keymint 2.1.1__tar.gz → 2.2.0__tar.gz

{keymint-2.1.1/keymint.egg-info → keymint-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: keymint
-Version: 2.1.1
+Version: 2.2.0
 Summary: Official Python SDK for KeyMint license management with comprehensive API coverage.
 Home-page: https://github.com/keymint-dev/keymint-python
 Author: KeyMint
@@ -70,13 +70,13 @@ pip install keymint
 import os
 from keymint import KeyMint, identity
 
-access_token = os.environ.get('KEYMINT_ACCESS_TOKEN')
+api_key = os.environ.get('KEYMINT_API_KEY')
 product_id = os.environ.get('KEYMINT_PRODUCT_ID')
 
-if not access_token or not product_id:
-    raise ValueError('Please set the KEYMINT_ACCESS_TOKEN and KEYMINT_PRODUCT_ID environment variables.')
+if not api_key or not product_id:
+    raise ValueError('Please set the KEYMINT_API_KEY and KEYMINT_PRODUCT_ID environment variables.')
 
-sdk = KeyMint(access_token)
+sdk = KeyMint(api_key)
 
 # 1. Get a stable, unique ID for this machine
 host_id = identity.get_or_create_installation_id()
@@ -109,6 +109,9 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `get_key`        | Retrieves detailed information about a key.     |
 | `block_key`      | Blocks a license key.                           |
 | `unblock_key`    | Unblocks a previously blocked license key.      |
+| `floating_checkout` | Checks out a floating license seat.          |
+| `floating_heartbeat`| Sends a heartbeat to keep a session alive.   |
+| `floating_checkin`  | Checks in a session, releasing the seat.     |
 
 ### Customer Management
 
@@ -122,6 +125,12 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `toggle_customer_status`| Toggles customer active status.                  |
 | `delete_customer`       | Permanently deletes a customer and their keys.   |
 
+### Webhook Verification
+
+| Method                  | Description                                      |
+|-------------------------|--------------------------------------------------|
+| `verify_webhook_signature`| Verifies the signature of a webhook request payload. |
+
 ## License
 MIT
 

{keymint-2.1.1 → keymint-2.2.0}/README.md

@@ -21,13 +21,13 @@ pip install keymint
 import os
 from keymint import KeyMint, identity
 
-access_token = os.environ.get('KEYMINT_ACCESS_TOKEN')
+api_key = os.environ.get('KEYMINT_API_KEY')
 product_id = os.environ.get('KEYMINT_PRODUCT_ID')
 
-if not access_token or not product_id:
-    raise ValueError('Please set the KEYMINT_ACCESS_TOKEN and KEYMINT_PRODUCT_ID environment variables.')
+if not api_key or not product_id:
+    raise ValueError('Please set the KEYMINT_API_KEY and KEYMINT_PRODUCT_ID environment variables.')
 
-sdk = KeyMint(access_token)
+sdk = KeyMint(api_key)
 
 # 1. Get a stable, unique ID for this machine
 host_id = identity.get_or_create_installation_id()
@@ -60,6 +60,9 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `get_key`        | Retrieves detailed information about a key.     |
 | `block_key`      | Blocks a license key.                           |
 | `unblock_key`    | Unblocks a previously blocked license key.      |
+| `floating_checkout` | Checks out a floating license seat.          |
+| `floating_heartbeat`| Sends a heartbeat to keep a session alive.   |
+| `floating_checkin`  | Checks in a session, releasing the seat.     |
 
 ### Customer Management
 
@@ -73,6 +76,12 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `toggle_customer_status`| Toggles customer active status.                  |
 | `delete_customer`       | Permanently deletes a customer and their keys.   |
 
+### Webhook Verification
+
+| Method                  | Description                                      |
+|-------------------------|--------------------------------------------------|
+| `verify_webhook_signature`| Verifies the signature of a webhook request payload. |
+
 ## License
 MIT
 

{keymint-2.1.1 → keymint-2.2.0}/keymint/__init__.py

@@ -193,3 +193,60 @@ class KeyMint:
         query_params = {'customerId': params['customerId']}
         return self._handle_request('POST', '/customer/disable', params=None, query_params=query_params)
 
+    @staticmethod
+    def verify_webhook_signature(payload: str, header: str, secret: str, tolerance_seconds: int = 300) -> bool:
+        """
+        Verifies a webhook payload signature received from Keymint.
+        :param payload: The raw request body as a string.
+        :param header: The value of the "Keymint-Signature" header.
+        :param secret: The webhook endpoint's signing secret.
+        :param tolerance_seconds: Time tolerance in seconds to prevent replay attacks. Defaults to 300 (5 minutes).
+        :returns: True if the signature is valid, False otherwise.
+        """
+        import hmac
+        import hashlib
+        import time
+
+        if not header or not secret:
+            return False
+
+        try:
+            # Parse header (e.g. t=1719374021,v1=signature)
+            timestamp_str = ""
+            signature = ""
+            parts = header.split(",")
+            for part in parts:
+                kv = part.strip().split("=", 1)
+                if len(kv) == 2:
+                    if kv[0] == "t":
+                        timestamp_str = kv[1]
+                    elif kv[0] == "v1":
+                        signature = kv[1]
+
+            if not timestamp_str or not signature:
+                return False
+
+            # Check timestamp validity
+            try:
+                timestamp_int = int(timestamp_str)
+            except ValueError:
+                return False
+
+            now = int(time.time())
+            if abs(now - timestamp_int) > tolerance_seconds:
+                return False
+
+            # Verify HMAC signature
+            signable_content = f"{timestamp_str}.{payload}".encode("utf-8")
+            expected_signature = hmac.new(
+                secret.encode("utf-8"),
+                signable_content,
+                hashlib.sha256
+            ).hexdigest()
+
+            # Constant-time comparison to prevent timing attacks
+            return hmac.compare_digest(expected_signature, signature)
+        except Exception:
+            return False
+
+

{keymint-2.1.1 → keymint-2.2.0}/keymint/_version.py

@@ -1,6 +1,6 @@
 """KeyMint Python SDK version information."""
 
-__version__ = "2.1.1"
+__version__ = "2.2.0"
 __author__ = "KeyMint"
 __email__ = "cliff@keymint.dev"
 __url__ = "https://github.com/keymint-dev/keymint-python"

{keymint-2.1.1 → keymint-2.2.0/keymint.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: keymint
-Version: 2.1.1
+Version: 2.2.0
 Summary: Official Python SDK for KeyMint license management with comprehensive API coverage.
 Home-page: https://github.com/keymint-dev/keymint-python
 Author: KeyMint
@@ -70,13 +70,13 @@ pip install keymint
 import os
 from keymint import KeyMint, identity
 
-access_token = os.environ.get('KEYMINT_ACCESS_TOKEN')
+api_key = os.environ.get('KEYMINT_API_KEY')
 product_id = os.environ.get('KEYMINT_PRODUCT_ID')
 
-if not access_token or not product_id:
-    raise ValueError('Please set the KEYMINT_ACCESS_TOKEN and KEYMINT_PRODUCT_ID environment variables.')
+if not api_key or not product_id:
+    raise ValueError('Please set the KEYMINT_API_KEY and KEYMINT_PRODUCT_ID environment variables.')
 
-sdk = KeyMint(access_token)
+sdk = KeyMint(api_key)
 
 # 1. Get a stable, unique ID for this machine
 host_id = identity.get_or_create_installation_id()
@@ -109,6 +109,9 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `get_key`        | Retrieves detailed information about a key.     |
 | `block_key`      | Blocks a license key.                           |
 | `unblock_key`    | Unblocks a previously blocked license key.      |
+| `floating_checkout` | Checks out a floating license seat.          |
+| `floating_heartbeat`| Sends a heartbeat to keep a session alive.   |
+| `floating_checkin`  | Checks in a session, releasing the seat.     |
 
 ### Customer Management
 
@@ -122,6 +125,12 @@ Keymint provides utilities to uniquely identify machines for node-locking:
 | `toggle_customer_status`| Toggles customer active status.                  |
 | `delete_customer`       | Permanently deletes a customer and their keys.   |
 
+### Webhook Verification
+
+| Method                  | Description                                      |
+|-------------------------|--------------------------------------------------|
+| `verify_webhook_signature`| Verifies the signature of a webhook request payload. |
+
 ## License
 MIT
 

{keymint-2.1.1 → keymint-2.2.0}/setup.py

@@ -5,7 +5,7 @@ with open("README.md", "r", encoding="utf-8") as fh:
 
 setup(
     name="keymint",
-    version="2.1.1",
+    version="2.2.0",
     author="KeyMint",
     author_email="cliff@keymint.dev",
     description="Official Python SDK for KeyMint license management with comprehensive API coverage.",