oidcauthlib 3.0.4__tar.gz → 3.0.5__tar.gz

{oidcauthlib-3.0.4/oidcauthlib.egg-info → oidcauthlib-3.0.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oidcauthlib
-Version: 3.0.4
+Version: 3.0.5
 Summary: oidcauthlib
 Home-page: https://github.com/icanbwell/oidc-auth-lib
 Author: Imran Qureshi

oidcauthlib-3.0.5/VERSION

@@ -0,0 +1 @@
+3.0.5

{oidcauthlib-3.0.4 → oidcauthlib-3.0.5}/oidcauthlib/auth/dcr/dcr_client.py

@@ -46,7 +46,16 @@ class DcrClient:
         if contacts:
             payload["contacts"] = contacts
 
-        logger.info("Performing DCR at '%s'", registration_url)
+        logger.info(
+            "DCR: Sending registration request to '%s' with payload keys: %s",
+            registration_url,
+            sorted(payload.keys()),
+        )
+        logger.debug(
+            "DCR: Full registration payload for '%s': %s",
+            registration_url,
+            payload,
+        )
 
         async with httpx.AsyncClient(timeout=self._timeout_seconds) as client:
             response = await client.post(
@@ -57,6 +66,12 @@ class DcrClient:
             try:
                 response.raise_for_status()
             except httpx.HTTPStatusError as e:
+                logger.error(
+                    "DCR: Registration failed at '%s' — HTTP %s. Response body: %s",
+                    registration_url,
+                    e.response.status_code,
+                    e.response.text[:500],
+                )
                 raise ValueError(
                     f"DCR registration failed at '{registration_url}' "
                     f"with status {e.response.status_code}"
@@ -65,14 +80,27 @@ class DcrClient:
 
         if "client_id" not in dcr_response:
             response_keys: list[str] = sorted(dcr_response.keys())
+            logger.error(
+                "DCR: Response from '%s' missing 'client_id'. Keys present: %s",
+                registration_url,
+                response_keys,
+            )
             raise ValueError(
                 f"DCR response from '{registration_url}' missing 'client_id'. "
                 f"Response keys: {response_keys}"
             )
 
         logger.info(
-            "DCR successful at '%s': client_id=%s",
+            "DCR: Registration successful at '%s' — client_id=%s, "
+            "has_secret=%s, expires_at=%s",
             registration_url,
             dcr_response["client_id"],
+            "client_secret" in dcr_response,
+            dcr_response.get("client_secret_expires_at", "not_set"),
+        )
+        logger.debug(
+            "DCR: Full response from '%s': %s",
+            registration_url,
+            {k: v for k, v in dcr_response.items() if k != "client_secret"},
         )
         return dcr_response

{oidcauthlib-3.0.4 → oidcauthlib-3.0.5}/oidcauthlib/auth/dcr/dcr_manager.py

@@ -52,9 +52,20 @@ class DcrManager:
         contacts: list[str] | None = None,
     ) -> DcrRegistration | None:
         if client_id:
+            logger.info(
+                "DCR: Skipping registration for '%s' — client_id already "
+                "provided (client_id=%s)",
+                auth_provider,
+                client_id,
+            )
             return None
 
         if not registration_url:
+            logger.error(
+                "DCR: No registration_url and no client_id for '%s' — "
+                "cannot resolve credentials",
+                auth_provider,
+            )
             raise ValueError(
                 f"registration_url is required for DCR when client_id is not "
                 f"provided (auth_provider='{auth_provider}')"
@@ -62,19 +73,43 @@ class DcrManager:
 
         validate_url(registration_url)
 
+        logger.info(
+            "DCR: Resolving credentials for '%s' via registration_url='%s'",
+            auth_provider,
+            registration_url,
+        )
+
         cached = await self._find_cached(
             auth_provider=auth_provider,
             registration_url=registration_url,
         )
 
         if cached and not self._is_expired(cached):
-            logger.debug(
-                "Using cached DCR credentials for '%s' (client_id=%s)",
+            logger.info(
+                "DCR: Using cached credentials for '%s' — client_id=%s, "
+                "expires_at=%s",
                 auth_provider,
                 cached.client_id,
+                cached.client_secret_expires_at or "never",
             )
             return cached
 
+        if cached and self._is_expired(cached):
+            logger.info(
+                "DCR: Cached credentials for '%s' are expired "
+                "(client_id=%s, expired_at=%s) — re-registering",
+                auth_provider,
+                cached.client_id,
+                cached.client_secret_expires_at,
+            )
+        else:
+            logger.info(
+                "DCR: No cached credentials found for '%s' — performing "
+                "new registration at '%s'",
+                auth_provider,
+                registration_url,
+            )
+
         dcr_response = await self._dcr_client.register(
             registration_url=registration_url,
             redirect_uri=self._redirect_uri,
@@ -84,11 +119,17 @@ class DcrManager:
             contacts=contacts,
         )
 
-        return await self._persist(
+        registration = await self._persist(
             auth_provider=auth_provider,
             registration_url=registration_url,
             dcr_response=dcr_response,
         )
+        logger.info(
+            "DCR: Persisted credentials for '%s' — client_id=%s",
+            auth_provider,
+            registration.client_id,
+        )
+        return registration
 
     async def _find_cached(
         self,
@@ -96,6 +137,13 @@ class DcrManager:
         auth_provider: str,
         registration_url: str,
     ) -> DcrRegistration | None:
+        logger.debug(
+            "DCR: Querying cache for auth_provider='%s', "
+            "registration_url='%s', collection='%s'",
+            auth_provider,
+            registration_url,
+            self._collection_name,
+        )
         results = await self._repository.find_many(
             collection_name=self._collection_name,
             model_class=DcrRegistration,
@@ -104,6 +152,20 @@ class DcrManager:
                 "registration_url": registration_url,
             },
         )
+        if results:
+            logger.debug(
+                "DCR: Cache hit for '%s' — found %d result(s), "
+                "client_id=%s",
+                auth_provider,
+                len(results),
+                results[0].client_id,
+            )
+        else:
+            logger.debug(
+                "DCR: Cache miss for '%s' at '%s'",
+                auth_provider,
+                registration_url,
+            )
         return results[0] if results else None
 
     @staticmethod

{oidcauthlib-3.0.4 → oidcauthlib-3.0.5/oidcauthlib.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oidcauthlib
-Version: 3.0.4
+Version: 3.0.5
 Summary: oidcauthlib
 Home-page: https://github.com/icanbwell/oidc-auth-lib
 Author: Imran Qureshi

oidcauthlib-3.0.4/VERSION

@@ -1 +0,0 @@
-3.0.4