itw-python-builder 0.1.40__tar.gz → 0.1.42__tar.gz

{itw_python_builder-0.1.40 → itw_python_builder-0.1.42}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: itw_python_builder
-Version: 0.1.40
+Version: 0.1.42
 Summary: Standardized Django deployment pipeline with Docker, testing, and SonarQube integration
 Author-email: IT-Works <contact@it-works.io>
 License: MIT

{itw_python_builder-0.1.40 → itw_python_builder-0.1.42}/itw_python_builder/tasks.py

@@ -21,6 +21,7 @@ from itw_python_builder.utils import (
     load_cached_token,
     save_token_to_cache,
     probe_gitlab_token,
+    TOKEN_CACHE_PATH,
 )
 from itw_python_builder.ssr_tasks import *  # noqa: F401,F403  — exposes ssr-init
 
@@ -66,16 +67,19 @@ def ensure_gitlab_auth(ctx: Context) -> None:
 
     cached = load_cached_token()
     if cached:
-        status = probe_gitlab_token(_gitlab_api_host(ctx), cached)
+        project_type = detect_project_type()
+        api_host = _gitlab_api_host(ctx)
+        username = get_gitlab_username(ctx)
+        status = probe_gitlab_token(ctx, project_type, api_host, username, cached)
         if status == 'ok':
             os.environ['GITLAB_TOKEN'] = cached
-            os.environ.setdefault('GITLAB_USERNAME', get_gitlab_username(ctx))
+            os.environ.setdefault('GITLAB_USERNAME', username)
             print('[itw] Using cached GitLab token.')
             return
         if status == 'unreachable':
             print('[itw] Could not reach GitLab to verify cached token; using it anyway.')
             os.environ['GITLAB_TOKEN'] = cached
-            os.environ.setdefault('GITLAB_USERNAME', get_gitlab_username(ctx))
+            os.environ.setdefault('GITLAB_USERNAME', username)
             return
         print('[itw] Cached GitLab token was rejected (401/403). Please log in again.')
 
@@ -88,6 +92,22 @@ def login(ctx: Context, username=None):
     _prompt_and_store_token(ctx, username)
 
 
+@task
+def logout(ctx: Context):
+    """Forget the cached GitLab token and log out of the container registry."""
+    try:
+        TOKEN_CACHE_PATH.unlink()
+        print(f'[itw] Removed cached token at {TOKEN_CACHE_PATH}.')
+    except FileNotFoundError:
+        print('[itw] No cached token to remove.')
+    except OSError as exc:
+        print(f'[itw] Could not remove {TOKEN_CACHE_PATH}: {exc}')
+    if detect_project_type() == 'backend':
+        ctx.run('podman logout gitreg.it-works.io:443', warn=True)
+    os.environ.pop('GITLAB_TOKEN', None)
+    os.environ.pop('GITLAB_USERNAME', None)
+
+
 def build_frontend(ctx: Context, branch: str, ssr: bool = False) -> None:
     """Build the Angular app. With ssr=True uses the SSR npm scripts."""
     if ssr:

{itw_python_builder-0.1.40 → itw_python_builder-0.1.42}/itw_python_builder/utils.py

@@ -314,12 +314,24 @@ def save_token_to_cache(token: str) -> bool:
         return False
 
 
-def probe_gitlab_token(api_host: str, token: str) -> str:
-    """Probe GET /api/v4/user. Returns 'ok' | 'unauthorized' | 'unreachable'."""
+def probe_gitlab_token(ctx: Context, project_type: str, api_host: str, username: str, token: str) -> str:
+    if project_type == 'backend':
+        result = ctx.run(
+            f'podman login -u {username} --password-stdin gitreg.it-works.io:443 --tls-verify=false',
+            in_stream=io.StringIO(token),
+            hide=True,
+            warn=True,
+        )
+        if result.ok:
+            return 'ok'
+        err = (result.stderr or result.stdout or '').lower()
+        if 'unauthorized' in err or '401' in err or 'authentication' in err:
+            return 'unauthorized'
+        return 'unreachable'
+
     import ssl
     import urllib.error
     import urllib.request
-
     req = urllib.request.Request(
         f'https://{api_host}/api/v4/user',
         headers={'PRIVATE-TOKEN': token},

{itw_python_builder-0.1.40 → itw_python_builder-0.1.42}/itw_python_builder.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: itw_python_builder
-Version: 0.1.40
+Version: 0.1.42
 Summary: Standardized Django deployment pipeline with Docker, testing, and SonarQube integration
 Author-email: IT-Works <contact@it-works.io>
 License: MIT

{itw_python_builder-0.1.40 → itw_python_builder-0.1.42}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "itw_python_builder"
-version = "0.1.40"
+version = "0.1.42"
 description = "Standardized Django deployment pipeline with Docker, testing, and SonarQube integration"
 readme = "README.md"
 requires-python = ">=3.10"