kobil-auth 3.0.0__tar.gz

kobil_auth-3.0.0/PKG-INFO

@@ -0,0 +1,39 @@
+Metadata-Version: 2.4
+Name: kobil-auth
+Version: 3.0.0
+Summary: KOBIL OIDC (OpenID Connect) authentication helper for Python.
+License: MIT
+Project-URL: Repository, https://github.com/uveysservetoglu/kobil-sdks
+Keywords: kobil,oidc,oauth2,authentication,openid-connect
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: kobil-core>=1.0
+
+# kobil-auth
+
+KOBIL OIDC (OpenID Connect) authentication helper for Python.
+
+```bash
+pip install kobil-auth
+```
+
+```python
+from kobil.auth import AuthClient
+
+auth = AuthClient(
+    authorization_endpoint="https://idp.../auth",
+    token_endpoint="https://idp.../token",
+    client_id="...",
+    client_secret="...",
+    scope="openid profile email",
+)
+
+url = auth.build_authorization_url("https://app.example.com/callback")
+tokens = auth.exchange_code_for_token(code, "https://app.example.com/callback")
+```
+
+Failures raise `kobil.auth.KobilAuthError` (subclass of `kobil.core.KobilError`).
+
+## License
+
+MIT

kobil_auth-3.0.0/README.md

@@ -0,0 +1,28 @@
+# kobil-auth
+
+KOBIL OIDC (OpenID Connect) authentication helper for Python.
+
+```bash
+pip install kobil-auth
+```
+
+```python
+from kobil.auth import AuthClient
+
+auth = AuthClient(
+    authorization_endpoint="https://idp.../auth",
+    token_endpoint="https://idp.../token",
+    client_id="...",
+    client_secret="...",
+    scope="openid profile email",
+)
+
+url = auth.build_authorization_url("https://app.example.com/callback")
+tokens = auth.exchange_code_for_token(code, "https://app.example.com/callback")
+```
+
+Failures raise `kobil.auth.KobilAuthError` (subclass of `kobil.core.KobilError`).
+
+## License
+
+MIT

kobil_auth-3.0.0/kobil/auth/__init__.py

@@ -0,0 +1,106 @@
+"""kobil.auth — KOBIL OIDC authentication helper."""
+
+from __future__ import annotations
+
+import json
+import secrets
+import urllib.error
+import urllib.parse
+import urllib.request
+from typing import Any, Dict
+
+from kobil.core import KobilError
+
+__all__ = ["AuthClient", "KobilAuthError"]
+
+_NONCE_CHARS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890_-"
+
+
+class KobilAuthError(KobilError):
+    """Thrown when an auth operation (token exchange) fails."""
+
+
+class AuthClient:
+    """OIDC helper: build the login redirect URL and exchange the code for tokens."""
+
+    def __init__(
+        self,
+        *,
+        authorization_endpoint: str,
+        token_endpoint: str,
+        client_id: str,
+        client_secret: str,
+        scope: str = "openid",
+        response_type: str = "code",
+        response_mode: str = "query",
+        nonce_length: int = 32,
+    ) -> None:
+        for name, value in (
+            ("authorization_endpoint", authorization_endpoint),
+            ("token_endpoint", token_endpoint),
+            ("client_id", client_id),
+            ("client_secret", client_secret),
+        ):
+            if not value:
+                raise KobilAuthError(f"{name} is required.")
+        self._authorization_endpoint = authorization_endpoint
+        self._token_endpoint = token_endpoint
+        self._client_id = client_id
+        self._client_secret = client_secret
+        self._scope = scope
+        self._response_type = response_type
+        self._response_mode = response_mode
+        self._nonce_length = nonce_length
+
+    def build_authorization_url(self, redirect_uri: str) -> str:
+        if not redirect_uri:
+            raise KobilAuthError("redirect_uri cannot be empty.")
+        query = urllib.parse.urlencode(
+            {
+                "client_id": self._client_id,
+                "redirect_uri": redirect_uri,
+                "scope": self._scope,
+                "response_type": self._response_type,
+                "response_mode": self._response_mode,
+                "nonce": self._nonce(self._nonce_length),
+            }
+        )
+        return f"{self._authorization_endpoint}?{query}"
+
+    def exchange_code_for_token(self, code: str, redirect_uri: str) -> Dict[str, Any]:
+        if not code:
+            raise KobilAuthError("code cannot be empty.")
+        if not redirect_uri:
+            raise KobilAuthError("redirect_uri cannot be empty.")
+
+        data = urllib.parse.urlencode(
+            {
+                "client_id": self._client_id,
+                "client_secret": self._client_secret,
+                "code": code,
+                "redirect_uri": redirect_uri,
+                "grant_type": "authorization_code",
+            }
+        ).encode()
+        request = urllib.request.Request(
+            self._token_endpoint,
+            data=data,
+            method="POST",
+            headers={"Content-Type": "application/x-www-form-urlencoded"},
+        )
+        try:
+            with urllib.request.urlopen(request) as response:
+                body = response.read().decode()
+        except urllib.error.HTTPError as exc:
+            error_body = exc.read().decode(errors="replace")
+            raise KobilAuthError(f"Token endpoint returned {exc.code}.", exc.code, error_body) from exc
+        except Exception as exc:  # noqa: BLE001
+            raise KobilAuthError("An error occurred while exchanging code for token.", cause=exc) from exc
+
+        return json.loads(body)
+
+    @staticmethod
+    def _nonce(length: int) -> str:
+        if length <= 0:
+            raise KobilAuthError("Nonce length must be greater than zero.")
+        return "".join(secrets.choice(_NONCE_CHARS) for _ in range(length))

kobil_auth-3.0.0/kobil_auth.egg-info/PKG-INFO

@@ -0,0 +1,39 @@
+Metadata-Version: 2.4
+Name: kobil-auth
+Version: 3.0.0
+Summary: KOBIL OIDC (OpenID Connect) authentication helper for Python.
+License: MIT
+Project-URL: Repository, https://github.com/uveysservetoglu/kobil-sdks
+Keywords: kobil,oidc,oauth2,authentication,openid-connect
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: kobil-core>=1.0
+
+# kobil-auth
+
+KOBIL OIDC (OpenID Connect) authentication helper for Python.
+
+```bash
+pip install kobil-auth
+```
+
+```python
+from kobil.auth import AuthClient
+
+auth = AuthClient(
+    authorization_endpoint="https://idp.../auth",
+    token_endpoint="https://idp.../token",
+    client_id="...",
+    client_secret="...",
+    scope="openid profile email",
+)
+
+url = auth.build_authorization_url("https://app.example.com/callback")
+tokens = auth.exchange_code_for_token(code, "https://app.example.com/callback")
+```
+
+Failures raise `kobil.auth.KobilAuthError` (subclass of `kobil.core.KobilError`).
+
+## License
+
+MIT

kobil_auth-3.0.0/kobil_auth.egg-info/SOURCES.txt

@@ -0,0 +1,8 @@
+README.md
+pyproject.toml
+kobil/auth/__init__.py
+kobil_auth.egg-info/PKG-INFO
+kobil_auth.egg-info/SOURCES.txt
+kobil_auth.egg-info/dependency_links.txt
+kobil_auth.egg-info/requires.txt
+kobil_auth.egg-info/top_level.txt

kobil_auth-3.0.0/kobil_auth.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

kobil_auth-3.0.0/kobil_auth.egg-info/requires.txt

@@ -0,0 +1 @@
+kobil-core>=1.0

kobil_auth-3.0.0/kobil_auth.egg-info/top_level.txt

@@ -0,0 +1 @@
+kobil

kobil_auth-3.0.0/pyproject.toml

@@ -0,0 +1,20 @@
+[build-system]
+requires = ["setuptools>=61"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "kobil-auth"
+version = "3.0.0"
+description = "KOBIL OIDC (OpenID Connect) authentication helper for Python."
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.8"
+keywords = ["kobil", "oidc", "oauth2", "authentication", "openid-connect"]
+dependencies = ["kobil-core>=1.0"]
+
+[project.urls]
+Repository = "https://github.com/uveysservetoglu/kobil-sdks"
+
+[tool.setuptools.packages.find]
+include = ["kobil*"]
+namespaces = true

kobil_auth-3.0.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+