kinde-python-sdk 2.2.0__tar.gz → 2.3.0__tar.gz

{kinde_python_sdk-2.2.0/kinde_python_sdk.egg-info → kinde_python_sdk-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kinde-python-sdk
-Version: 2.2.0
+Version: 2.3.0
 Summary: Connect your app to the Kinde platform
 Author-email: Kinde Engineering <engineering@kinde.com>
 Project-URL: Homepage, https://github.com/kinde-oss/kinde-python-sdk
@@ -21,12 +21,13 @@ Requires-Dist: urllib3<3.0,>=2.2.0
 Requires-Dist: python-dateutil<3.0,>=2.9.0
 Requires-Dist: Authlib<2.0,>=1.3.0
 Requires-Dist: pyjwt<3.0,>=2.10.0
-Requires-Dist: requests<3.0,>=2.32.2
+Requires-Dist: requests~=2.32.5; python_version < "3.10"
+Requires-Dist: requests~=2.33.0; python_version >= "3.10"
 Requires-Dist: typing-extensions<5.0,>=4.11.0
 Requires-Dist: frozendict<3.0,>=2.4.3
-Requires-Dist: certifi<2025.0.0,>=2024.2.2
+Requires-Dist: certifi>=2026.1.4
 Requires-Dist: PyYAML<7.0.0,>=6.0.1
-Requires-Dist: cryptography<42.0.0,>=41.0.0
+Requires-Dist: cryptography<47.0,>=43.0.1
 Requires-Dist: python-dotenv<2.0.0,>=1.0.0
 Requires-Dist: itsdangerous<3.0.0,>=2.2.0
 Requires-Dist: nest-asyncio<2.0.0,>=1.5.8
@@ -35,9 +36,23 @@ Requires-Dist: pydantic<3.0.0,>=2.0.0
 Provides-Extra: fastapi
 Requires-Dist: fastapi<1.0.0,>=0.110.0; extra == "fastapi"
 Requires-Dist: python-multipart<1.0.0,>=0.0.6; extra == "fastapi"
-Requires-Dist: uvicorn<0.26.0,>=0.25.0; extra == "fastapi"
+Requires-Dist: uvicorn<1.0.0,>=0.37.0; extra == "fastapi"
 Provides-Extra: flask
 Requires-Dist: flask<4.0.0,>=3.0.0; extra == "flask"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.4.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
+Requires-Dist: pytest-django>=4.5.2; extra == "dev"
+Requires-Dist: mypy>=1.5.0; extra == "dev"
+Requires-Dist: bandit>=1.7; extra == "dev"
+Requires-Dist: pylint>=4.0.0; python_version >= "3.10" and extra == "dev"
+Requires-Dist: pylint<4.0,>=2.0; python_version < "3.10" and extra == "dev"
+Requires-Dist: pycodestyle>=2.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.26.0; extra == "dev"
+Requires-Dist: pytest-timeout>=2.2.0; extra == "dev"
+Requires-Dist: black>=24.3.0; extra == "dev"
+Requires-Dist: flake8>=6.1.0; extra == "dev"
+Requires-Dist: isort>=5.12.0; extra == "dev"
 Dynamic: license-file
 
 # Kinde Python SDK
@@ -763,6 +778,20 @@ If you're upgrading from v1 of the Kinde Python SDK, we've prepared comprehensiv
 
 Please refer to Kinde's [contributing guidelines](https://github.com/kinde-oss/.github/blob/489e2ca9c3307c2b2e098a885e22f2239116394a/CONTRIBUTING.md).
 
+### Development Setup
+
+To set up the development environment, install the package in editable mode with development dependencies:
+
+```bash
+pip install -e ".[dev]"
+```
+
+**Note:** The `dev` optional dependency group includes all development tools (pytest, mypy, pylint, etc.). Pylint is conditionally installed based on your Python version:
+- **Python 3.10+**: pylint >=4.0.0
+- **Python 3.9**: pylint >=2.0, <4.0
+
+This ensures compatibility with Python 3.9 while allowing newer Python versions to use the latest pylint features.
+
 ## License
 
 By contributing to Kinde, you agree that your contributions will be licensed under its MIT License.

{kinde_python_sdk-2.2.0 → kinde_python_sdk-2.3.0}/README.md

@@ -721,6 +721,20 @@ If you're upgrading from v1 of the Kinde Python SDK, we've prepared comprehensiv
 
 Please refer to Kinde's [contributing guidelines](https://github.com/kinde-oss/.github/blob/489e2ca9c3307c2b2e098a885e22f2239116394a/CONTRIBUTING.md).
 
+### Development Setup
+
+To set up the development environment, install the package in editable mode with development dependencies:
+
+```bash
+pip install -e ".[dev]"
+```
+
+**Note:** The `dev` optional dependency group includes all development tools (pytest, mypy, pylint, etc.). Pylint is conditionally installed based on your Python version:
+- **Python 3.10+**: pylint >=4.0.0
+- **Python 3.9**: pylint >=2.0, <4.0
+
+This ensures compatibility with Python 3.9 while allowing newer Python versions to use the latest pylint features.
+
 ## License
 
 By contributing to Kinde, you agree that your contributions will be licensed under its MIT License.

kinde_python_sdk-2.3.0/kinde_fastapi/examples/example_app.py

@@ -0,0 +1,143 @@
+"""
+Kinde FastAPI Example Application
+
+This example demonstrates how to use the Kinde OAuth client in a FastAPI application.
+The OAuth class automatically registers authentication routes and handles the OAuth flow.
+
+Key Features Demonstrated:
+- Simple OAuth setup with FastAPI
+- Automatic route registration (/login, /logout, /callback, /register, /user)
+- Authentication status checking
+- User information retrieval
+
+Usage:
+1. Set up your environment variables in a .env file:
+   - KINDE_CLIENT_ID=your_client_id
+   - KINDE_CLIENT_SECRET=your_client_secret
+   - KINDE_REDIRECT_URI=http://localhost:8000/callback
+   - KINDE_HOST=https://your-domain.kinde.com
+   
+2. Run from the SDK root directory:
+   python -m uvicorn kinde_fastapi.examples.example_app:app --reload --port 8000
+   
+3. Visit http://localhost:8000
+
+Available Routes (automatically registered):
+- /login - Redirects to Kinde login
+- /logout - Logs out the user
+- /callback - Handles OAuth callback
+- /register - Redirects to Kinde registration
+- /user - Returns user information (redirects to login if not authenticated)
+"""
+
+from fastapi import FastAPI
+from fastapi.responses import HTMLResponse, RedirectResponse
+from .session import InMemorySessionMiddleware
+import os
+import html
+from dotenv import load_dotenv
+import logging
+from kinde_sdk.auth.oauth import OAuth
+
+logger = logging.getLogger(__name__)
+
+# Load environment variables from .env file located alongside this script
+load_dotenv(os.path.join(os.path.dirname(__file__), ".env"))
+
+# Initialize FastAPI app
+app = FastAPI(title="Kinde FastAPI Example")
+
+# Add session middleware with proper configuration
+# This is required for storing session data between requests
+app.add_middleware(
+    InMemorySessionMiddleware,
+    max_age=3600,  # 1 hour
+    https_only=False
+)
+
+# Initialize Kinde OAuth with FastAPI framework
+# This automatically registers /login, /logout, /callback, /register, /user routes
+kinde_oauth = OAuth(
+    framework="fastapi",
+    app=app
+)
+
+# Example home route
+@app.get("/", response_class=HTMLResponse)
+def home():
+    """
+    Home page that shows different content based on authentication status.
+    """
+    if kinde_oauth.is_authenticated():
+        try:
+            user = kinde_oauth.get_user_info()
+        except Exception as e:
+            error_msg = html.escape(str(e))
+            logger.exception("Error getting user info")
+            return f"""
+            <html>
+                <body>
+                    <h1>Error</h1>
+                    <p>Failed to get user information: {error_msg}</p>
+                    <a href="/logout">Logout</a>
+                </body>
+            </html>
+            """
+        else:
+            email = html.escape(user.get('email', 'N/A'))
+            given_name = html.escape(user.get('given_name', ''))
+            family_name = html.escape(user.get('family_name', ''))
+            user_id = html.escape(user.get('sub', 'N/A'))
+            return f"""
+            <html>
+                <body>
+                    <h1>Welcome, {email}!</h1>
+                    <p>You are logged in.</p>
+                    <h3>User Information:</h3>
+                    <ul>
+                        <li><strong>Email:</strong> {email}</li>
+                        <li><strong>Name:</strong> {given_name} {family_name}</li>
+                        <li><strong>ID:</strong> {user_id}</li>
+                    </ul>
+                    <hr>
+                    <p><a href="/user">View Full User Info (JSON)</a></p>
+                    <p><a href="/logout">Logout</a></p>
+                </body>
+            </html>
+            """
+    
+    return """
+    <html>
+        <body>
+            <h1>Welcome to the Kinde FastAPI Example</h1>
+            <p>You are not logged in.</p>
+            <p>This example demonstrates Kinde OAuth integration with FastAPI.</p>
+            <p><a href="/login">Login</a> | <a href="/register">Register</a></p>
+        </body>
+    </html>
+    """
+
+
+@app.get("/protected")
+def protected_route():
+    """
+    Example of a protected route that requires authentication.
+    Redirects to login if not authenticated.
+    """
+    if not kinde_oauth.is_authenticated():
+        return RedirectResponse("/login")
+    
+    try:
+        user = kinde_oauth.get_user_info()
+        return {
+            "message": "This is a protected route",
+            "user": user.get('email')
+        }
+    except Exception:
+        logger.exception("Error getting user info in protected route")
+        return RedirectResponse("/login")
+
+
+if __name__ == "__main__":
+    import uvicorn
+    uvicorn.run(app, host="127.0.0.1", port=8000)

{kinde_python_sdk-2.2.0 → kinde_python_sdk-2.3.0}/kinde_fastapi/framework/fastapi_framework.py

@@ -1,5 +1,5 @@
-from typing import Optional, Dict, Any
-from fastapi import FastAPI, Request, Depends
+from typing import Optional
+from fastapi import FastAPI, Request
 from fastapi.responses import RedirectResponse, HTMLResponse
 from kinde_sdk.core.framework.framework_interface import FrameworkInterface
 from kinde_sdk.auth.oauth import OAuth
@@ -55,7 +55,6 @@ class FastAPIFramework(FrameworkInterface):
         """
         Start the framework.
         This method initializes any necessary FastAPI components and registers Kinde routes.
-        This method initializes any necessary FastAPI components and registers Kinde routes.
         """
         if not self._initialized:
             # Add framework middleware
@@ -119,11 +118,11 @@ class FastAPIFramework(FrameworkInterface):
         Register all Kinde-specific routes with the FastAPI application.
         """
         # Helper function to get current user
-        async def get_current_user(request: Request):
-            if not self._oauth.is_authenticated(request):
+        async def get_current_user():
+            if not self._oauth.is_authenticated():
                 return None
             try:
-                return self._oauth.get_user_info(request)
+                return self._oauth.get_user_info()
             except ValueError:
                 return None
         
@@ -131,7 +130,15 @@ class FastAPIFramework(FrameworkInterface):
         @self.app.get("/login")
         async def login(request: Request):
             """Redirect to Kinde login page."""
-            url=await self._oauth.login()
+            # Build login options from query parameters
+            login_options = {}
+            
+            # Check for invitation_code in query parameters
+            invitation_code = request.query_params.get('invitation_code')
+            if invitation_code:
+                login_options['invitation_code'] = invitation_code
+            
+            url = await self._oauth.login(login_options)
             self._logger.warning(f"[Login] Session is: {request.session}")
             return RedirectResponse(url=url)
         
@@ -219,17 +226,17 @@ class FastAPIFramework(FrameworkInterface):
         
         # Register route
         @self.app.get("/register")
-        async def register(request: Request):
+        async def register():
             """Redirect to Kinde registration page."""
             return RedirectResponse(url=await self._oauth.register())
         
         # User info route
         @self.app.get("/user")
-        async def get_user(request: Request):
+        async def get_user():
             """Get the current user's information."""
-            if not self._oauth.is_authenticated(request):
+            if not self._oauth.is_authenticated():
                 return RedirectResponse(url=await self._oauth.login())
-            return self._oauth.get_user_info(request)
+            return self._oauth.get_user_info()
     
     def can_auto_detect(self) -> bool:
         """
@@ -240,6 +247,7 @@ class FastAPIFramework(FrameworkInterface):
         """
         try:
             import fastapi
+            _ = fastapi  # Import check only
             return True
         except ImportError:
             return False 

{kinde_python_sdk-2.2.0 → kinde_python_sdk-2.3.0}/kinde_flask/examples/example_app.py

@@ -4,8 +4,8 @@ from dotenv import load_dotenv
 
 from kinde_sdk.auth.oauth import OAuth
 
-# Load environment variables from .env file
-load_dotenv()
+# Load environment variables from .env file located alongside this script
+load_dotenv(os.path.join(os.path.dirname(__file__), ".env"))
 
 # Initialize Flask app
 app = Flask(__name__)

{kinde_python_sdk-2.2.0 → kinde_python_sdk-2.3.0}/kinde_flask/framework/flask_framework.py

@@ -1,19 +1,21 @@
-from typing import Optional, Dict, Any, TYPE_CHECKING
+from typing import Optional, TYPE_CHECKING
 from flask import Flask, request, redirect, session
+from flask_session import Session
 from kinde_sdk.core.framework.framework_interface import FrameworkInterface
 from kinde_sdk.auth.oauth import OAuth
 from ..middleware.framework_middleware import FrameworkMiddleware
 import os
 import uuid
 import asyncio
-import threading
 import logging
-import nest_asyncio
-from flask_session import Session
+import secrets
+import tempfile
 
 if TYPE_CHECKING:
     from flask import Request
 
+logger = logging.getLogger(__name__)
+
 class FlaskFramework(FrameworkInterface):
     """
     Flask framework implementation.
@@ -32,13 +34,35 @@ class FlaskFramework(FrameworkInterface):
         self._initialized = False
         self._oauth = None
         
-        # Configure Flask session
-        self.app.config['SECRET_KEY'] = os.getenv('SECRET_KEY', 'your-secret-key')
-        self.app.config['SESSION_TYPE'] = 'filesystem'
+        # Configure Flask session for server-side storage
+        # This is required because OAuth tokens can exceed cookie size limits (~4KB)
+        secret_key = os.getenv('SECRET_KEY')
+        if not secret_key:
+            secret_key = secrets.token_urlsafe(32)
+            logger.warning(
+                "SECRET_KEY not set. Generated a random key for this session. "
+                "Set SECRET_KEY environment variable for production use."
+            )
+        self.app.config['SECRET_KEY'] = secret_key
+        self.app.config['SESSION_TYPE'] = os.getenv('SESSION_TYPE', 'filesystem')
         self.app.config['SESSION_PERMANENT'] = False
         
-        # Enable nested event loops
-        nest_asyncio.apply()
+        session_file_dir = os.getenv('SESSION_FILE_DIR')
+        if not session_file_dir:
+            # Create a secure temporary directory with restrictive permissions (0700)
+            session_file_dir = tempfile.mkdtemp(prefix='kinde_flask_sessions_')
+            os.chmod(session_file_dir, 0o700)
+            logger.warning(
+                f"SESSION_FILE_DIR not set. Using temporary directory: {session_file_dir}. "
+                "Set SESSION_FILE_DIR environment variable for production use."
+            )
+        self.app.config['SESSION_FILE_DIR'] = session_file_dir
+        
+        # Initialize Flask-Session extension
+        # Without this, SESSION_TYPE is ignored and Flask uses client-side cookie sessions
+        Session(self.app)
+        logger.debug("Flask-Session initialized with server-side storage")
+        
     
     def get_name(self) -> str:
         """
@@ -121,6 +145,27 @@ class FlaskFramework(FrameworkInterface):
         """
         self._oauth = oauth
     
+    @staticmethod
+    def _run_async(coro):
+        """
+        Run an async coroutine in a new event loop, then close it.
+        
+        This helper ensures consistent event loop handling across all routes.
+        Clears the event loop reference before closing to prevent use-after-close issues.
+        
+        Args:
+            coro: The coroutine to run
+            
+        Returns:
+            The result of the coroutine
+        """
+        loop = asyncio.new_event_loop()
+        try:
+            return loop.run_until_complete(coro)
+        finally:
+            asyncio.set_event_loop(None)
+            loop.close()
+    
     def _register_kinde_routes(self) -> None:
         """
         Register all Kinde-specific routes with the Flask application.
@@ -129,8 +174,15 @@ class FlaskFramework(FrameworkInterface):
         @self.app.route('/login')
         def login():
             """Redirect to Kinde login page."""
-            loop = asyncio.get_event_loop()
-            login_url = loop.run_until_complete(self._oauth.login())
+            # Build login options from query parameters
+            login_options = {}
+            
+            # Check for invitation_code in query parameters
+            invitation_code = request.args.get('invitation_code')
+            if invitation_code:
+                login_options['invitation_code'] = invitation_code
+            
+            login_url = self._run_async(self._oauth.login(login_options))
             return redirect(login_url)
 
         # Callback route
@@ -198,10 +250,7 @@ class FlaskFramework(FrameworkInterface):
             
             # Handle async call to handle_redirect
             try:
-                loop = asyncio.new_event_loop()
-                asyncio.set_event_loop(loop)
-                loop.run_until_complete(self._oauth.handle_redirect(code, user_id, state))
-                loop.close()
+                self._run_async(self._oauth.handle_redirect(code, user_id, state))
             except Exception as e:
                 return f"Authentication failed: {str(e)}", 400
 
@@ -218,16 +267,14 @@ class FlaskFramework(FrameworkInterface):
             """Logout the user and redirect to Kinde logout page."""
             user_id = session.get('user_id')
             session.clear()
-            loop = asyncio.get_event_loop()
-            logout_url = loop.run_until_complete(self._oauth.logout(user_id))
+            logout_url = self._run_async(self._oauth.logout(user_id))
             return redirect(logout_url)
         
         # Register route
         @self.app.route('/register')
         def register():
             """Redirect to Kinde registration page."""
-            loop = asyncio.get_event_loop()
-            register_url = loop.run_until_complete(self._oauth.register())
+            register_url = self._run_async(self._oauth.register())
             return redirect(register_url)
         
         # User info route
@@ -235,16 +282,11 @@ class FlaskFramework(FrameworkInterface):
         def get_user():
             """Get the current user's information."""
             try:
-                if not self._oauth.is_authenticated(request):
-                    loop = asyncio.new_event_loop()
-                    asyncio.set_event_loop(loop)
-                    try:
-                        login_url = loop.run_until_complete(self._oauth.login())
-                        return redirect(login_url)
-                    finally:
-                        loop.close()
+                if not self._oauth.is_authenticated():
+                    login_url = self._run_async(self._oauth.login())
+                    return redirect(login_url)
                 
-                return self._oauth.get_user_info(request)
+                return self._oauth.get_user_info()
             except Exception as e:
                 return f"Failed to get user info: {str(e)}", 400
     
@@ -257,6 +299,7 @@ class FlaskFramework(FrameworkInterface):
         """
         try:
             import flask
+            _ = flask  # Import check only
             return True
         except ImportError:
             return False

{kinde_python_sdk-2.2.0 → kinde_python_sdk-2.3.0/kinde_python_sdk.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: kinde-python-sdk
-Version: 2.2.0
+Version: 2.3.0
 Summary: Connect your app to the Kinde platform
 Author-email: Kinde Engineering <engineering@kinde.com>
 Project-URL: Homepage, https://github.com/kinde-oss/kinde-python-sdk
@@ -21,12 +21,13 @@ Requires-Dist: urllib3<3.0,>=2.2.0
 Requires-Dist: python-dateutil<3.0,>=2.9.0
 Requires-Dist: Authlib<2.0,>=1.3.0
 Requires-Dist: pyjwt<3.0,>=2.10.0
-Requires-Dist: requests<3.0,>=2.32.2
+Requires-Dist: requests~=2.32.5; python_version < "3.10"
+Requires-Dist: requests~=2.33.0; python_version >= "3.10"
 Requires-Dist: typing-extensions<5.0,>=4.11.0
 Requires-Dist: frozendict<3.0,>=2.4.3
-Requires-Dist: certifi<2025.0.0,>=2024.2.2
+Requires-Dist: certifi>=2026.1.4
 Requires-Dist: PyYAML<7.0.0,>=6.0.1
-Requires-Dist: cryptography<42.0.0,>=41.0.0
+Requires-Dist: cryptography<47.0,>=43.0.1
 Requires-Dist: python-dotenv<2.0.0,>=1.0.0
 Requires-Dist: itsdangerous<3.0.0,>=2.2.0
 Requires-Dist: nest-asyncio<2.0.0,>=1.5.8
@@ -35,9 +36,23 @@ Requires-Dist: pydantic<3.0.0,>=2.0.0
 Provides-Extra: fastapi
 Requires-Dist: fastapi<1.0.0,>=0.110.0; extra == "fastapi"
 Requires-Dist: python-multipart<1.0.0,>=0.0.6; extra == "fastapi"
-Requires-Dist: uvicorn<0.26.0,>=0.25.0; extra == "fastapi"
+Requires-Dist: uvicorn<1.0.0,>=0.37.0; extra == "fastapi"
 Provides-Extra: flask
 Requires-Dist: flask<4.0.0,>=3.0.0; extra == "flask"
+Provides-Extra: dev
+Requires-Dist: pytest>=7.4.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
+Requires-Dist: pytest-django>=4.5.2; extra == "dev"
+Requires-Dist: mypy>=1.5.0; extra == "dev"
+Requires-Dist: bandit>=1.7; extra == "dev"
+Requires-Dist: pylint>=4.0.0; python_version >= "3.10" and extra == "dev"
+Requires-Dist: pylint<4.0,>=2.0; python_version < "3.10" and extra == "dev"
+Requires-Dist: pycodestyle>=2.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.26.0; extra == "dev"
+Requires-Dist: pytest-timeout>=2.2.0; extra == "dev"
+Requires-Dist: black>=24.3.0; extra == "dev"
+Requires-Dist: flake8>=6.1.0; extra == "dev"
+Requires-Dist: isort>=5.12.0; extra == "dev"
 Dynamic: license-file
 
 # Kinde Python SDK
@@ -763,6 +778,20 @@ If you're upgrading from v1 of the Kinde Python SDK, we've prepared comprehensiv
 
 Please refer to Kinde's [contributing guidelines](https://github.com/kinde-oss/.github/blob/489e2ca9c3307c2b2e098a885e22f2239116394a/CONTRIBUTING.md).
 
+### Development Setup
+
+To set up the development environment, install the package in editable mode with development dependencies:
+
+```bash
+pip install -e ".[dev]"
+```
+
+**Note:** The `dev` optional dependency group includes all development tools (pytest, mypy, pylint, etc.). Pylint is conditionally installed based on your Python version:
+- **Python 3.10+**: pylint >=4.0.0
+- **Python 3.9**: pylint >=2.0, <4.0
+
+This ensures compatibility with Python 3.9 while allowing newer Python versions to use the latest pylint features.
+
 ## License
 
 By contributing to Kinde, you agree that your contributions will be licensed under its MIT License.