latch-asgi 1.0.4__tar.gz → 1.0.6.dev0__tar.gz

{latch_asgi-1.0.4 → latch_asgi-1.0.6.dev0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: latch-asgi
-Version: 1.0.4
+Version: 1.0.6.dev0
 Summary: ASGI python server
 Author-Email: Max Smolin <max@latch.bio>
 License: CC0-1.0

{latch_asgi-1.0.4 → latch_asgi-1.0.6.dev0}/latch_asgi/auth.py

@@ -147,15 +147,15 @@ def get_signer_sub(auth_header: str) -> Authorization:
             # ) from e
 
     with app_tracer.start_as_current_span("decode jwt"):
+        audience = config.audience if jwt_key != config.self_signed_jwk else None
         try:
             jwt_data: dict[str, str] = jwt.decode(
                 oauth_token,
                 key=jwt_key,
                 algorithms=["RS256", "HS256"],
                 # fixme(maximsmol): gut this abomination
-                audience=(
-                    config.audience if jwt_key != config.self_signed_jwk else None
-                ),
+                audience=audience,
+                options={"verify_aud": audience is not None},
             )
         except jwt.exceptions.InvalidTokenError as e:
             # todo(maximsmol): filter out scope failures and include the correct error code

{latch_asgi-1.0.4 → latch_asgi-1.0.6.dev0}/latch_asgi/context/websocket.py

@@ -27,9 +27,42 @@ class Context(
 
     @trace_app_function
     async def accept_connection(
-        self: Self, *, subprotocol: str | None = None, headers: Headers | None = None
+        self: Self,
+        *,
+        subprotocol: str | None = None,
+        headers: Headers | None = None,
+        negotiate_permessage_deflate: bool = False,
     ) -> None:
-        await accept_connection(self.send, subprotocol=subprotocol, headers=headers)
+        if not negotiate_permessage_deflate:
+            await accept_connection(self.send, subprotocol=subprotocol, headers=headers)
+            return
+
+        offer = self.header_str("sec-websocket-extensions")
+
+        headers_out: Headers = {}
+        if headers is not None:
+            headers_out = dict(headers)
+
+        def _has_extensions_header(h: Headers) -> bool:
+            for k in h.keys():
+                if isinstance(k, bytes):
+                    if k.decode("latin-1").lower() == "sec-websocket-extensions":
+                        return True
+                else:
+                    if k.lower() == "sec-websocket-extensions":
+                        return True
+            return False
+
+        if (
+            offer is not None
+            and "permessage-deflate" in offer.replace(" ", "").lower()
+            and not _has_extensions_header(headers_out)
+        ):
+            headers_out["Sec-WebSocket-Extensions"] = "permessage-deflate"
+
+        await accept_connection(
+            self.send, subprotocol=subprotocol, headers=headers_out or headers
+        )
 
     @trace_app_function
     async def receive_message(self: Self, cls: type[T]) -> T:

{latch_asgi-1.0.4 → latch_asgi-1.0.6.dev0}/latch_asgi/framework/common.py

@@ -22,6 +22,7 @@ otel_header_whitelist = {
     "sec-gpc",
     "te",
     "upgrade-insecure-requests",
+    "sec-websocket-extensions",
     "device-memory",
     "downlink",
     "dpr",

{latch_asgi-1.0.4 → latch_asgi-1.0.6.dev0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "latch-asgi"
-version = "1.0.4"
+version = "1.0.6.dev0"
 description = "ASGI python server"
 authors = [
     { name = "Max Smolin", email = "max@latch.bio" },