PyPI - kinde-python-sdk - Versions diffs - 2.0.0b5__tar.gz → 2.0.0b7__tar.gz - Mend

kinde-python-sdk 2.0.0b5tar.gz → 2.0.0b7tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (461) hide show

{kinde_python_sdk-2.0.0b5/kinde_python_sdk.egg-info → kinde_python_sdk-2.0.0b7}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kinde-python-sdk
-Version: 2.0.0b5
+Version: 2.0.0b7
 Summary: Connect your app to the Kinde platform
 Author-email: Kinde Engineering <engineering@kinde.com>
 Project-URL: Homepage, https://github.com/kinde-oss/kinde-python-sdk
@@ -21,7 +21,7 @@ Requires-Dist: urllib3<3.0,>=2.2.0
 Requires-Dist: python-dateutil<3.0,>=2.9.0
 Requires-Dist: Authlib<2.0,>=1.3.0
 Requires-Dist: pyjwt<3.0,>=2.10.0
-Requires-Dist: requests<3.0,>=2.32.0
+Requires-Dist: requests<3.0,>=2.32.2
 Requires-Dist: typing-extensions<5.0,>=4.11.0
 Requires-Dist: frozendict<3.0,>=2.4.3
 Requires-Dist: certifi<2025.0.0,>=2024.2.2

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_fastapi/examples/example_app.py RENAMED Viewed

@@ -7,6 +7,7 @@ import os
 from dotenv import load_dotenv
 import logging
 from kinde_sdk.auth.oauth import OAuth
+from kinde_sdk.auth import claims, feature_flags, permissions
 logger = logging.getLogger(__name__)
@@ -41,6 +42,9 @@ async def home(request: Request):
         <html>
             <body>
                 <h1>Welcome, {user.get('email', 'User')}!</h1>
+                <p>claims: {await claims.get_all_claims()}</p>
+                <p>feature flags: {await feature_flags.get_all_flags()}</p>
+                <p>permissions: {await permissions.get_permissions()}</p>
                 <p>You are logged in.</p>
                 <a href="/logout">Logout</a>
             </body>

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7/kinde_python_sdk.egg-info}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kinde-python-sdk
-Version: 2.0.0b5
+Version: 2.0.0b7
 Summary: Connect your app to the Kinde platform
 Author-email: Kinde Engineering <engineering@kinde.com>
 Project-URL: Homepage, https://github.com/kinde-oss/kinde-python-sdk
@@ -21,7 +21,7 @@ Requires-Dist: urllib3<3.0,>=2.2.0
 Requires-Dist: python-dateutil<3.0,>=2.9.0
 Requires-Dist: Authlib<2.0,>=1.3.0
 Requires-Dist: pyjwt<3.0,>=2.10.0
-Requires-Dist: requests<3.0,>=2.32.0
+Requires-Dist: requests<3.0,>=2.32.2
 Requires-Dist: typing-extensions<5.0,>=4.11.0
 Requires-Dist: frozendict<3.0,>=2.4.3
 Requires-Dist: certifi<2025.0.0,>=2024.2.2

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_python_sdk.egg-info/SOURCES.txt RENAMED Viewed

@@ -112,6 +112,7 @@ pyproject.toml
 ./kinde_sdk/auth/login_options.py
 ./kinde_sdk/auth/oauth.py
 ./kinde_sdk/auth/permissions.py
+./kinde_sdk/auth/profiles.py
 ./kinde_sdk/auth/token_manager.py
 ./kinde_sdk/auth/user_session.py
 ./kinde_sdk/core/__init__.py
@@ -134,6 +135,7 @@ pyproject.toml
 ./kinde_sdk/management/configuration.py
 ./kinde_sdk/management/management_client.py
 ./kinde_sdk/management/management_token_manager.py
+./kinde_sdk/management/schemas.py
 ./kinde_sdk/model/__init__.py
 ./kinde_sdk/model/add_organization_users_response.py
 ./kinde_sdk/model/api.py
@@ -565,6 +567,7 @@ kinde_sdk/auth/feature_flags.py
 kinde_sdk/auth/login_options.py
 kinde_sdk/auth/oauth.py
 kinde_sdk/auth/permissions.py
+kinde_sdk/auth/profiles.py
 kinde_sdk/auth/token_manager.py
 kinde_sdk/auth/user_session.py
 kinde_sdk/core/__init__.py
@@ -587,6 +590,7 @@ kinde_sdk/management/api_client.py
 kinde_sdk/management/configuration.py
 kinde_sdk/management/management_client.py
 kinde_sdk/management/management_token_manager.py
+kinde_sdk/management/schemas.py
 kinde_sdk/model/__init__.py
 kinde_sdk/model/add_organization_users_response.py
 kinde_sdk/model/api.py

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_python_sdk.egg-info/requires.txt RENAMED Viewed

@@ -2,7 +2,7 @@ urllib3<3.0,>=2.2.0
 python-dateutil<3.0,>=2.9.0
 Authlib<2.0,>=1.3.0
 pyjwt<3.0,>=2.10.0
-requests<3.0,>=2.32.0
+requests<3.0,>=2.32.2
 typing-extensions<5.0,>=4.11.0
 frozendict<3.0,>=2.4.3
 certifi<2025.0.0,>=2024.2.2

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/__init__.py RENAMED Viewed

@@ -19,6 +19,7 @@ __all__ = [
     "UserSession",
     "permissions",
     "claims",
+    "profiles",
     "feature_flags"
     "StorageFactory",
     "FrameworkFactory",

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/auth/__init__.py RENAMED Viewed

@@ -4,5 +4,6 @@ from .user_session import UserSession
 from .permissions import permissions
 from .claims import claims
 from .feature_flags import feature_flags
+from .profiles import profiles
-__all__ = ["OAuth", "TokenManager", "UserSession", "permissions", "claims", "feature_flags"]
+__all__ = ["OAuth", "TokenManager", "UserSession", "permissions", "claims", "feature_flags", "profiles"]

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/auth/login_options.py RENAMED Viewed

@@ -24,6 +24,7 @@ class LoginOptions:
     REDIRECT_URL = "redirect_url"
     HAS_SUCCESS_PAGE = "has_success_page"
     WORKFLOW_DEPLOYMENT_ID = "workflow_deployment_id"
+    PLAN_INTEREST = "plan_interest"
     # Additional parameters container
     AUTH_PARAMS = "auth_params"

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/auth/oauth.py RENAMED Viewed

@@ -253,6 +253,8 @@ class OAuth:
             LoginOptions.REDIRECT_URL: "redirect_url",
             LoginOptions.HAS_SUCCESS_PAGE: "has_success_page",
             LoginOptions.WORKFLOW_DEPLOYMENT_ID: "workflow_deployment_id",
+            # Registration params
+            LoginOptions.PLAN_INTEREST: "plan_interest",
         }
         # Base search parameters with defaults
@@ -386,6 +388,7 @@ class OAuth:
                 - redirect_url: URL to redirect after authentication
                 - has_success_page: Whether to show success page
                 - workflow_deployment_id: Workflow deployment ID
+                - plan_interest: Optional string indicating the plan of interest
                 - auth_params: Additional auth parameters
         Returns:

kinde_python_sdk-2.0.0b7/kinde_sdk/auth/profiles.py ADDED Viewed

@@ -0,0 +1,112 @@
+from typing import Dict, Any, Optional
+import logging
+import urllib.parse
+from urllib.parse import urlparse
+import httpx
+from kinde_sdk.core.framework.framework_factory import FrameworkFactory
+from kinde_sdk.auth.user_session import UserSession
+class Profiles:
+    def __init__(self):
+        self._logger = logging.getLogger("kinde_sdk")
+        self._logger.setLevel(logging.INFO)
+        self._framework = None
+        self._session_manager = UserSession()
+    def _get_framework(self):
+        """Get the framework instance using singleton pattern."""
+        if not self._framework:
+            self._framework = FrameworkFactory.get_framework_instance()
+        return self._framework
+    def _get_token_manager(self) -> Optional[Any]:
+        """
+        Get the token manager for the current user.
+        Returns:
+            Optional[Any]: The token manager if available, None otherwise
+        """
+        framework = self._get_framework()
+        if not framework:
+            return None
+        user_id = framework.get_user_id()
+        if not user_id:
+            return None
+        return self._session_manager.get_token_manager(user_id)
+    def _sanitize_url(self, url: str) -> str:
+        """
+        Sanitize the URL by ensuring it has a scheme and removing trailing slashes.
+        Args:
+            url: The URL to sanitize
+        Returns:
+            str: The sanitized URL
+        """
+        if not url.startswith(('http://', 'https://')):
+            url = 'https://' + url
+        return url.rstrip('/')
+    async def generate_profile_url(self, domain: str, return_url: str, sub_nav: str) -> Dict[str, str]:
+        """
+        Generates a URL to the user profile portal.
+        Args:
+            domain: The domain of the Kinde instance
+            return_url: URL to redirect to after completing the profile flow
+            sub_nav: Sub-navigation section to display
+        Returns:
+            Dict containing the URL to redirect to:
+            {
+                "url": str
+            }
+        Raises:
+            Exception: If active storage is not found
+            Exception: If access token is not found
+            Exception: If the API request fails
+            Exception: If the response contains an invalid URL
+        """
+        token_manager = self._get_token_manager()
+        if not token_manager:
+            raise Exception("generate_profile_url: Active storage not found")
+        token = token_manager.get_access_token()
+        if not token:
+            raise Exception("generate_profile_url: Access Token not found")
+        sanitized_domain = self._sanitize_url(domain)
+        encoded_return_url = urllib.parse.quote(return_url)
+        url = f"{sanitized_domain}/account_api/v1/portal_link?return_url={encoded_return_url}&sub_nav={sub_nav}"
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                url,
+                headers={"Authorization": f"Bearer {token}"}
+            )
+            if not response.is_success:
+                raise Exception(f"Failed to fetch profile URL: {response.status_code} {response.reason_phrase}")
+            result = response.json()
+            if not result.get("url") or not isinstance(result["url"], str):
+                raise Exception("Invalid URL received from API")
+            try:
+                # Validate the URL format
+                parsed_url = urlparse(result["url"])
+                if not all([parsed_url.scheme, parsed_url.netloc]):
+                    raise ValueError("Invalid URL format")
+                return {"url": result["url"]}
+            except Exception as e:
+                self._logger.error(f"Error parsing URL: {e}")
+                raise Exception(f"Invalid URL format received from API: {result['url']}")
+# Create a singleton instance
+profiles = Profiles()

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/auth/token_manager.py RENAMED Viewed

@@ -1,6 +1,7 @@
 import time
 import requests
 import threading
+import logging
 from typing import Any, Dict, Optional
 import jwt
@@ -39,14 +40,27 @@ class TokenManager:
     def set_tokens(self, token_data: Dict[str, Any]):
         """ Store tokens with expiration. """
         with self.lock:
-            self.tokens = {
+            # Update existing tokens instead of creating new dict
+            self.tokens.update({
                 "access_token": token_data.get("access_token"),
                 "expires_at": time.time() + token_data.get("expires_in", 3600),
-            }
+            })
             # Store refresh token if available
             if "refresh_token" in token_data:
                 self.tokens["refresh_token"] = token_data["refresh_token"]
+            # Decode access token claims
+            if "access_token" in token_data:
+                try:
+                    access_token_payload = jwt.decode(
+                        token_data["access_token"],
+                        options={"verify_signature": False}
+                    )
+                    self.tokens["access_token_claims"] = access_token_payload
+                except Exception as e:
+                    logging.error(f"Failed to decode access token claims: {str(e)}")
+                    self.tokens["access_token_claims"] = {}
             # Store ID token if available
             if "id_token" in token_data:
@@ -54,15 +68,14 @@ class TokenManager:
                 # Parse claims from ID token
                 try:
-                    # Note: This is not secure verification, just for claims extraction
-                    # For proper verification, use the full JWT verification process
-                    payload = jwt.decode(
+                    id_token_payload = jwt.decode(
                         token_data["id_token"],
                         options={"verify_signature": False}
                     )
-                    self.tokens["claims"] = payload
-                except Exception:
-                    self.tokens["claims"] = {}
+                    self.tokens["id_token_claims"] = id_token_payload
+                except Exception as e:
+                    logging.error(f"Failed to decode ID token claims: {str(e)}")
+                    self.tokens["id_token_claims"] = {}
     def set_redirect_uri(self, redirect_uri: str):
         """Set the redirect URI for token exchange."""
@@ -141,8 +154,15 @@ class TokenManager:
         return self.tokens.get("id_token")
     def get_claims(self):
-        """Get the claims from the ID token if available."""
-        return self.tokens.get("claims", {})
+        """Get the claims from the access token if available, falling back to ID token claims."""
+        # First try to get claims from access token
+        claims = self.tokens.get("access_token_claims", {})
+        if not claims:
+            # Fall back to ID token claims if access token claims are not available
+            claims = self.tokens.get("id_token_claims", {})
+            if not claims:
+                logging.warning("No claims available in token manager")
+        return claims
     def revoke_token(self):
         """ Revoke the current access token. """

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/core/exceptions.py RENAMED Viewed

@@ -16,4 +16,12 @@ class KindeTokenException(KindeException):
 class KindeRetrieveException(KindeException):
     """Raised when there is an error retrieving data."""
-    pass
+    pass
+class ApiValueError(KindeException):
+    """Raised when there is an error with API values."""
+    pass
+class ApiTypeError(KindeException):
+    """Raised when there is a type error with API values."""
+    pass

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/management/api_client.py RENAMED Viewed

@@ -29,10 +29,10 @@ from urllib3.fields import RequestField as RequestFieldBase
 import frozendict
-from kinde_sdk import rest
+# from kinde_sdk import rest
 from kinde_sdk.management.configuration import Configuration
-from kinde_sdk.exceptions import ApiTypeError, ApiValueError
-from kinde_sdk.schemas import (
+from kinde_sdk.core.exceptions import ApiTypeError, ApiValueError
+from kinde_sdk.management.schemas import (
     NoneClass,
     BoolClass,
     Schema,
@@ -998,7 +998,7 @@ class ApiClient:
         self.configuration = configuration
         self.pool_threads = pool_threads
-        self.rest_client = rest.RESTClientObject(configuration)
+        # self.rest_client = rest.RESTClientObject(configuration)
         self.default_headers = HTTPHeaderDict()
         if header_name is not None:
             self.default_headers[header_name] = header_value

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/management/configuration.py RENAMED Viewed

@@ -17,7 +17,7 @@ import sys
 import urllib3
 from http import client as http_client
-from kinde_sdk.exceptions import ApiValueError
+from kinde_sdk.core.exceptions import ApiValueError
 JSON_SCHEMA_VALIDATION_KEYWORDS = {

{kinde_python_sdk-2.0.0b5 → kinde_python_sdk-2.0.0b7}/kinde_sdk/management/management_token_manager.py RENAMED Viewed

@@ -23,15 +23,14 @@ class ManagementTokenManager:
         with cls._lock:
             cls._instances = {}
-    def __new__(cls, domain, *args, **kwargs):
+    def __new__(cls, domain, client_id, client_secret):
         """
         Ensure only one instance per domain and client_id combination.
         """
         with cls._lock:
-            instance_key = f"{domain}-{kwargs.get('client_id', '')}"
+            instance_key = f"{domain}-{client_id}"
             if instance_key not in cls._instances:
                 cls._instances[instance_key] = super(ManagementTokenManager, cls).__new__(cls)
-                # Pass all initialization to __init__
             return cls._instances[instance_key]
     def __init__(self, domain, client_id, client_secret):
@@ -50,10 +49,13 @@ class ManagementTokenManager:
     def set_tokens(self, token_data: Dict[str, Any]):
         """ Store tokens with expiration. """
         with self.lock:
+            # Handle None values by using default
+            expires_in = token_data.get("expires_in") or 3600
+            token_type = token_data.get("token_type") or "Bearer"
             self.tokens = {
-                "access_token": token_data.get("access_token"),
-                "expires_at": time.time() + token_data.get("expires_in", 3600),
-                "token_type": token_data.get("token_type", "Bearer")
+            "access_token": token_data.get("access_token"),
+            "expires_at": time.time() + expires_in,
+            "token_type": token_type
             }
     def get_access_token(self):

kinde-python-sdk 2.0.0b5__tar.gz → 2.0.0b7__tar.gz

kinde-python-sdk 2.0.0b5tar.gz → 2.0.0b7tar.gz