litestar-security 0.1.0__tar.gz

litestar_security-0.1.0/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

litestar_security-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,154 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  prek:
+    name: Ruff and prek
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --all-groups --python 3.14
+      - run: make lint
+
+  mypy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --all-groups --python 3.14
+      - run: make mypy
+
+  pyright:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --all-groups --python 3.14
+      - run: make pyright
+
+  slotscheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --all-groups --python 3.14
+      - run: make slotscheck
+
+  property:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --group tests --python 3.14
+      - run: make property
+
+  test_python:
+    name: test (python ${{ matrix.python-version }})
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+    uses: ./.github/workflows/test.yml
+    with:
+      coverage: ${{ matrix.python-version == '3.14' }}
+      python-version: ${{ matrix.python-version }}
+      timeout: 60
+
+  codecov:
+    needs: test_python
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download coverage artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        with:
+          name: coverage-xml
+          path: .
+
+      - name: Upload coverage reports to Codecov
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7
+        with:
+          files: coverage.xml
+          token: ${{ secrets.CODECOV_TOKEN }}
+          slug: cofin/litestar-security
+
+  docs:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --group docs --python 3.14
+      - run: make docs
+      - run: make docs-linkcheck
+
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+      - run: uv python install 3.14
+      - run: uv sync --group build --python 3.14
+      - run: make build
+      - name: Install and smoke-test wheel
+        run: |
+          uv venv --python 3.14 /tmp/litestar-security-smoke
+          uv pip install --python /tmp/litestar-security-smoke/bin/python dist/*.whl
+          /tmp/litestar-security-smoke/bin/python - <<'PY'
+          from importlib.resources import files
+
+          import litestar_security
+          from litestar_security import SecurityConfig, SecurityPlugin
+
+          assert litestar_security.__project__ == "litestar-security"
+          assert litestar_security.__version__ == "0.1.0"
+          assert SecurityConfig is not None
+          assert SecurityPlugin is not None
+          assert files("litestar_security").joinpath("py.typed").is_file()
+          PY
+          /tmp/litestar-security-smoke/bin/litestar security --help
+          /tmp/litestar-security-smoke/bin/litestar security --version

litestar_security-0.1.0/.github/workflows/docs.yml

@@ -0,0 +1,51 @@
+name: Documentation Build
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install 3.14
+
+      - name: Install documentation dependencies
+        run: uv sync --group docs --python 3.14
+
+      - name: Build documentation
+        run: make docs
+
+      - name: Upload Pages artifact
+        uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5
+        with:
+          path: docs/_build/html
+
+  deploy:
+    needs: build
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5

litestar_security-0.1.0/.github/workflows/pr-title.yml

@@ -0,0 +1,17 @@
+name: Validate PR title
+
+on:
+  pull_request:
+    types: [opened, edited, synchronize, reopened]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+jobs:
+  title:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

litestar_security-0.1.0/.github/workflows/publish.yml

@@ -0,0 +1,39 @@
+name: pypi
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  pypi:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    environment: pypi
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: false
+
+      - name: Set up Python
+        run: uv python install 3.14
+
+      - name: Install dependencies
+        run: make install PYTHON_VERSION=3.14 UV_SYNC_ARGS=--all-extras
+
+      - name: Build package
+        run: uv build
+
+      - name: Publish package distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # release/v1

litestar_security-0.1.0/.github/workflows/test.yml

@@ -0,0 +1,93 @@
+name: Test
+
+on:
+  workflow_call:
+    inputs:
+      python-version:
+        required: true
+        type: string
+      coverage:
+        required: false
+        type: boolean
+        default: false
+      os:
+        required: false
+        type: string
+        default: ubuntu-latest
+      timeout:
+        required: false
+        type: number
+        default: 60
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ${{ inputs.os }}
+    timeout-minutes: ${{ inputs.timeout }}
+    env:
+      PYTHON_VERSION: ${{ inputs.python-version }}
+    defaults:
+      run:
+        shell: bash
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@f98e06938123ccabd21905ea5d0069192241f9f1 # v8.3.2
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install "$PYTHON_VERSION"
+
+      - name: Install test dependencies
+        run: uv sync --group tests --python "$PYTHON_VERSION"
+
+      - name: Test
+        if: ${{ !inputs.coverage }}
+        run: make test
+
+      - name: Test with coverage
+        if: ${{ inputs.coverage }}
+        run: >-
+          uv run pytest -m "not performance"
+          --cov=litestar_security
+          --cov-branch
+          --cov-report=term-missing
+          --cov-report=xml
+
+      - name: Build and smoke-test installed wheel
+        run: |
+          uv build --wheel --out-dir /tmp/litestar-security-dist
+          uv venv --python "$PYTHON_VERSION" /tmp/litestar-security-wheel
+          uv pip install --python /tmp/litestar-security-wheel/bin/python /tmp/litestar-security-dist/*.whl
+          cd /tmp
+          /tmp/litestar-security-wheel/bin/python -I - <<'PY'
+          from importlib.resources import files
+          from pkgutil import walk_packages
+          import importlib
+          import sys
+
+          import litestar_security
+
+          for module in walk_packages(litestar_security.__path__, "litestar_security."):
+              if not any(part.startswith("_") for part in module.name.split(".")):
+                  importlib.import_module(module.name)
+
+          assert litestar_security.__version__ == "0.1.0"
+          assert files("litestar_security").joinpath("py.typed").is_file()
+          assert "pytest" not in sys.modules
+          PY
+          /tmp/litestar-security-wheel/bin/litestar security --version
+
+      - name: Upload coverage artifact
+        if: ${{ inputs.coverage }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: coverage-xml
+          path: coverage.xml

litestar_security-0.1.0/.gitignore

@@ -0,0 +1,78 @@
+# Virtual environments and local Python installations
+.venv/
+venv/
+env/
+.python-version
+
+# Secrets and local environment files
+.env
+.env.*
+!.env.example
+*.pem
+*.key
+
+# Python bytecode and tool caches
+__pycache__/
+*.py[cod]
+*$py.class
+.cache/
+.mypy_cache/
+.pytest_cache/
+.pyright/
+.ruff_cache/
+.tox/
+.nox/
+.hypothesis/
+
+# Test and coverage output
+.coverage
+.coverage.*
+coverage.json
+coverage.xml
+htmlcov/
+junit.xml
+
+# Build and packaging output
+build/
+dist/
+*.egg
+*.egg-info/
+.eggs/
+
+# Documentation output
+docs/_build/
+docs-build/
+
+# Editors and operating systems
+.idea/
+.vscode/
+*.code-workspace
+*.swp
+*.swo
+*~
+.DS_Store
+Thumbs.db
+
+# Local Flow, Beads, Dolt, and agent harness state
+AGENTS.md
+.agents/
+.beads/
+.dolt/
+.codex/
+.claude/
+.gemini/
+.opencode/
+opencode.json
+
+# Local scratch and logs
+.tmp/
+tmp/
+*.log
+benchmarks/
+
+# Keep the reproducible uv lockfile tracked
+!uv.lock
+
+# Beads / Dolt files (added by bd init)
+*.db
+.beads-credential-key

litestar_security-0.1.0/.pre-commit-config.yaml

@@ -0,0 +1,55 @@
+default_language_version:
+  python: "3"
+
+repos:
+  - repo: local
+    hooks:
+      - id: no-future-annotations
+        name: Disallow future annotations in package code
+        entry: python tools/hooks/no_future_annotations.py
+        language: python
+        files: ^src/litestar_security/.*\.py$
+
+  - repo: https://github.com/compilerla/conventional-pre-commit
+    rev: v4.4.0
+    hooks:
+      - id: conventional-pre-commit
+        stages: [commit-msg]
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: check-ast
+      - id: check-case-conflict
+      - id: check-toml
+      - id: check-yaml
+      - id: debug-statements
+      - id: end-of-file-fixer
+      - id: mixed-line-ending
+      - id: trailing-whitespace
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.22
+    hooks:
+      - id: ruff-check
+        args: [--fix]
+      - id: ruff-format
+
+  - repo: https://github.com/python-formate/flake8-dunder-all
+    rev: v0.6.0
+    hooks:
+      - id: ensure-dunder-all
+        args: [--use-tuple]
+        exclude: ^(docs|src/tests|tools)/
+
+  - repo: https://github.com/ariebovenberg/slotscheck
+    rev: v0.20.1
+    hooks:
+      - id: slotscheck
+        files: ^src/litestar_security/
+
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.4.3
+    hooks:
+      - id: codespell
+        additional_dependencies: [tomli]

litestar_security-0.1.0/CONTRIBUTING.rst

@@ -0,0 +1,59 @@
+Contributing
+============
+
+Litestar Security is pre-alpha. Contributions should preserve the small public
+surface until authentication or authorization behavior has an approved design.
+
+Development installation
+------------------------
+
+The project uses ``uv`` for dependency management. From the repository root,
+install every locked development group:
+
+.. code-block:: console
+
+   make install
+
+The supported Python range is 3.10 through 3.14. The lockfile remains tracked
+so local development and CI resolve the same dependency graph.
+
+Making a change
+---------------
+
+Write a failing test before changing behavior, then implement the smallest
+change that makes it pass. Keep plugin lifecycle concerns separate from future
+authentication and authorization features.
+
+Run the focused checks while editing:
+
+.. code-block:: console
+
+   make test
+   make type-check
+   make lint
+
+Before proposing a change, run the complete validation surface:
+
+.. code-block:: console
+
+   make check-all
+
+Documentation
+-------------
+
+Build the documentation and validate links locally:
+
+.. code-block:: console
+
+   make docs
+   make docs-linkcheck
+
+Public changes should include an entry under ``Unreleased`` in
+``docs/changelog.rst``.
+
+Commit messages
+---------------
+
+Use Conventional Commits, such as ``feat: add a security integration`` or
+``docs: clarify plugin setup``. The repository hooks validate commit messages
+and source files.

litestar_security-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Cody Fincher
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.