otdf-python 0.4.1__tar.gz → 0.4.3__tar.gz

{otdf_python-0.4.1 → otdf_python-0.4.3}/.github/workflows/platform-integration-test.yaml

@@ -33,7 +33,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
         with:
           repository: opentdf/platform
-          ref: main
+          ref: service/v0.8.2
           path: platform
       - name: Set up go
         uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491
@@ -132,7 +132,7 @@ jobs:
           grpcurl -plaintext localhost:8080 kas.AccessService/PublicKey
 
       - name: Install otdfctl
-        run: go install github.com/opentdf/otdfctl@latest
+        run: go install github.com/opentdf/otdfctl@v0.28.0
         shell: bash
 
       - name: Create creds.json for otdfctl

{otdf_python-0.4.1 → otdf_python-0.4.3}/.pre-commit-config.yaml

@@ -34,7 +34,7 @@ repos:
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: v0.14.8
+    rev: v0.15.0
     hooks:
       # Run the linter.
       - id: ruff-check

otdf_python-0.4.3/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+    ".": "0.4.3"
+}

{otdf_python-0.4.1 → otdf_python-0.4.3}/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## [0.4.3](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.4.2...otdf-python-v0.4.3) (2026-02-05)
+
+
+### Bug Fixes
+
+* implement KAS allowlist functionality ([#129](https://github.com/b-long/opentdf-python-sdk/issues/129)) ([c1306da](https://github.com/b-long/opentdf-python-sdk/commit/c1306da24eb27f80bb3f1c11cea0f24175b5fd23))
+
+## [0.4.2](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.4.1...otdf-python-v0.4.2) (2026-01-07)
+
+
+### ⚠ BREAKING CHANGES
+
+* **main:** Upgrade from connect-python 0.4.2 to 0.6.0
+
+### Bug Fixes
+
+* **main:** ensure compatibility with the latest `connect-python` ([#123](https://github.com/b-long/opentdf-python-sdk/issues/123)) ([4d160db](https://github.com/b-long/opentdf-python-sdk/commit/4d160dbed2bdedc4baaa807f97903aad710de943))
+
+
+### Miscellaneous Chores
+
+* release 0.4.2 ([a840f28](https://github.com/b-long/opentdf-python-sdk/commit/a840f284bed82a4b7de170ca1224bd232108047b))
+
 ## [0.4.1](https://github.com/b-long/opentdf-python-sdk/compare/otdf-python-v0.4.0...otdf-python-v0.4.1) (2025-12-09)
 
 

{otdf_python-0.4.1 → otdf_python-0.4.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: otdf-python
-Version: 0.4.1
+Version: 0.4.3
 Summary: Unofficial OpenTDF SDK for Python
 Project-URL: Homepage, https://github.com/b-long/opentdf-python-sdk
 Project-URL: Repository, https://github.com/b-long/opentdf-python-sdk
@@ -22,13 +22,14 @@ Classifier: Topic :: Security :: Cryptography
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Typing :: Typed
 Requires-Python: >=3.10
-Requires-Dist: connect-python[compiler]<0.5,>=0.4.2
+Requires-Dist: connect-python<0.7,>=0.6.0
 Requires-Dist: cryptography>=45.0.4
 Requires-Dist: grpcio-status>=1.74.0
 Requires-Dist: grpcio-tools>=1.74.0
 Requires-Dist: grpcio>=1.74.0
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: protobuf>=6.31.1
+Requires-Dist: protoc-gen-connect-python<0.7,>=0.6.0
 Requires-Dist: protoc-gen-openapiv2>=0.0.1
 Requires-Dist: pyjwt>=2.10.1
 Requires-Dist: typing-extensions>=4.14.1

{otdf_python-0.4.1 → otdf_python-0.4.3}/otdf-python-proto/buf.gen.yaml

@@ -18,7 +18,7 @@ plugins:
     out: src/otdf_python_proto
 
   # Connect Python client generation (preferred)
-  - local: ../.venv/bin/protoc-gen-connect_python
+  - local: ../.venv/bin/protoc-gen-connect-python
     out: src/otdf_python_proto
     opt:
       - paths=source_relative

{otdf_python-0.4.1 → otdf_python-0.4.3}/otdf-python-proto/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "otdf-python-proto"
-version = "0.4.1"
+version = "0.4.3"
 description = "Generated protobuf files for OpenTDF Python SDK"
 readme = "README.md"
 authors = [

{otdf_python-0.4.1 → otdf_python-0.4.3}/otdf-python-proto/scripts/generate_connect_proto.py

@@ -37,7 +37,7 @@ def check_dependencies() -> bool:
                 print("  # macOS: brew install bufbuild/buf/buf")
                 print("  # Or: go install github.com/bufbuild/buf/cmd/buf@latest")
             elif dep == "connect-python":
-                print("  uv add connect-python[compiler]")
+                print("  uv add connect-python protoc-gen-connect-python")
         return False
 
     return True
@@ -141,9 +141,9 @@ def run_buf_generate(proto_gen_dir: Path) -> bool:
     print("Generating protobuf and Connect RPC files...")
 
     try:
-        # First, get the path to protoc-gen-connect_python
+        # First, get the path to protoc-gen-connect-python
         result = subprocess.run(
-            ["uv", "run", "which", "protoc-gen-connect_python"],
+            ["uv", "run", "which", "protoc-gen-connect-python"],
             cwd=proto_gen_dir,
             capture_output=True,
             text=True,
@@ -159,7 +159,7 @@ def run_buf_generate(proto_gen_dir: Path) -> bool:
 
         # Replace the local plugin path
         updated_content = content.replace(
-            "- local: protoc-gen-connect_python", f"- local: {connect_plugin_path}"
+            "- local: protoc-gen-connect-python", f"- local: {connect_plugin_path}"
         )
 
         with buf_gen_path.open("w") as f:

{otdf_python-0.4.1 → otdf_python-0.4.3}/otdf-python-proto/src/otdf_python_proto/__init__.py

@@ -13,25 +13,21 @@ except metadata.PackageNotFoundError:
     __version__ = "0.0.0"
 
 # Import submodules to make them available
-from . import authorization
+# Note: authorization, entityresolution, wellknownconfiguration and policy subdirectories
+# are imported lazily to avoid import errors from generated protobuf files
 from . import common
 from . import entity
-from . import entityresolution
 from . import kas
 from . import legacy_grpc
 from . import logger
 from . import policy
-from . import wellknownconfiguration
 
 # Export main module categories
 __all__ = [
-    "authorization",
     "common",
     "entity",
-    "entityresolution",
     "kas",
     "legacy_grpc",
     "logger",
     "policy",
-    "wellknownconfiguration",
 ]

otdf_python-0.4.3/otdf-python-proto/src/otdf_python_proto/authorization/__init__.py

@@ -0,0 +1,11 @@
+"""authorization protobuf definitions."""
+
+from .authorization_connect import (
+    AuthorizationServiceClient,
+    AuthorizationServiceClientSync,
+)
+
+__all__ = [
+    "AuthorizationServiceClient",
+    "AuthorizationServiceClientSync",
+]

otdf_python-0.4.3/otdf-python-proto/src/otdf_python_proto/authorization/authorization_connect.py

@@ -0,0 +1,250 @@
+# -*- coding: utf-8 -*-
+# Generated by https://github.com/connectrpc/connect-python.  DO NOT EDIT!
+# source: authorization/authorization.proto
+
+from collections.abc import AsyncGenerator, AsyncIterator, Iterable, Iterator, Mapping
+from typing import Protocol
+
+from connectrpc.client import ConnectClient, ConnectClientSync
+from connectrpc.code import Code
+from connectrpc.errors import ConnectError
+from connectrpc.interceptor import Interceptor, InterceptorSync
+from connectrpc.method import IdempotencyLevel, MethodInfo
+from connectrpc.request import Headers, RequestContext
+from connectrpc.server import ConnectASGIApplication, ConnectWSGIApplication, Endpoint, EndpointSync
+from . import authorization_pb2 as authorization_dot_authorization__pb2
+
+
+class AuthorizationService(Protocol):
+    async def get_decisions(self, request: authorization_dot_authorization__pb2.GetDecisionsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+    async def get_decisions_by_token(self, request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+    async def get_entitlements(self, request: authorization_dot_authorization__pb2.GetEntitlementsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+
+class AuthorizationServiceASGIApplication(ConnectASGIApplication[AuthorizationService]):
+    def __init__(self, service: AuthorizationService | AsyncGenerator[AuthorizationService], *, interceptors: Iterable[Interceptor]=(), read_max_bytes: int | None = None) -> None:
+        super().__init__(
+            service=service,
+            endpoints=lambda svc: {
+                "/authorization.AuthorizationService/GetDecisions": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetDecisions",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_decisions,
+                ),
+                "/authorization.AuthorizationService/GetDecisionsByToken": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetDecisionsByToken",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_decisions_by_token,
+                ),
+                "/authorization.AuthorizationService/GetEntitlements": Endpoint.unary(
+                    method=MethodInfo(
+                        name="GetEntitlements",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                        output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=svc.get_entitlements,
+                ),
+            },
+            interceptors=interceptors,
+            read_max_bytes=read_max_bytes,
+        )
+
+    @property
+    def path(self) -> str:
+        """Returns the URL path to mount the application to when serving multiple applications."""
+        return "/authorization.AuthorizationService"
+
+
+class AuthorizationServiceClient(ConnectClient):
+    async def get_decisions(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisions",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    async def get_decisions_by_token(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisionsByToken",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    async def get_entitlements(
+        self,
+        request: authorization_dot_authorization__pb2.GetEntitlementsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        return await self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetEntitlements",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+
+class AuthorizationServiceSync(Protocol):
+    def get_decisions(self, request: authorization_dot_authorization__pb2.GetDecisionsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+    def get_decisions_by_token(self, request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+    def get_entitlements(self, request: authorization_dot_authorization__pb2.GetEntitlementsRequest, ctx: RequestContext) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        raise ConnectError(Code.UNIMPLEMENTED, "Not implemented")
+
+
+class AuthorizationServiceWSGIApplication(ConnectWSGIApplication):
+    def __init__(self, service: AuthorizationServiceSync, interceptors: Iterable[InterceptorSync]=(), read_max_bytes: int | None = None) -> None:
+        super().__init__(
+            endpoints={
+                "/authorization.AuthorizationService/GetDecisions": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetDecisions",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_decisions,
+                ),
+                "/authorization.AuthorizationService/GetDecisionsByToken": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetDecisionsByToken",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                        output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_decisions_by_token,
+                ),
+                "/authorization.AuthorizationService/GetEntitlements": EndpointSync.unary(
+                    method=MethodInfo(
+                        name="GetEntitlements",
+                        service_name="authorization.AuthorizationService",
+                        input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                        output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                        idempotency_level=IdempotencyLevel.UNKNOWN,
+                    ),
+                    function=service.get_entitlements,
+                ),
+            },
+            interceptors=interceptors,
+            read_max_bytes=read_max_bytes,
+        )
+
+    @property
+    def path(self) -> str:
+        """Returns the URL path to mount the application to when serving multiple applications."""
+        return "/authorization.AuthorizationService"
+
+
+class AuthorizationServiceClientSync(ConnectClientSync):
+    def get_decisions(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisions",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    def get_decisions_by_token(
+        self,
+        request: authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetDecisionsByTokenResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetDecisionsByToken",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetDecisionsByTokenRequest,
+                output=authorization_dot_authorization__pb2.GetDecisionsByTokenResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )
+
+    def get_entitlements(
+        self,
+        request: authorization_dot_authorization__pb2.GetEntitlementsRequest,
+        *,
+        headers: Headers | Mapping[str, str] | None = None,
+        timeout_ms: int | None = None,
+    ) -> authorization_dot_authorization__pb2.GetEntitlementsResponse:
+        return self.execute_unary(
+            request=request,
+            method=MethodInfo(
+                name="GetEntitlements",
+                service_name="authorization.AuthorizationService",
+                input=authorization_dot_authorization__pb2.GetEntitlementsRequest,
+                output=authorization_dot_authorization__pb2.GetEntitlementsResponse,
+                idempotency_level=IdempotencyLevel.UNKNOWN,
+            ),
+            headers=headers,
+            timeout_ms=timeout_ms,
+        )