openapi-cli4ai 0.2.0__tar.gz → 0.4.0__tar.gz

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
         python-version: ["3.11", "3.12", "3.13"]
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
         with:
           enable-cache: true
       - name: Set up Python ${{ matrix.python-version }}
@@ -29,7 +29,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - name: Ruff check
         run: uvx ruff check .
       - name: Ruff format check

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/.github/workflows/codeql.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: github/codeql-action/init@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 # v3
+      - uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
         with:
           languages: python
-      - uses: github/codeql-action/analyze@ebcb5b36ded6beda4ceefea6a8bc4cc885255bb3 # v3
+      - uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/.github/workflows/publish.yml

@@ -14,7 +14,7 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
+      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       - name: Build sdist and wheel
         run: uv build
       - name: Upload artifacts
@@ -42,7 +42,7 @@ jobs:
           name: dist
           path: dist/
       - name: Generate attestations
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
         with:
           subject-path: dist/*
       - name: Publish to PyPI

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.3.0] - 2026-03-28
+
+### Added
+
+- OIDC Authorization Code + PKCE auth type (`auth.type = "oidc"`)
+- Browser-based login with localhost callback
+- `--no-browser` flag for headless/SSH environments
+- CSRF protection via state parameter validation
+- Tested with Auth0 and Keycloak
+
 ## [0.2.0] - 2026-03-26
 
 ### Added

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openapi-cli4ai
-Version: 0.2.0
+Version: 0.4.0
 Summary: Turn any REST API with an OpenAPI spec into an AI-ready CLI
 Project-URL: Homepage, https://github.com/dbgorilla/openapi-cli4ai
 Project-URL: Repository, https://github.com/dbgorilla/openapi-cli4ai
@@ -41,19 +41,24 @@ Let your AI coding agent (Claude Code, Cursor, Codex, Copilot) talk to any REST
 
 ## Install
 
-```bash
-# Requires uv (https://docs.astral.sh/uv/)
-uv pip install openapi-cli4ai
+**Requires:** [uv](https://docs.astral.sh/uv/getting-started/installation/)
 
-# Or run directly without installing
+```bash
+# Recommended — run directly, no install needed
 uvx openapi-cli4ai --help
+
+# Or install globally
+uv tool install openapi-cli4ai
+
+# Or install into a virtual environment
+uv pip install openapi-cli4ai
 ```
 
 ## Quick Start
 
 ```bash
-# Point it at any API with an OpenAPI spec
-openapi-cli4ai init petstore --url https://petstore3.swagger.io/api/v3
+# Point it at any API with an OpenAPI spec (prefix with uvx if not installed)
+uvx openapi-cli4ai init petstore --url https://petstore3.swagger.io/api/v3
 
 # Discover endpoints
 openapi-cli4ai endpoints
@@ -217,6 +222,12 @@ openapi-cli4ai login --username admin --password-file /path/to/secret
 # Login with password from stdin
 echo "my-password" | openapi-cli4ai login --username admin --password-stdin
 
+# OIDC login (opens browser for Auth0, Keycloak, etc.)
+openapi-cli4ai login
+
+# OIDC login without browser (headless/SSH — prints URL, you paste redirect back)
+openapi-cli4ai login --no-browser
+
 # Logout (clear cached tokens)
 openapi-cli4ai logout
 ```
@@ -264,6 +275,22 @@ account_type = "USERNAME"
 
 Payload placeholders: `{username}` and `{password}` come from the login prompt. `{env:VAR_NAME}` pulls from environment variables or a `.env` file (loaded automatically).
 
+OIDC example (Auth0, Keycloak, or any OIDC provider):
+
+```toml
+[profiles.my-oidc-app]
+base_url = "https://api.example.com"
+openapi_path = "/openapi.json"
+
+[profiles.my-oidc-app.auth]
+type = "oidc"
+authorize_url = "https://your-idp.com/authorize"
+token_url = "https://your-idp.com/oauth/token"
+client_id = "your-client-id"
+scopes = "openid profile email"
+callback_port = 9876
+```
+
 ### Auth Types
 
 | Type | Use Case | Config Fields |
@@ -271,6 +298,7 @@ Payload placeholders: `{username}` and `{password}` come from the login prompt.
 | `none` | Public APIs | — |
 | `bearer` | Token from env var | `token_env_var` |
 | `bearer` | OAuth token endpoint | `token_endpoint`, `refresh_endpoint`, `payload` |
+| `oidc` | OIDC Authorization Code + PKCE | `authorize_url`, `token_url`, `client_id`, `scopes` |
 | `api-key` | API key in header | `env_var`, `header`, `prefix` |
 | `basic` | HTTP Basic auth | `username_env_var`, `password_env_var` |
 
@@ -287,6 +315,8 @@ Payload placeholders: `{username}` and `{password}` come from the login prompt.
 | [Jira Cloud](https://developer.atlassian.com/cloud/jira/platform/rest/v3/) | 581 | Basic | `init jira --url https://your-domain.atlassian.net --spec-url ... --auth basic` |
 | [OpenRouter](https://openrouter.ai) | 36 | Bearer | `init openrouter --url https://openrouter.ai/api/v1 --spec-url ... --auth bearer` |
 | [DBGorilla](https://dbgorilla.com) | 500+ | Token endpoint | See `examples/profiles.toml.example` |
+| [Auth0](https://auth0.com) | — | OIDC + PKCE | `init myapp --url https://api.example.com --auth oidc` |
+| [Keycloak](https://www.keycloak.org) | — | OIDC + PKCE | `init myapp --url https://api.example.com --auth oidc` |
 
 Works with any AI agent that has shell access — Claude Code, Cursor, GitHub Copilot, or anything that can run `endpoints` and `call`.
 

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/README.md

@@ -13,19 +13,24 @@ Let your AI coding agent (Claude Code, Cursor, Codex, Copilot) talk to any REST
 
 ## Install
 
-```bash
-# Requires uv (https://docs.astral.sh/uv/)
-uv pip install openapi-cli4ai
+**Requires:** [uv](https://docs.astral.sh/uv/getting-started/installation/)
 
-# Or run directly without installing
+```bash
+# Recommended — run directly, no install needed
 uvx openapi-cli4ai --help
+
+# Or install globally
+uv tool install openapi-cli4ai
+
+# Or install into a virtual environment
+uv pip install openapi-cli4ai
 ```
 
 ## Quick Start
 
 ```bash
-# Point it at any API with an OpenAPI spec
-openapi-cli4ai init petstore --url https://petstore3.swagger.io/api/v3
+# Point it at any API with an OpenAPI spec (prefix with uvx if not installed)
+uvx openapi-cli4ai init petstore --url https://petstore3.swagger.io/api/v3
 
 # Discover endpoints
 openapi-cli4ai endpoints
@@ -189,6 +194,12 @@ openapi-cli4ai login --username admin --password-file /path/to/secret
 # Login with password from stdin
 echo "my-password" | openapi-cli4ai login --username admin --password-stdin
 
+# OIDC login (opens browser for Auth0, Keycloak, etc.)
+openapi-cli4ai login
+
+# OIDC login without browser (headless/SSH — prints URL, you paste redirect back)
+openapi-cli4ai login --no-browser
+
 # Logout (clear cached tokens)
 openapi-cli4ai logout
 ```
@@ -236,6 +247,22 @@ account_type = "USERNAME"
 
 Payload placeholders: `{username}` and `{password}` come from the login prompt. `{env:VAR_NAME}` pulls from environment variables or a `.env` file (loaded automatically).
 
+OIDC example (Auth0, Keycloak, or any OIDC provider):
+
+```toml
+[profiles.my-oidc-app]
+base_url = "https://api.example.com"
+openapi_path = "/openapi.json"
+
+[profiles.my-oidc-app.auth]
+type = "oidc"
+authorize_url = "https://your-idp.com/authorize"
+token_url = "https://your-idp.com/oauth/token"
+client_id = "your-client-id"
+scopes = "openid profile email"
+callback_port = 9876
+```
+
 ### Auth Types
 
 | Type | Use Case | Config Fields |
@@ -243,6 +270,7 @@ Payload placeholders: `{username}` and `{password}` come from the login prompt.
 | `none` | Public APIs | — |
 | `bearer` | Token from env var | `token_env_var` |
 | `bearer` | OAuth token endpoint | `token_endpoint`, `refresh_endpoint`, `payload` |
+| `oidc` | OIDC Authorization Code + PKCE | `authorize_url`, `token_url`, `client_id`, `scopes` |
 | `api-key` | API key in header | `env_var`, `header`, `prefix` |
 | `basic` | HTTP Basic auth | `username_env_var`, `password_env_var` |
 
@@ -259,6 +287,8 @@ Payload placeholders: `{username}` and `{password}` come from the login prompt.
 | [Jira Cloud](https://developer.atlassian.com/cloud/jira/platform/rest/v3/) | 581 | Basic | `init jira --url https://your-domain.atlassian.net --spec-url ... --auth basic` |
 | [OpenRouter](https://openrouter.ai) | 36 | Bearer | `init openrouter --url https://openrouter.ai/api/v1 --spec-url ... --auth bearer` |
 | [DBGorilla](https://dbgorilla.com) | 500+ | Token endpoint | See `examples/profiles.toml.example` |
+| [Auth0](https://auth0.com) | — | OIDC + PKCE | `init myapp --url https://api.example.com --auth oidc` |
+| [Keycloak](https://www.keycloak.org) | — | OIDC + PKCE | `init myapp --url https://api.example.com --auth oidc` |
 
 Works with any AI agent that has shell access — Claude Code, Cursor, GitHub Copilot, or anything that can run `endpoints` and `call`.
 

{openapi_cli4ai-0.2.0 → openapi_cli4ai-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openapi-cli4ai"
-version = "0.2.0"
+version = "0.4.0"
 description = "Turn any REST API with an OpenAPI spec into an AI-ready CLI"
 readme = "README.md"
 license = "MIT"