
+terminal.
+
+**Google says "This browser or app may not be secure".**
+Set `browser = "chrome"`, not `chromium`. If the message shows again, delete
+`~/.idp2aws/browser-profile` and try again.
+
+**The window opens but does not close.**
+The login did not get to AWS. To check the start URL, open it in your usual browser. After 5
+minutes, idp2aws stops and shows an error.
+
+**"Cannot find chrome" (or msedge)**
+idp2aws cannot find that browser. Do one of these:
+
+- Install the browser.
+- Set `browser` to the other browser.
+- Run `playwright install chromium` and set `browser = "chromium"`.
+
+**"Another idp2aws login is using the browser profile"**
+Only one login can use the browser at a time. Finish or close the other login window, then try
+again. This can happen when several tools ask a `credential_process` profile for keys at the
+same time.
+
+**macOS asks to allow access to "Chrome Safe Storage" in the Keychain.**
+Chrome reads its cookie key from the Keychain. Click **Always Allow**.
+
+**Linux: the browser stops at start because `.so` libraries are missing.**
+Run `sudo "$(which playwright)" install-deps chromium`.
+
+**"DurationSeconds exceeds the MaxSessionDuration"**
+Make `session_hours` smaller for that profile. Or, ask an AWS admin to increase the maximum
+session duration of the role.
+
+**"You can no longer use <role>"**
+Your IdP access no longer includes the role that you picked last time. Run
+`idp2aws login <profile> --pick` and pick a different role.
+
+**"The SAML response lists no AWS roles for you"**
+Your IdP user has no AWS role for this app. Ask your IdP admin.
+
+**"Token expired" or "not yet valid" from STS**
+The clock on your computer may be wrong. Turn on automatic time sync.
+
+**Comments in `~/.aws/credentials` are gone.**
+idp2aws writes the full file again when it saves keys. It does not keep comments. Write your
+notes in `~/.aws/config`.
+
+**Windows: `run` works differently.**
+On macOS and Linux, your command replaces idp2aws. On Windows, idp2aws starts your command as a
+new process. So exit codes and Ctrl+C may work differently.

idp2aws-0.2.0/pyproject.toml

@@ -0,0 +1,67 @@
+[build-system]
+requires = ["hatchling>=1.27"]
+build-backend = "hatchling.build"
+
+[project]
+name = "idp2aws"
+dynamic = ["version"]
+description = "Get short-lived AWS keys by signing in to your SAML IdP in a real browser"
+readme = "README.md"
+license = "LicenseRef-MIT-Commons-Clause"
+license-files = ["LICENSE"]
+authors = [{ name = "Saimon" }]
+requires-python = ">=3.12"
+keywords = ["aws", "saml", "sso", "sts", "google-workspace", "okta", "entra-id", "cli"]
+classifiers = [
+    "Development Status :: 4 - Beta",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Intended Audience :: System Administrators",
+    "Operating System :: MacOS",
+    "Operating System :: Microsoft :: Windows",
+    "Operating System :: POSIX :: Linux",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3 :: Only",
+    "Programming Language :: Python :: 3.12",
+    "Topic :: Security",
+    "Topic :: System :: Systems Administration :: Authentication/Directory",
+    "Topic :: Utilities",
+]
+dependencies = [
+    "typer>=0.12",
+    "boto3>=1.34",
+    "playwright>=1.44",
+]
+
+[project.optional-dependencies]
+dev = ["pytest>=8", "pytest-mock>=3", "pylint>=3", "build>=1", "twine>=5"]
+
+[project.urls]
+Homepage = "https://github.com/saimoncse19/idp2aws"
+Documentation = "https://github.com/saimoncse19/idp2aws/blob/main/docs/USAGE.md"
+Issues = "https://github.com/saimoncse19/idp2aws/issues"
+Changelog = "https://github.com/saimoncse19/idp2aws/blob/main/CHANGELOG.md"
+
+[project.scripts]
+idp2aws = "idp2aws.cli:app"
+
+[tool.hatch.version]
+path = "src/idp2aws/__init__.py"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/idp2aws"]
+
+[tool.hatch.build.targets.sdist]
+include = ["src", "scripts", "tests", "docs", "README.md", "CHANGELOG.md", "LICENSE"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+pythonpath = ["scripts"]
+addopts = "-m 'not browser'"
+markers = ["browser: starts a real browser (run with: pytest -m browser)"]
+
+[tool.pylint.format]
+max-line-length = 89
+
+[tool.pylint."messages control"]
+disable = ["too-few-public-methods"]