internetdata 2.7.2__tar.gz → 2.7.4__tar.gz

{internetdata-2.7.2 → internetdata-2.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: internetdata
-Version: 2.7.2
+Version: 2.7.4
 Summary: Official Python client library for the InternetData API. Download and verify licensed IP datasets.
 Project-URL: Homepage, https://internetdata.io
 Project-URL: Documentation, https://docs.internetdata.io

{internetdata-2.7.2 → internetdata-2.7.4}/spec/openapi.yaml

@@ -12,7 +12,7 @@ info:
     email: support@internetdata.io
     url: https://internetdata.io
   termsOfService: https://internetdata.io/terms
-  version: 2026.10.09
+  version: 2026.10.15
 servers:
   - url: https://internetdata.io
 tags:
@@ -29,8 +29,9 @@ tags:
 
       Access is granted by CONTRACT, one dataset family at a time: there is no
       self-service purchase and no subscription behind it. The Open databases
-      are the exception: any organization downloads one with its key, licensed
-      or not, under CC BY-SA 4.0. `list` marks them `open`.
+      are licensed to every organization from the start, a `standard` license
+      to each, and are free under CC BY-SA 4.0 besides. `list` marks them
+      `open`.
 
       A successful download answers `302` with a time-limited URL pointing
       straight at object storage. Follow the redirect (`curl -L`); the link
@@ -60,7 +61,6 @@ paths:
         The whole published catalog, with your organization's license beside
         each entry, so `standing` says whether a database is yours today
         (`licensed`), was (`expired`), or has never been bought (`unlicensed`).
-        An `open` database downloads whatever its `standing`.
       security:
         - ApiKeyQueryAuth: []
         - ApiKeyHeaderAuth: []
@@ -416,7 +416,7 @@ paths:
       summary: Members
       description: |
         Read-only. Adding or removing a member is an invitation flow with email
-        in the middle rather than a POST, and modelling it as one here would
+        in the middle rather than a POST, and modeling it as one here would
         promise something this API does not do.
       security:
         - BearerAuth:
@@ -902,8 +902,7 @@ components:
       description: |
         Where your license for a database family stands today. `licensed` is a
         live grant, `expired` one whose term has ended, and `unlicensed` a
-        database published but never bought. An Open database (`open`)
-        downloads whatever this says.
+        database published but never bought.
       enum:
         - licensed
         - expired
@@ -942,11 +941,11 @@ components:
         open:
           type: boolean
           description: |
-            An Open database: any organization downloads it, and fetches its
-            checksums, with no license, under CC BY-SA 4.0 (credit
-            InternetData, https://internetdata.io, and share what you build
-            from it under the same license). `standing` still reports your
-            own license, which grants more where you hold one.
+            An Open database: free under CC BY-SA 4.0 (credit InternetData,
+            https://internetdata.io, and share what you build from it under
+            the same license). Every organization holds a `standard` license
+            to it from the start, which `standing` and `license_type` report
+            like any other.
         license_type:
           type: string
           nullable: true
@@ -1056,9 +1055,7 @@ components:
         open:
           type: boolean
           description: |
-            Taken under the Open license rather than one of your licenses: an
-            Open database downloaded while your organization held no license
-            in term for it.
+            A download of an Open database.
         bytes:
           type: integer
           format: int64
@@ -1368,7 +1365,7 @@ components:
           type: string
         key_prefix:
           type: string
-          description: The leading, non-secret part, so a key is recognisable without storing it.
+          description: The leading, non-secret part, so a key is recognizable without storing it.
         created:
           type: string
           format: date-time
@@ -1408,7 +1405,7 @@ components:
       properties:
         name:
           type: string
-          description: A label you will recognise later. Shown wherever the key is listed.
+          description: A label you will recognize later. Shown wherever the key is listed.
         allowed_scopes:
           type: array
           items:
@@ -1647,7 +1644,7 @@ components:
     V2NotLicensed:
       description: |
         Your organization holds no license for this database, or its term has
-        ended. Never for an Open database.
+        ended.
         `rc`: `NOT_LICENSED`, `LICENSE_EXPIRED`.
       content:
         application/json:

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/__init__.py

@@ -39,7 +39,7 @@ from .models import (
     TokenResponse,
 )
 
-__version__ = "2.7.2"
+__version__ = "2.7.4"
 
 __all__ = [
     "DATABASE_FORMATS",

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_core.py

@@ -81,6 +81,11 @@ def build_client(
     the `Authorization` header when it CONSTRUCTS the httpx client itself.
     """
     api_key = check_api_key(api_key)
+    # httpx drops one trailing slash when it joins a path onto the base URL and keeps the
+    # rest, so a second or third reached the API as `//api/v2/database/list`, which prod
+    # answers with a redirect this client does not follow: every call failed (2.7.3,
+    # measured 2026-10-16).
+    base_url = base_url.rstrip("/")
     httpx_args: dict[str, Any] = {}
     if transport is not None:
         httpx_args["transport"] = transport
@@ -135,19 +140,20 @@ def build_async_transfer_client(
 def check_api_key(api_key: str | None) -> str | None:
     """`api_key` without the blanks around it, or None when nothing else is left.
 
-    Refused where it is SET when a control character remains: httpx refuses a header
-    holding a CR, LF or NUL, so every call failed as a retried `network` error with nothing
-    sent, while a tab or DEL inside the key went out on the wire. Untrimmed, a key of blanks
-    was sent as one rather than as no key, and failed every call the same way (2.7.1,
-    measured 2026-10-12).
+    Refused where it is SET when a control character remains, or a character outside
+    ASCII, which httpx cannot put in a header: a CR, LF or NUL failed every call as a
+    retried `network` error with nothing sent, a C1 control or any other non-ASCII
+    character as a raw `UnicodeEncodeError` (2.7.3, measured 2026-10-16), while a tab or
+    DEL went out on the wire. Untrimmed, a key of blanks was sent as one rather than as no
+    key, and failed every call the same way (2.7.1, measured 2026-10-12).
     """
     if api_key is None:
         return None
     if not isinstance(api_key, str):
         raise TypeError(f"api_key must be a string or None, not {type(api_key).__name__}")
     key = api_key.strip()
-    if any(ord(char) < 0x20 or ord(char) == 0x7F for char in key):
-        raise ValueError("api_key holds a control character")
+    if any(ord(char) < 0x20 or ord(char) >= 0x7F for char in key):
+        raise ValueError("api_key holds a control character or one outside ASCII")
     return key or None
 
 

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/api/database_v_2/list_databases.py

@@ -59,7 +59,6 @@ def sync_detailed(
      The whole published catalog, with your organization's license beside
     each entry, so `standing` says whether a database is yours today
     (`licensed`), was (`expired`), or has never been bought (`unlicensed`).
-    An `open` database downloads whatever its `standing`.
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -87,7 +86,6 @@ def sync(
      The whole published catalog, with your organization's license beside
     each entry, so `standing` says whether a database is yours today
     (`licensed`), was (`expired`), or has never been bought (`unlicensed`).
-    An `open` database downloads whatever its `standing`.
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -111,7 +109,6 @@ async def asyncio_detailed(
      The whole published catalog, with your organization's license beside
     each entry, so `standing` says whether a database is yours today
     (`licensed`), was (`expired`), or has never been bought (`unlicensed`).
-    An `open` database downloads whatever its `standing`.
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.
@@ -137,7 +134,6 @@ async def asyncio(
      The whole published catalog, with your organization's license beside
     each entry, so `standing` says whether a database is yours today
     (`licensed`), was (`expired`), or has never been bought (`unlicensed`).
-    An `open` database downloads whatever its `standing`.
 
     Raises:
         errors.UnexpectedStatus: If the server returns an undocumented status code and Client.raise_on_unexpected_status is True.

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/api/organization/account_org_members.py

@@ -61,7 +61,7 @@ def sync_detailed(
     """Members
 
      Read-only. Adding or removing a member is an invitation flow with email
-    in the middle rather than a POST, and modelling it as one here would
+    in the middle rather than a POST, and modeling it as one here would
     promise something this API does not do.
 
     Raises:
@@ -88,7 +88,7 @@ def sync(
     """Members
 
      Read-only. Adding or removing a member is an invitation flow with email
-    in the middle rather than a POST, and modelling it as one here would
+    in the middle rather than a POST, and modeling it as one here would
     promise something this API does not do.
 
     Raises:
@@ -111,7 +111,7 @@ async def asyncio_detailed(
     """Members
 
      Read-only. Adding or removing a member is an invitation flow with email
-    in the middle rather than a POST, and modelling it as one here would
+    in the middle rather than a POST, and modeling it as one here would
     promise something this API does not do.
 
     Raises:
@@ -136,7 +136,7 @@ async def asyncio(
     """Members
 
      Read-only. Adding or removing a member is an invitation flow with email
-    in the middle rather than a POST, and modelling it as one here would
+    in the middle rather than a POST, and modeling it as one here would
     promise something this API does not do.
 
     Raises:

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/models/account_create_apikey_request.py

@@ -15,7 +15,7 @@ T = TypeVar("T", bound="AccountCreateApikeyRequest")
 class AccountCreateApikeyRequest:
     """
     Attributes:
-        name (str): A label you will recognise later. Shown wherever the key is listed.
+        name (str): A label you will recognize later. Shown wherever the key is listed.
         allowed_scopes (list[str] | Unset): What the new key may do. Omit for a key that carries no named scope, which
             is the safe default.
     """

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/models/apikey_detail.py

@@ -20,7 +20,7 @@ class ApikeyDetail:
     Attributes:
         id (UUID):
         name (str):
-        key_prefix (str): The leading, non-secret part, so a key is recognisable without storing it.
+        key_prefix (str): The leading, non-secret part, so a key is recognizable without storing it.
         created (datetime.datetime):
         expires (datetime.datetime | None | Unset):
         last_used_at (datetime.datetime | None | Unset):

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/models/database.py

@@ -31,13 +31,12 @@ class Database:
             summary (str): One line on what the newest version contains.
             standing (Standing): Where your license for a database family stands today. `licensed` is a
                 live grant, `expired` one whose term has ended, and `unlicensed` a
-                database published but never bought. An Open database (`open`)
-                downloads whatever this says.
-            open_ (bool): An Open database: any organization downloads it, and fetches its
-                checksums, with no license, under CC BY-SA 4.0 (credit
-                InternetData, https://internetdata.io, and share what you build
-                from it under the same license). `standing` still reports your
-                own license, which grants more where you hold one.
+                database published but never bought.
+            open_ (bool): An Open database: free under CC BY-SA 4.0 (credit InternetData,
+                https://internetdata.io, and share what you build from it under
+                the same license). Every organization holds a `standard` license
+                to it from the start, which `standing` and `license_type` report
+                like any other.
             license_type (DatabaseLicenseTypeType1 | DatabaseLicenseTypeType2Type1 | DatabaseLicenseTypeType3Type1 | None):
                 What your license permits you to do with the data. Null when there
                 is no license, which is every family with standing `unlicensed`.

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/models/database_metadata.py

@@ -95,9 +95,7 @@ class DatabaseMetadata:
     @classmethod
     def from_dict(cls, src_dict: Mapping[str, Any]) -> Self:
         from ..models.database_metadata_sample import DatabaseMetadataSample
-        from ..models.database_metadata_sample_size import (
-            DatabaseMetadataSampleSize,
-        )
+        from ..models.database_metadata_sample_size import DatabaseMetadataSampleSize
         from ..models.database_metadata_schema import DatabaseMetadataSchema
         from ..models.database_metadata_size import DatabaseMetadataSize
 

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/_generated/models/download.py

@@ -21,9 +21,7 @@ class Download:
         format_ (str):
         outcome (DownloadOutcome):
         sample (bool): The evaluation sample rather than the database itself.
-        open_ (bool): Taken under the Open license rather than one of your licenses: an
-            Open database downloaded while your organization held no license
-            in term for it.
+        open_ (bool): A download of an Open database.
         bytes_ (int | None): Object size at redirect time, NOT bytes delivered: the transfer is a
             presigned redirect straight to object storage, so we never observe
             how much of it was taken.

{internetdata-2.7.2 → internetdata-2.7.4}/src/internetdata/models.py

@@ -86,9 +86,9 @@ class Database:
     """One database FAMILY, with your organization's license beside it.
 
     A family your organization has never licensed is still listed, with `standing` set to
-    `unlicensed`, so you can see what else exists. One that is `open` downloads with no
-    license at all, under CC BY-SA 4.0, whatever its `standing`, which still reports your
-    own license.
+    `unlicensed`, so you can see what else exists. One that is `open` is free under
+    CC BY-SA 4.0, and every organization holds a `standard` license to it from the start,
+    which `standing` and `license_type` report like any other.
 
     A rolling license carries `renews_at`, when it next renews, and `notice_due_at`, the
     last day notice of non-renewal can be given for the term ending then. Both are None
@@ -167,9 +167,8 @@ class Download:
     # with a default, so a Download built by hand before 2.5.0 still builds; the parser
     # always sets it.
     sample: bool = field(default=False, kw_only=True)
-    # Taken under the Open license rather than one of your licenses: an Open database
-    # downloaded while your organization held no license in term for it. Keyword-only
-    # with a default, so a Download built by hand before 2.7.0 still builds.
+    # A download of an Open database. Keyword-only with a default, so a Download built
+    # by hand before 2.7.0 still builds.
     open: bool = field(default=False, kw_only=True)
 
 

{internetdata-2.7.2 → internetdata-2.7.4}/tests/test_conformance.py

@@ -274,12 +274,44 @@ def test_the_api_key_is_trimmed(make_client: ClientFactory) -> None:
 
 
 @pytest.mark.parametrize(
-    "api_key", ["key\r\nX-Injected: 1", "ke\ty", "key\x00", "key\x7f", "k\ney"]
+    "api_key", ["key\r\nX-Injected: 1", "ke\ty", "key\x00", "key\x7f", "k\ney", "k\x85ey", "kéy"]
 )
-def test_a_control_character_in_the_api_key_is_refused_where_it_is_set(
+def test_a_control_character_or_one_outside_ascii_is_refused_where_the_key_is_set(
     make_client: ClientFactory, api_key: str
 ) -> None:
     """Accepted, a CR, LF or NUL failed every call as a retried network error with nothing
-    sent, and a tab or DEL went out on the wire inside the header (2.7.1)."""
-    with pytest.raises(ValueError, match="control character"):
+    sent, and a tab or DEL went out on the wire inside the header (2.7.1). A C1 control or
+    any other character outside ASCII failed every call with a raw UnicodeEncodeError and
+    nothing sent, since httpx encodes a header value as ASCII (2.7.3)."""
+    with pytest.raises(ValueError, match="control character or one outside ASCII"):
         make_client(api_key=api_key)
+
+
+@pytest.mark.parametrize("slashes", [1, 2, 3])
+def test_every_trailing_slash_on_the_base_url_is_dropped(
+    make_client: ClientFactory, slashes: int
+) -> None:
+    """httpx drops one when it joins a path on and keeps the rest, so through 2.7.3 a
+    second reached the API as `//api/v2/database/list`, which prod answers with a
+    redirect this client does not follow."""
+    digests = {"md5": "m", "sha1": "s1", "sha256": "s256", "sha512": "s512"}
+    stub = Stub(
+        {
+            LIST_PATH: {"body": {"databases": []}},
+            CHECKSUM_PATH: {"body": {"id": "bogon_ip_v1", "format": "csvgz", "checksums": digests}},
+            "/.well-known/oauth-authorization-server": {
+                "body": {
+                    "issuer": "https://api.example",
+                    "authorization_endpoint": "https://api.example/oauth/authorize",
+                    "token_endpoint": "https://api.example/oauth/token",
+                }
+            },
+        }
+    )
+    client = make_client(transport=stub.transport, base_url="https://api.example" + "/" * slashes)
+
+    client.database.list()
+    client.database.checksums("bogon_ip_v1", "csvgz")
+    client.oauth.metadata()
+
+    assert stub.paths() == [LIST_PATH, CHECKSUM_PATH, "/.well-known/oauth-authorization-server"]