mdb-engine 0.5.1__py3-none-any.whl → 0.7.0__py3-none-any.whl

mdb_engine/__init__.py

@@ -82,15 +82,19 @@ from .repositories import Entity, MongoRepository, Repository, UnitOfWork
 from .utils import clean_mongo_doc, clean_mongo_docs
 
 __version__ = (
-    "0.5.0"  # Major WebSocket security overhaul - cookie-based authentication
-    # - BREAKING CHANGE: Removed subprotocol tunneling support
-    # - NEW: Exclusive httpOnly cookie-based WebSocket authentication
-    # - Comprehensive security guide (WEBSOCKET_SECURITY_MULTI_APP_SSO.md)
-    # - Updated all documentation to reflect cookie-based authentication
-    # - Enhanced CSRF protection for WebSocket upgrades
-    # - Added integration tests for cookie-based WebSocket authentication
-    # - Complete test coverage for WebSocket security scenarios
-    # - Multi-app SSO compatibility with path="/" cookies
+    "0.6.0"  # Secure-by-default WebSocket authentication with encrypted session keys
+    # - NEW: WebSocket session key generation and management
+    # - NEW: Envelope encryption for WebSocket session keys
+    # - NEW: Secure-by-default CSRF protection (csrf_required: true)
+    # - NEW: WebSocketSessionManager with private collection storage
+    # - NEW: Session key endpoint (/auth/websocket-session)
+    # - NEW: Session key integration in login flow
+    # - ENHANCED: WebSocket authentication with session key support
+    # - ENHANCED: CSRF middleware session key validation
+    # - ENHANCED: Multi-app WebSocket routing with session keys
+    # - BACKWARD COMPATIBLE: Cookie-based authentication fallback
+    # - UPDATED: All documentation for secure-by-default approach
+    # - COMPREHENSIVE: Unit and integration tests for session keys
 )
 
 __all__ = [

mdb_engine/auth/__init__.py

@@ -125,6 +125,18 @@ from .utils import (
     validate_password_strength_async,
 )
 
+# WebSocket sessions
+from .websocket_sessions import (
+    WebSocketSessionManager,
+    create_websocket_session_endpoint,
+)
+
+# WebSocket tickets
+from .websocket_tickets import (
+    WebSocketTicketStore,
+    create_websocket_ticket_endpoint,
+)
+
 __all__ = [
     # Base classes
     "BaseAuthorizationProvider",
@@ -232,4 +244,10 @@ __all__ = [
     "generate_csrf_token",
     "validate_csrf_token",
     "get_csrf_token",
+    # WebSocket sessions
+    "WebSocketSessionManager",
+    "create_websocket_session_endpoint",
+    # WebSocket tickets
+    "WebSocketTicketStore",
+    "create_websocket_ticket_endpoint",
 ]