open-api-framework 0.9.2__tar.gz → 0.9.3__tar.gz

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/CHANGELOG.rst

@@ -1,6 +1,44 @@
 Changelog
 =========
 
+0.9.3 (2025-02-24)
+------------------
+
+**Bugfixes**
+
+* [#88] Automatically initialize Sentry when importing base settings and expose ``SENTRY_CONFIG`` setting
+
+    .. warning::
+
+        The ``init_sentry`` function was removed and now Sentry is initialized immediately in
+        ``open_api_framework/conf/base.py``. If your project requires additional parameters
+        to be specified (e.g. a ``before_send`` hook), it is best to reinitialize Sentry manually in your project's base setting:
+
+        .. code-block:: python
+
+            from open_api_framework.conf.base import *  # noqa
+            from open_api_framework.conf.utils import get_sentry_integrations
+
+            from your_project.utils import before_send_hook
+
+            # Reinitialize Sentry to add the before_send hook
+            SENTRY_CONFIG["before_send"] = before_send_hook
+            sentry_sdk.init(
+                **SENTRY_CONFIG,
+                integrations=get_sentry_integrations(),
+                send_default_pii=True,
+            )
+
+
+**Maintenance**
+
+* [#90] bump commonground api version to 2.1.2
+
+**Documentation**
+
+* [#108] Mention in docs that importing anything from ``base.py`` causes all settings to be loaded
+
+
 0.9.2 (2025-01-02)
 ------------------
 

{open_api_framework-0.9.2/open_api_framework.egg-info → open_api_framework-0.9.3}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.2
 Name: open_api_framework
-Version: 0.9.2
+Version: 0.9.3
 Summary: A metapackage for registration components, that bundles the dependencies shared between these components and provides generic settings
 Author-email: Maykin Media <support@maykinmedia.nl>
 License: Copyright © Maykin 2024
@@ -44,9 +44,8 @@ Requires-Dist: django-filter>=24.2
 Requires-Dist: drf-spectacular[sidecar]>=0.27.2
 Requires-Dist: django-csp>=3.8
 Requires-Dist: djangorestframework-inclusions>=1.2.0
-Requires-Dist: commonground-api-common>=1.12.1
+Requires-Dist: commonground-api-common>=2.1.2
 Requires-Dist: mozilla-django-oidc-db>=0.19.0
-Requires-Dist: zgw-consumers>=0.27.0
 Requires-Dist: psycopg2>=2.9.9
 Requires-Dist: bleach>=6.1.0
 Requires-Dist: python-dotenv>=1.0.0
@@ -63,6 +62,7 @@ Requires-Dist: django-sessionprofile>=3.0.0
 Provides-Extra: tests
 Requires-Dist: pytest; extra == "tests"
 Requires-Dist: pytest-django; extra == "tests"
+Requires-Dist: pytest-env; extra == "tests"
 Requires-Dist: tox; extra == "tests"
 Requires-Dist: isort; extra == "tests"
 Requires-Dist: black; extra == "tests"
@@ -80,7 +80,7 @@ Requires-Dist: twine; extra == "release"
 Open API Framework
 ==================
 
-:Version: 0.9.2
+:Version: 0.9.3
 :Source: https://github.com/maykinmedia/open-api-framework
 :Keywords: metapackage, dependencies
 

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/README.rst

@@ -1,7 +1,7 @@
 Open API Framework
 ==================
 
-:Version: 0.9.2
+:Version: 0.9.3
 :Source: https://github.com/maykinmedia/open-api-framework
 :Keywords: metapackage, dependencies
 

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/open_api_framework/conf/base.py

@@ -2,7 +2,6 @@ import datetime
 import os
 import warnings
 from pathlib import Path
-from typing import Callable
 
 from django.urls import reverse_lazy
 
@@ -809,36 +808,29 @@ NOTIFICATIONS_DISABLED = config(
 #
 # SENTRY - error monitoring
 #
+SENTRY_DSN = config(
+    "SENTRY_DSN",
+    None,
+    help_text=(
+        "URL of the sentry project to send error reports to. Default empty, "
+        "i.e. -> no monitoring set up. Highly recommended to configure this."
+    ),
+    auto_display_default=False,
+)
 
+if SENTRY_DSN:
+    SENTRY_CONFIG = {
+        "dsn": SENTRY_DSN,
+        "release": RELEASE or "RELEASE not set",
+        "environment": ENVIRONMENT,
+    }
 
-def init_sentry(before_send: Callable | None = None):
-    SENTRY_DSN = config(
-        "SENTRY_DSN",
-        None,
-        help_text=(
-            "URL of the sentry project to send error reports to. Default empty, "
-            "i.e. -> no monitoring set up. Highly recommended to configure this."
-        ),
-        auto_display_default=False,
+    sentry_sdk.init(
+        **SENTRY_CONFIG,
+        integrations=get_sentry_integrations(),
+        send_default_pii=True,
     )
 
-    if SENTRY_DSN:
-        SENTRY_CONFIG = {
-            "dsn": SENTRY_DSN,
-            "release": RELEASE or "RELEASE not set",
-            "environment": ENVIRONMENT,
-        }
-
-        # Allow projects to define their own before_send filters
-        if before_send:
-            SENTRY_CONFIG["before_send"] = before_send
-
-        sentry_sdk.init(
-            **SENTRY_CONFIG,
-            integrations=get_sentry_integrations(),
-            send_default_pii=True,
-        )
-
 
 #
 # CELERY

{open_api_framework-0.9.2 → open_api_framework-0.9.3/open_api_framework.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.2
 Name: open_api_framework
-Version: 0.9.2
+Version: 0.9.3
 Summary: A metapackage for registration components, that bundles the dependencies shared between these components and provides generic settings
 Author-email: Maykin Media <support@maykinmedia.nl>
 License: Copyright © Maykin 2024
@@ -44,9 +44,8 @@ Requires-Dist: django-filter>=24.2
 Requires-Dist: drf-spectacular[sidecar]>=0.27.2
 Requires-Dist: django-csp>=3.8
 Requires-Dist: djangorestframework-inclusions>=1.2.0
-Requires-Dist: commonground-api-common>=1.12.1
+Requires-Dist: commonground-api-common>=2.1.2
 Requires-Dist: mozilla-django-oidc-db>=0.19.0
-Requires-Dist: zgw-consumers>=0.27.0
 Requires-Dist: psycopg2>=2.9.9
 Requires-Dist: bleach>=6.1.0
 Requires-Dist: python-dotenv>=1.0.0
@@ -63,6 +62,7 @@ Requires-Dist: django-sessionprofile>=3.0.0
 Provides-Extra: tests
 Requires-Dist: pytest; extra == "tests"
 Requires-Dist: pytest-django; extra == "tests"
+Requires-Dist: pytest-env; extra == "tests"
 Requires-Dist: tox; extra == "tests"
 Requires-Dist: isort; extra == "tests"
 Requires-Dist: black; extra == "tests"
@@ -80,7 +80,7 @@ Requires-Dist: twine; extra == "release"
 Open API Framework
 ==================
 
-:Version: 0.9.2
+:Version: 0.9.3
 :Source: https://github.com/maykinmedia/open-api-framework
 :Keywords: metapackage, dependencies
 

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/open_api_framework.egg-info/SOURCES.txt

@@ -31,4 +31,5 @@ open_api_framework/templatetags/doc_tags.py
 open_api_framework/templatetags/open_api_framework.py
 tests/test_admin.py
 tests/test_config_helpers.py
-tests/test_generate_envvar_docs.py
+tests/test_generate_envvar_docs.py
+tests/test_settings.py

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/open_api_framework.egg-info/requires.txt

@@ -12,9 +12,8 @@ django-filter>=24.2
 drf-spectacular[sidecar]>=0.27.2
 django-csp>=3.8
 djangorestframework-inclusions>=1.2.0
-commonground-api-common>=1.12.1
+commonground-api-common>=2.1.2
 mozilla-django-oidc-db>=0.19.0
-zgw-consumers>=0.27.0
 psycopg2>=2.9.9
 bleach>=6.1.0
 python-dotenv>=1.0.0
@@ -43,6 +42,7 @@ twine
 [tests]
 pytest
 pytest-django
+pytest-env
 tox
 isort
 black

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "open_api_framework"
-version = "0.9.2"
+version = "0.9.3"
 description = "A metapackage for registration components, that bundles the dependencies shared between these components and provides generic settings"
 authors = [
     {name = "Maykin Media", email = "support@maykinmedia.nl"}
@@ -41,9 +41,8 @@ dependencies = [
     "drf-spectacular[sidecar]>=0.27.2",
     "django-csp>=3.8",
     "djangorestframework-inclusions>=1.2.0",
-    "commonground-api-common>=1.12.1",
+    "commonground-api-common>=2.1.2",
     "mozilla-django-oidc-db>=0.19.0",
-    "zgw-consumers>=0.27.0",
     "psycopg2>=2.9.9",
     "bleach>=6.1.0",
     "python-dotenv>=1.0.0",
@@ -69,6 +68,7 @@ Documentation = "http://open_api_framework.readthedocs.io/en/latest/"
 tests = [
     "pytest",
     "pytest-django",
+    "pytest-env",
     "tox",
     "isort",
     "black",
@@ -100,10 +100,15 @@ sections=["FUTURE", "STDLIB", "DJANGO", "THIRDPARTY", "FIRSTPARTY", "LOCALFOLDER
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]
-DJANGO_SETTINGS_MODULE = "testapp.settings"
+pythonpath = "."
+env = [
+    "DJANGO_SETTINGS_MODULE=testapp.settings",
+    "SECRET_KEY=not-so-secret",
+    "SENTRY_DSN=https://public@sentry.example.com/1"
+]
 
 [tool.bumpversion]
-current_version = "0.9.2"
+current_version = "0.9.3"
 files = [
     {filename = "pyproject.toml"},
     {filename = "README.rst"},

{open_api_framework-0.9.2 → open_api_framework-0.9.3}/setup.cfg

@@ -1,6 +1,6 @@
 [flake8]
 max-line-length = 119
-exclude = env,.tox,doc
+exclude = env,.tox,doc,tests/test_generate_envvar_docs.py
 
 [egg_info]
 tag_build = 

open_api_framework-0.9.3/tests/test_generate_envvar_docs.py

@@ -0,0 +1,159 @@
+from unittest.mock import mock_open, patch
+
+from django.core.management import call_command
+
+EXPECTED_OUTPUT = """\
+.. _installation_env_config:
+
+===================================
+Environment configuration reference
+===================================
+
+
+
+Available environment variables
+===============================
+
+
+Required
+--------
+
+* ``SECRET_KEY``: Secret key that's used for certain cryptographic utilities. Defaults to: ``so-secret-i-cant-believe-you-are-looking-at-this``.
+* ``ALLOWED_HOSTS``: a comma separated (without spaces!) list of domains that serve the installation. Used to protect against Host header attacks. Defaults to: ``(empty string)``.
+* ``CACHE_DEFAULT``: redis cache address for the default cache (this **MUST** be set when using Docker). Defaults to: ``localhost:6379/0``.
+* ``CACHE_AXES``: redis cache address for the brute force login protection cache (this **MUST** be set when using Docker). Defaults to: ``localhost:6379/0``.
+* ``EMAIL_HOST``: hostname for the outgoing e-mail server (this **MUST** be set when using Docker). Defaults to: ``localhost``.
+
+
+Database
+--------
+
+* ``DB_NAME``: name of the PostgreSQL database. Defaults to: ``testapp``.
+* ``DB_USER``: username of the database user. Defaults to: ``testapp``.
+* ``DB_PASSWORD``: password of the database user. Defaults to: ``testapp``.
+* ``DB_HOST``: hostname of the PostgreSQL database. Defaults to ``db`` for the docker environment, otherwise defaults to ``localhost``.
+* ``DB_PORT``: port number of the database. Defaults to: ``5432``.
+
+
+Cross-Origin-Resource-Sharing
+-----------------------------
+
+* ``CORS_ALLOW_ALL_ORIGINS``: allow cross-domain access from any client. Defaults to: ``False``.
+* ``CORS_ALLOWED_ORIGINS``: explicitly list the allowed origins for cross-domain requests. Example: http://localhost:3000,https://some-app.gemeente.nl. Defaults to: ``[]``.
+* ``CORS_ALLOWED_ORIGIN_REGEXES``: same as ``CORS_ALLOWED_ORIGINS``, but supports regular expressions. Defaults to: ``[]``.
+* ``CORS_EXTRA_ALLOW_HEADERS``: headers that are allowed to be sent as part of the cross-domain request. By default, Authorization, Accept-Crs and Content-Crs are already included. The value of this variable is added to these already included headers. Defaults to: ``[]``.
+
+
+Celery
+------
+
+* ``CELERY_RESULT_BACKEND``: the URL of the backend/broker that will be used by Celery to send the notifications. Defaults to: ``redis://localhost:6379/1``.
+
+
+Elastic APM
+-----------
+
+* ``ELASTIC_APM_SERVER_URL``: URL where Elastic APM is hosted. Defaults to: ``None``.
+* ``ELASTIC_APM_SERVICE_NAME``: Name of the service for this application in Elastic APM. Defaults to ``testapp - <environment>``.
+* ``ELASTIC_APM_SECRET_TOKEN``: Token used to communicate with Elastic APM. Defaults to: ``default``.
+* ``ELASTIC_APM_TRANSACTION_SAMPLE_RATE``: By default, the agent will sample every transaction (e.g. request to your service). To reduce overhead and storage requirements, set the sample rate to a value between 0.0 and 1.0. Defaults to: ``0.1``.
+
+
+Content Security Policy
+-----------------------
+
+* ``CSP_EXTRA_DEFAULT_SRC``: Extra default source URLs for CSP other than ``self``. Used for ``img-src``, ``style-src`` and ``script-src``. Defaults to: ``[]``.
+* ``CSP_REPORT_URI``: URI of the``report-uri`` directive. Defaults to: ``None``.
+* ``CSP_REPORT_PERCENTAGE``: Percentage of requests that get the ``report-uri`` directive. Defaults to: ``0``.
+* ``CSP_EXTRA_FORM_ACTION``: Add additional ``form-action`` source to the default . Defaults to: ``[]``.
+* ``CSP_FORM_ACTION``: Override the default ``form-action`` source. Defaults to: ``['"\\'self\\'"']``.
+* ``CSP_EXTRA_IMG_SRC``: Extra ``img-src`` sources for CSP other than ``CSP_DEFAULT_SRC``. Defaults to: ``[]``.
+* ``CSP_OBJECT_SRC``: ``object-src`` urls. Defaults to: ``['"\\'none\\'"']``.
+
+
+Optional
+--------
+
+* ``SITE_ID``: The database ID of the site object. You usually won't have to touch this. Defaults to: ``1``.
+* ``DEBUG``: Only set this to ``True`` on a local development environment. Various other security settings are derived from this setting!. Defaults to: ``False``.
+* ``USE_X_FORWARDED_HOST``: whether to grab the domain/host from the X-Forwarded-Host header or not. This header is typically set by reverse proxies (such as nginx, traefik, Apache...). Note: this is a header that can be spoofed and you need to ensure you control it before enabling this. Defaults to: ``False``.
+* ``IS_HTTPS``: Used to construct absolute URLs and controls a variety of security settings. Defaults to the inverse of ``DEBUG``.
+* ``EMAIL_PORT``: port number of the outgoing e-mail server. Note that if you're on Google Cloud, sending e-mail via port 25 is completely blocked and you should use 487 for TLS. Defaults to: ``25``.
+* ``EMAIL_HOST_USER``: username to connect to the mail server. Defaults to: ``(empty string)``.
+* ``EMAIL_HOST_PASSWORD``: password to connect to the mail server. Defaults to: ``(empty string)``.
+* ``EMAIL_USE_TLS``: whether to use TLS or not to connect to the mail server. Should be True if you're changing the ``EMAIL_PORT`` to 487. Defaults to: ``False``.
+* ``DEFAULT_FROM_EMAIL``: The default email address from which emails are sent. Defaults to: ``testapp@example.com``.
+* ``LOG_STDOUT``: whether to log to stdout or not. Defaults to: ``True``.
+* ``LOG_LEVEL``: control the verbosity of logging output. Available values are ``CRITICAL``, ``ERROR``, ``WARNING``, ``INFO`` and ``DEBUG``. Defaults to: ``WARNING``.
+* ``LOG_QUERIES``: enable (query) logging at the database backend level. Note that you must also set ``DEBUG=1``, which should be done very sparingly!. Defaults to: ``False``.
+* ``LOG_REQUESTS``: enable logging of the outgoing requests. Defaults to: ``False``.
+* ``CELERY_LOGLEVEL``: control the verbosity of logging output for celery, independent of ``LOG_LEVEL``. Available values are ``CRITICAL``, ``ERROR``, ``WARNING``, ``INFO`` and ``DEBUG``. Defaults to: ``INFO``.
+* ``SESSION_COOKIE_AGE``: For how long, in seconds, the session cookie will be valid. Defaults to: ``1209600``.
+* ``SESSION_COOKIE_SAMESITE``: The value of the SameSite flag on the session cookie. This flag prevents the cookie from being sent in cross-site requests thus preventing CSRF attacks and making some methods of stealing session cookie impossible.Currently interferes with OIDC. Keep the value set at Lax if used. Defaults to: ``Lax``.
+* ``CSRF_COOKIE_SAMESITE``: The value of the SameSite flag on the CSRF cookie. This flag prevents the cookie from being sent in cross-site requests. Defaults to: ``Strict``.
+* ``ENVIRONMENT``: An identifier for the environment, displayed in the admin depending on the settings module used and included in the error monitoring (see ``SENTRY_DSN``). The default is set according to ``DJANGO_SETTINGS_MODULE``.
+* ``SUBPATH``: If hosted on a subpath, provide the value here. If you provide ``/gateway``, the component assumes its running at the base URL: ``https://somedomain/gateway/``. Defaults to an empty string. Defaults to: ``None``.
+* ``RELEASE``: The version number or commit hash of the application (this is also sent to Sentry).
+* ``NUM_PROXIES``: the number of reverse proxies in front of the application, as an integer. This is used to determine the actual client IP adres. On Kubernetes with an ingress you typically want to set this to 2. Defaults to: ``1``.
+* ``CSRF_TRUSTED_ORIGINS``: A list of trusted origins for unsafe requests (e.g. POST). Defaults to: ``[]``.
+* ``NOTIFICATIONS_DISABLED``: indicates whether or not notifications should be sent to the Notificaties API for operations on the API endpoints. Defaults to ``True`` for the ``dev`` environment, otherwise defaults to ``False``.
+* ``SENTRY_DSN``: URL of the sentry project to send error reports to. Default empty, i.e. -> no monitoring set up. Highly recommended to configure this.
+* ``DISABLE_2FA``: Whether or not two factor authentication should be disabled. Defaults to: ``False``.
+* ``LOG_OUTGOING_REQUESTS_EMIT_BODY``: Whether or not outgoing request bodies should be logged. Defaults to: ``True``.
+* ``LOG_OUTGOING_REQUESTS_DB_SAVE``: Whether or not outgoing request logs should be saved to the database. Defaults to: ``False``.
+* ``LOG_OUTGOING_REQUESTS_DB_SAVE_BODY``: Whether or not outgoing request bodies should be saved to the database. Defaults to: ``True``.
+* ``LOG_OUTGOING_REQUESTS_MAX_AGE``: The amount of time after which request logs should be deleted from the database. Defaults to: ``7``.
+
+
+
+
+
+Specifying the environment variables
+=====================================
+
+There are two strategies to specify the environment variables:
+
+* provide them in a ``.env`` file
+* start the component processes (with uwsgi/gunicorn/celery) in a process
+  manager that defines the environment variables
+
+Providing a .env file
+---------------------
+
+This is the most simple setup and easiest to debug. The ``.env`` file must be
+at the root of the project - i.e. on the same level as the ``src`` directory (
+NOT *in* the ``src`` directory).
+
+The syntax is key-value:
+
+.. code::
+
+   SOME_VAR=some_value
+   OTHER_VAR="quoted_value"
+
+
+Provide the envvars via the process manager
+-------------------------------------------
+
+If you use a process manager (such as supervisor/systemd), use their techniques
+to define the envvars. The component will pick them up out of the box.
+"""
+
+
+def test_generate_envvar_docs():
+    mock_file = mock_open()
+    with patch(
+        "open_api_framework.management.commands.generate_envvar_docs.open", mock_file
+    ):
+        call_command(
+            "generate_envvar_docs", file="some/file/path.txt", exclude_group="Excluded"
+        )
+
+        mock_file.assert_called_once_with("some/file/path.txt", "w")
+
+        handle = mock_file()
+
+        # Check the entire content written to the mock file
+        written_content = "".join(call.args[0] for call in handle.write.call_args_list)
+
+        assert written_content == EXPECTED_OUTPUT

open_api_framework-0.9.3/tests/test_settings.py

@@ -0,0 +1,8 @@
+def test_sentry_settings():
+    """
+    test that sentry settings are initialized
+    """
+    from django.conf import settings
+
+    assert hasattr(settings, "SENTRY_CONFIG") is True
+    assert hasattr(settings, "SENTRY_DSN") is True

open_api_framework-0.9.2/tests/test_generate_envvar_docs.py

@@ -1,85 +0,0 @@
-from unittest.mock import mock_open, patch
-
-from django.core.management import call_command
-
-EXPECTED_OUTPUT = """\
-.. _installation_env_config:
-
-===================================
-Environment configuration reference
-===================================
-
-
-
-Available environment variables
-===============================
-
-
-Required
---------
-
-* ``SECRET_KEY``: Secret key that's used for certain cryptographic utilities. Defaults to: \
-``so-secret-i-cant-believe-you-are-looking-at-this``.
-
-
-Optional
---------
-
-* ``DEBUG``: Only set this to ``True`` on a local development environment. Various other \
-security settings are derived from this setting!. Defaults to: ``False``.
-* ``IS_HTTPS``: Used to construct absolute URLs and controls a variety of security settings. \
-Defaults to the inverse of ``DEBUG``.
-
-
-
-
-
-Specifying the environment variables
-=====================================
-
-There are two strategies to specify the environment variables:
-
-* provide them in a ``.env`` file
-* start the component processes (with uwsgi/gunicorn/celery) in a process
-  manager that defines the environment variables
-
-Providing a .env file
----------------------
-
-This is the most simple setup and easiest to debug. The ``.env`` file must be
-at the root of the project - i.e. on the same level as the ``src`` directory (
-NOT *in* the ``src`` directory).
-
-The syntax is key-value:
-
-.. code::
-
-   SOME_VAR=some_value
-   OTHER_VAR="quoted_value"
-
-
-Provide the envvars via the process manager
--------------------------------------------
-
-If you use a process manager (such as supervisor/systemd), use their techniques
-to define the envvars. The component will pick them up out of the box.
-"""
-
-
-def test_generate_envvar_docs():
-    mock_file = mock_open()
-    with patch(
-        "open_api_framework.management.commands.generate_envvar_docs.open", mock_file
-    ):
-        call_command(
-            "generate_envvar_docs", file="some/file/path.txt", exclude_group="Excluded"
-        )
-
-        mock_file.assert_called_once_with("some/file/path.txt", "w")
-
-        handle = mock_file()
-
-        # Check the entire content written to the mock file
-        written_content = "".join(call.args[0] for call in handle.write.call_args_list)
-
-        assert written_content == EXPECTED_OUTPUT