infisicalsdk 1.0.3__py3-none-any.whl → 1.0.5__py3-none-any.whl

infisical_sdk/api_types.py

@@ -74,6 +74,7 @@ class BaseSecret(BaseModel):
     createdAt: str
     updatedAt: str
     secretMetadata: Optional[Dict[str, Any]] = None
+    secretValueHidden: Optional[bool] = False
     secretReminderNote: Optional[str] = None
     secretReminderRepeatDays: Optional[int] = None
     skipMultilineEncoding: Optional[bool] = False
@@ -112,7 +113,7 @@ class SingleSecretResponse(BaseModel):
     secret: BaseSecret
 
     @classmethod
-    def from_dict(cls, data: Dict) -> 'ListSecretsResponse':
+    def from_dict(cls, data: Dict) -> 'SingleSecretResponse':
         return cls(
             secret=BaseSecret.from_dict(data['secret']),
         )
@@ -125,3 +126,71 @@ class MachineIdentityLoginResponse(BaseModel):
     expiresIn: int
     accessTokenMaxTTL: int
     tokenType: str
+
+
+class SymmetricEncryption(str, Enum):
+    AES_GCM_256 = "aes-256-gcm"
+    AES_GCM_128 = "aes-128-gcm"
+
+
+class OrderDirection(str, Enum):
+    ASC = "asc"
+    DESC = "desc"
+
+
+class KmsKeysOrderBy(str, Enum):
+    NAME = "name"
+
+
+@dataclass
+class KmsKey(BaseModel):
+    """Infisical KMS Key"""
+    id: str
+    description: str
+    isDisabled: bool
+    orgId: str
+    name: str
+    createdAt: str
+    updatedAt: str
+    projectId: str
+    version: int
+    encryptionAlgorithm: SymmetricEncryption
+
+
+@dataclass
+class ListKmsKeysResponse(BaseModel):
+    """Complete response model for Kms Keys API"""
+    keys: List[KmsKey]
+    totalCount: int
+
+    @classmethod
+    def from_dict(cls, data: Dict) -> 'ListKmsKeysResponse':
+        """Create model from dictionary with camelCase keys, handling nested objects"""
+        return cls(
+            keys=[KmsKey.from_dict(key) for key in data['keys']],
+            totalCount=data['totalCount']
+        )
+
+
+@dataclass
+class SingleKmsKeyResponse(BaseModel):
+    """Response model for get/create/update/delete API"""
+    key: KmsKey
+
+    @classmethod
+    def from_dict(cls, data: Dict) -> 'SingleKmsKeyResponse':
+        return cls(
+            key=KmsKey.from_dict(data['key']),
+        )
+
+
+@dataclass
+class KmsKeyEncryptDataResponse(BaseModel):
+    """Response model for encrypt data API"""
+    ciphertext: str
+
+
+@dataclass
+class KmsKeyDecryptDataResponse(BaseModel):
+    """Response model for decrypt data API"""
+    plaintext: str

infisical_sdk/client.py

@@ -12,8 +12,11 @@ from botocore.awsrequest import AWSRequest
 from botocore.exceptions import NoCredentialsError
 
 from .infisical_requests import InfisicalRequests
-from .api_types import ListSecretsResponse, MachineIdentityLoginResponse
-from .api_types import SingleSecretResponse, BaseSecret
+
+from .api_types import ListSecretsResponse, SingleSecretResponse, BaseSecret
+from .api_types import SymmetricEncryption, KmsKeysOrderBy, OrderDirection
+from .api_types import ListKmsKeysResponse, SingleKmsKeyResponse, MachineIdentityLoginResponse
+from .api_types import KmsKey, KmsKeyEncryptDataResponse, KmsKeyDecryptDataResponse
 
 
 class InfisicalSDKClient:
@@ -25,6 +28,7 @@ class InfisicalSDKClient:
 
         self.auth = Auth(self)
         self.secrets = V3RawSecrets(self)
+        self.kms = KMS(self)
 
     def set_token(self, token: str):
         """
@@ -205,6 +209,7 @@ class V3RawSecrets:
             environment_slug: str,
             secret_path: str,
             expand_secret_references: bool = True,
+            view_secret_value: bool = True,
             recursive: bool = False,
             include_imports: bool = True,
             tag_filters: List[str] = []) -> ListSecretsResponse:
@@ -213,13 +218,14 @@ class V3RawSecrets:
             "workspaceId": project_id,
             "environment": environment_slug,
             "secretPath": secret_path,
+            "viewSecretValue": str(view_secret_value).lower(),
             "expandSecretReferences": str(expand_secret_references).lower(),
             "recursive": str(recursive).lower(),
             "include_imports": str(include_imports).lower(),
         }
 
         if tag_filters:
-            params["tag_slugs"] = ",".join(tag_filters)
+            params["tagSlugs"] = ",".join(tag_filters)
 
         result = self.client.api.get(
             path="/api/v3/secrets/raw",
@@ -237,10 +243,12 @@ class V3RawSecrets:
             secret_path: str,
             expand_secret_references: bool = True,
             include_imports: bool = True,
+            view_secret_value: bool = True,
             version: str = None) -> BaseSecret:
 
         params = {
           "workspaceId": project_id,
+          "viewSecretValue": str(view_secret_value).lower(),
           "environment": environment_slug,
           "secretPath": secret_path,
           "expandSecretReferences": str(expand_secret_references).lower(),
@@ -307,7 +315,7 @@ class V3RawSecrets:
           "secretPath": secret_path,
           "secretValue": secret_value,
           "secretComment": secret_comment,
-          "new_secret_name": new_secret_name,
+          "newSecretName": new_secret_name,
           "tagIds": None,
           "skipMultilineEncoding": skip_multiline_encoding,
           "type": "shared",
@@ -343,3 +351,175 @@ class V3RawSecrets:
         )
 
         return result.data.secret
+
+
+class KMS:
+    def __init__(self, client: InfisicalSDKClient) -> None:
+        self.client = client
+
+    def list_keys(
+            self,
+            project_id: str,
+            offset: int = 0,
+            limit: int = 100,
+            order_by: KmsKeysOrderBy = KmsKeysOrderBy.NAME,
+            order_direction: OrderDirection = OrderDirection.ASC,
+            search: str = None) -> ListKmsKeysResponse:
+
+        params = {
+            "projectId": project_id,
+            "search": search,
+            "offset": offset,
+            "limit": limit,
+            "orderBy": order_by,
+            "orderDirection": order_direction,
+        }
+
+        result = self.client.api.get(
+            path="/api/v1/kms/keys",
+            params=params,
+            model=ListKmsKeysResponse
+        )
+
+        return result.data
+
+    def get_key_by_id(
+            self,
+            key_id: str) -> KmsKey:
+
+        result = self.client.api.get(
+            path=f"/api/v1/kms/keys/{key_id}",
+            model=SingleKmsKeyResponse
+        )
+
+        return result.data.key
+
+    def get_key_by_name(
+            self,
+            key_name: str,
+            project_id: str) -> KmsKey:
+
+        params = {
+            "projectId": project_id,
+        }
+
+        result = self.client.api.get(
+            path=f"/api/v1/kms/keys/key-name/{key_name}",
+            params=params,
+            model=SingleKmsKeyResponse
+        )
+
+        return result.data.key
+
+    def create_key(
+            self,
+            name: str,
+            project_id: str,
+            encryption_algorithm: SymmetricEncryption,
+            description: str = None) -> KmsKey:
+
+        request_body = {
+            "name": name,
+            "projectId": project_id,
+            "encryptionAlgorithm": encryption_algorithm,
+            "description": description,
+        }
+
+        result = self.client.api.post(
+            path="/api/v1/kms/keys",
+            json=request_body,
+            model=SingleKmsKeyResponse
+        )
+
+        return result.data.key
+
+    def update_key(
+            self,
+            key_id: str,
+            name: str = None,
+            is_disabled: bool = None,
+            description: str = None) -> KmsKey:
+
+        request_body = {
+            "name": name,
+            "isDisabled": is_disabled,
+            "description": description,
+        }
+
+        result = self.client.api.patch(
+            path=f"/api/v1/kms/keys/{key_id}",
+            json=request_body,
+            model=SingleKmsKeyResponse
+        )
+
+        return result.data.key
+
+    def delete_key(
+            self,
+            key_id: str) -> KmsKey:
+
+        result = self.client.api.delete(
+            path=f"/api/v1/kms/keys/{key_id}",
+            json={},
+            model=SingleKmsKeyResponse
+        )
+
+        return result.data.key
+
+    def encrypt_data(
+            self,
+            key_id: str,
+            base64EncodedPlaintext: str) -> str:
+        """
+            Encrypt data with the specified KMS key.
+
+            :param key_id: The ID of the key to decrypt the ciphertext with
+            :type key_id: str
+            :param base64EncodedPlaintext: The base64 encoded plaintext to encrypt
+            :type plaintext: str
+
+
+            :return: The encrypted base64 encoded plaintext (ciphertext)
+            :rtype: str
+        """
+
+        request_body = {
+            "plaintext": base64EncodedPlaintext
+        }
+
+        result = self.client.api.post(
+            path=f"/api/v1/kms/keys/{key_id}/encrypt",
+            json=request_body,
+            model=KmsKeyEncryptDataResponse
+        )
+
+        return result.data.ciphertext
+
+    def decrypt_data(
+            self,
+            key_id: str,
+            ciphertext: str) -> str:
+        """
+            Decrypt data with the specified KMS key.
+
+            :param key_id: The ID of the key to decrypt the ciphertext with
+            :type key_id: str
+            :param ciphertext: The encrypted base64 plaintext to decrypt
+            :type ciphertext: str
+
+
+            :return: The base64 encoded plaintext
+            :rtype: str
+        """
+
+        request_body = {
+            "ciphertext": ciphertext
+        }
+
+        result = self.client.api.post(
+            path=f"/api/v1/kms/keys/{key_id}/decrypt",
+            json=request_body,
+            model=KmsKeyDecryptDataResponse
+        )
+
+        return result.data.plaintext

infisical_sdk/infisical_requests.py

@@ -1,4 +1,4 @@
-from typing import Any, Dict, Generic, Optional, TypeVar
+from typing import Any, Dict, Generic, Optional, TypeVar, Type
 from urllib.parse import urljoin
 import requests
 from dataclasses import dataclass
@@ -90,7 +90,7 @@ class InfisicalRequests:
     def get(
             self,
             path: str,
-            model: type[T],
+            model: Type[T],
             params: Optional[Dict[str, Any]] = None
           ) -> APIResponse[T]:
 
@@ -116,7 +116,7 @@ class InfisicalRequests:
     def post(
             self,
             path: str,
-            model: type[T],
+            model: Type[T],
             json: Optional[Dict[str, Any]] = None
           ) -> APIResponse[T]:
 
@@ -140,7 +140,7 @@ class InfisicalRequests:
     def patch(
             self,
             path: str,
-            model: type[T],
+            model: Type[T],
             json: Optional[Dict[str, Any]] = None
           ) -> APIResponse[T]:
 
@@ -164,7 +164,7 @@ class InfisicalRequests:
     def delete(
             self,
             path: str,
-            model: type[T],
+            model: Type[T],
             json: Optional[Dict[str, Any]] = None
           ) -> APIResponse[T]:
 

{infisicalsdk-1.0.3.dist-info → infisicalsdk-1.0.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: infisicalsdk
-Version: 1.0.3
+Version: 1.0.5
 Summary: Infisical API Client
 Home-page: https://github.com/Infisical/python-sdk-official
 Author: Infisical

infisicalsdk-1.0.5.dist-info/RECORD

@@ -0,0 +1,8 @@
+infisical_sdk/__init__.py,sha256=UzssDXpMhK79mFBW4fpSea1bOVjoD_UILjvizFkLNz4,183
+infisical_sdk/api_types.py,sha256=-SFKKhDx0GZGlzZ0kysvEMmBRtbQQXl5vwaH1a4m1Ac,5170
+infisical_sdk/client.py,sha256=wZB-9ukEFIoOtNhgRJUZYQyfZ3-Rgq4CKslelMe3oWA,15773
+infisical_sdk/infisical_requests.py,sha256=7y-0FS2BnlDRjfgZ4eRMXwPhA9-A7hLO3lCSOC63qt4,5661
+infisicalsdk-1.0.5.dist-info/METADATA,sha256=RwpCgZu7AP6dXAXIF4UVyimTnYwoQdkLm2CmwRhyjwg,763
+infisicalsdk-1.0.5.dist-info/WHEEL,sha256=52BFRY2Up02UkjOa29eZOS2VxUrpPORXg1pkohGGUS8,91
+infisicalsdk-1.0.5.dist-info/top_level.txt,sha256=FvJjMGD1FvxwipO_qFajdH20yNV8n3lJ7G3DkQoPJNU,14
+infisicalsdk-1.0.5.dist-info/RECORD,,

{infisicalsdk-1.0.3.dist-info → infisicalsdk-1.0.5.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (75.8.0)
+Generator: setuptools (76.0.0)
 Root-Is-Purelib: true
 Tag: py3-none-any
 

infisicalsdk-1.0.3.dist-info/RECORD

@@ -1,8 +0,0 @@
-infisical_sdk/__init__.py,sha256=UzssDXpMhK79mFBW4fpSea1bOVjoD_UILjvizFkLNz4,183
-infisical_sdk/api_types.py,sha256=FjyDQ71pOYiyYA9oGAPsW5jW7LGe5L7yDuOvCr4UxwQ,3651
-infisical_sdk/client.py,sha256=i1poZEz2tiGJLYZuRePfWONs7hQyP_A5QJJt1UeW8WQ,10936
-infisical_sdk/infisical_requests.py,sha256=mROtB1fuF3E39fU9J6MiH0gQ-LhsK10W-zzEH0knePU,5655
-infisicalsdk-1.0.3.dist-info/METADATA,sha256=LuJqI82C7DTQdeYLCpixwYmYF49y_RfdDlVrSFDBpW4,763
-infisicalsdk-1.0.3.dist-info/WHEEL,sha256=In9FTNxeP60KnTkGw7wk6mJPYd_dQSjEZmXdBdMCI-8,91
-infisicalsdk-1.0.3.dist-info/top_level.txt,sha256=FvJjMGD1FvxwipO_qFajdH20yNV8n3lJ7G3DkQoPJNU,14
-infisicalsdk-1.0.3.dist-info/RECORD,,