PyPI - paskia - Versions diffs - 0.8.0__py3-none-any.whl → 0.9.0__py3-none-any.whl - Mend

paskia 0.8.0py3-none-any.whl → 0.9.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (67) hide show

paskia/_version.py +2 -2
paskia/authsession.py +14 -27
paskia/bootstrap.py +31 -103
paskia/config.py +0 -1
paskia/db/__init__.py +26 -51
paskia/db/background.py +17 -37
paskia/db/jsonl.py +168 -6
paskia/db/migrations.py +34 -0
paskia/db/operations.py +400 -723
paskia/db/structs.py +214 -90
paskia/fastapi/__main__.py +89 -189
paskia/fastapi/admin.py +103 -162
paskia/fastapi/api.py +49 -85
paskia/fastapi/mainapp.py +30 -19
paskia/fastapi/remote.py +16 -39
paskia/fastapi/reset.py +27 -17
paskia/fastapi/session.py +2 -2
paskia/fastapi/user.py +21 -27
paskia/fastapi/ws.py +27 -62
paskia/fastapi/wschat.py +62 -0
paskia/frontend-build/auth/admin/index.html +5 -5
paskia/frontend-build/auth/assets/{AccessDenied-Bc249ASC.css → AccessDenied-DPkUS8LZ.css} +1 -1
paskia/frontend-build/auth/assets/AccessDenied-Fmeb6EtF.js +8 -0
paskia/frontend-build/auth/assets/{RestrictedAuth-DgdJyscT.css → RestrictedAuth-CvR33_Z0.css} +1 -1
paskia/frontend-build/auth/assets/RestrictedAuth-DsJXicIw.js +1 -0
paskia/frontend-build/auth/assets/{_plugin-vue_export-helper-rKFEraYH.js → _plugin-vue_export-helper-nhjnO_bd.js} +1 -1
paskia/frontend-build/auth/assets/admin-CPE1pLMm.js +1 -0
paskia/frontend-build/auth/assets/{admin-BeNu48FR.css → admin-DzzjSg72.css} +1 -1
paskia/frontend-build/auth/assets/{auth-BKX7shEe.css → auth-C7k64Wad.css} +1 -1
paskia/frontend-build/auth/assets/auth-YIZvPlW_.js +1 -0
paskia/frontend-build/auth/assets/{forward-Dzg-aE1C.js → forward-DmqVHZ7e.js} +1 -1
paskia/frontend-build/auth/assets/reset-Chtv69AT.css +1 -0
paskia/frontend-build/auth/assets/reset-s20PATTN.js +1 -0
paskia/frontend-build/auth/assets/{restricted-C0IQufuH.js → restricted-D3AJx3_6.js} +1 -1
paskia/frontend-build/auth/index.html +5 -5
paskia/frontend-build/auth/restricted/index.html +4 -4
paskia/frontend-build/int/forward/index.html +4 -4
paskia/frontend-build/int/reset/index.html +3 -3
paskia/globals.py +2 -2
paskia/migrate/__init__.py +62 -55
paskia/migrate/sql.py +72 -22
paskia/remoteauth.py +1 -2
paskia/sansio.py +6 -12
{paskia-0.8.0.dist-info → paskia-0.9.0.dist-info}/METADATA +3 -2
paskia-0.9.0.dist-info/RECORD +57 -0
paskia/frontend-build/auth/assets/AccessDenied-aTdCvz9k.js +0 -8
paskia/frontend-build/auth/assets/RestrictedAuth-BLMK7-nL.js +0 -1
paskia/frontend-build/auth/assets/admin-tVs8oyLv.js +0 -1
paskia/frontend-build/auth/assets/auth-Dk3q4pNS.js +0 -1
paskia/frontend-build/auth/assets/reset-BWF4cWKR.css +0 -1
paskia/frontend-build/auth/assets/reset-C_Td1_jn.js +0 -1
paskia/util/frontend.py +0 -75
paskia/util/hostutil.py +0 -76
paskia/util/htmlutil.py +0 -47
paskia/util/passphrase.py +0 -20
paskia/util/permutil.py +0 -43
paskia/util/pow.py +0 -45
paskia/util/querysafe.py +0 -11
paskia/util/sessionutil.py +0 -38
paskia/util/startupbox.py +0 -75
paskia/util/timeutil.py +0 -47
paskia/util/useragent.py +0 -10
paskia/util/userinfo.py +0 -145
paskia/util/wordlist.py +0 -54
paskia-0.8.0.dist-info/RECORD +0 -68
{paskia-0.8.0.dist-info → paskia-0.9.0.dist-info}/WHEEL +0 -0
{paskia-0.8.0.dist-info → paskia-0.9.0.dist-info}/entry_points.txt +0 -0

paskia/frontend-build/auth/restricted/index.html CHANGED Viewed

@@ -3,12 +3,12 @@
   <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <script type="module" crossorigin src="/auth/assets/restricted-C0IQufuH.js"></script>
-    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-rKFEraYH.js">
+    <script type="module" crossorigin src="/auth/assets/restricted-D3AJx3_6.js"></script>
+    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-nhjnO_bd.js">
     <link rel="modulepreload" crossorigin href="/auth/assets/pow-2N9bxgAo.js">
-    <link rel="modulepreload" crossorigin href="/auth/assets/RestrictedAuth-BLMK7-nL.js">
+    <link rel="modulepreload" crossorigin href="/auth/assets/RestrictedAuth-DsJXicIw.js">
     <link rel="stylesheet" crossorigin href="/auth/assets/_plugin-vue_export-helper-BTzJAQlS.css">
-    <link rel="stylesheet" crossorigin href="/auth/assets/RestrictedAuth-DgdJyscT.css">
+    <link rel="stylesheet" crossorigin href="/auth/assets/RestrictedAuth-CvR33_Z0.css">
   </head>
   <body>
     <div id="app"></div>

paskia/frontend-build/int/forward/index.html CHANGED Viewed

@@ -4,13 +4,13 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Access Restricted</title>
-    <script type="module" crossorigin src="/auth/assets/forward-Dzg-aE1C.js"></script>
-    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-rKFEraYH.js">
+    <script type="module" crossorigin src="/auth/assets/forward-DmqVHZ7e.js"></script>
+    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-nhjnO_bd.js">
     <link rel="modulepreload" crossorigin href="/auth/assets/pow-2N9bxgAo.js">
-    <link rel="modulepreload" crossorigin href="/auth/assets/RestrictedAuth-BLMK7-nL.js">
+    <link rel="modulepreload" crossorigin href="/auth/assets/RestrictedAuth-DsJXicIw.js">
     <link rel="modulepreload" crossorigin href="/auth/assets/helpers-DzjFIx78.js">
     <link rel="stylesheet" crossorigin href="/auth/assets/_plugin-vue_export-helper-BTzJAQlS.css">
-    <link rel="stylesheet" crossorigin href="/auth/assets/RestrictedAuth-DgdJyscT.css">
+    <link rel="stylesheet" crossorigin href="/auth/assets/RestrictedAuth-CvR33_Z0.css">
   </head>
   <body>
     <div id="app"></div>

paskia/frontend-build/int/reset/index.html CHANGED Viewed

@@ -4,10 +4,10 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Complete Passkey Setup</title>
-    <script type="module" crossorigin src="/auth/assets/reset-C_Td1_jn.js"></script>
-    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-rKFEraYH.js">
+    <script type="module" crossorigin src="/auth/assets/reset-s20PATTN.js"></script>
+    <link rel="modulepreload" crossorigin href="/auth/assets/_plugin-vue_export-helper-nhjnO_bd.js">
     <link rel="stylesheet" crossorigin href="/auth/assets/_plugin-vue_export-helper-BTzJAQlS.css">
-    <link rel="stylesheet" crossorigin href="/auth/assets/reset-BWF4cWKR.css">
+    <link rel="stylesheet" crossorigin href="/auth/assets/reset-Chtv69AT.css">
   </head>
   <body>
     <div id="app"></div>

paskia/globals.py CHANGED Viewed

@@ -1,5 +1,7 @@
 from typing import Generic, TypeVar
+from paskia import db, remoteauth
+from paskia.bootstrap import bootstrap_if_needed
 from paskia.sansio import Passkey
 T = TypeVar("T")
@@ -42,7 +44,6 @@ async def init(
         Set PASKIA_DB environment variable to specify the JSONL database file path.
         Default: paskia.jsonl
     """
-    from . import db, remoteauth
     # Initialize passkey instance with provided parameters
     passkey.instance = Passkey(
@@ -59,7 +60,6 @@ async def init(
     if bootstrap:
         # Bootstrap system if needed
-        from .bootstrap import bootstrap_if_needed
         await bootstrap_if_needed()

paskia/migrate/__init__.py CHANGED Viewed

@@ -11,13 +11,28 @@ Or via the CLI entry point (if installed):
     paskia-migrate --sql sqlite+aiosqlite:///paskia.sqlite --json paskia.jsonl
 """
+import argparse
 import asyncio
+import re
 from datetime import datetime, timezone
 from uuid import UUID
 import base64url
+import uuid7
+from sqlalchemy import select
 from paskia.authsession import EXPIRES
+from paskia.db.jsonl import JsonlStore
+from paskia.db.structs import (
+    DB,
+    Credential,
+    Org,
+    Permission,
+    ResetToken,
+    Role,
+    Session,
+    User,
+)
 from .sql import (
     DB as SQLDB,
@@ -47,30 +62,14 @@ async def migrate_from_sql(
         sql_db_path: SQLAlchemy connection string for the source SQL database
         json_db_path: Path for the destination JSONL file
     """
-    # Import here to avoid circular imports and to not require JSON db at import time
-    import re
-    import uuid7
-    from sqlalchemy import select
-    from paskia.db.operations import DB as JSONDB
-    from paskia.db.structs import (
-        _CredentialData,
-        _OrgData,
-        _PermissionData,
-        _ResetTokenData,
-        _RoleData,
-        _SessionData,
-        _UserData,
-    )
     # Initialize source SQL database
     sql_db = SQLDB(sql_db_path)
     await sql_db.init_db()
     # Initialize destination JSON database (fresh, don't load existing)
-    json_db = JSONDB(json_db_path)
-    # Don't call json_db.load() - we want a fresh database, not to load existing
+    db = DB()
+    store = JsonlStore(db, json_db_path)
+    db._store = store
     print(f"Migrating from {sql_db_path} to {json_db_path}...")
@@ -90,11 +89,13 @@ async def migrate_from_sql(
     # Migrate permissions with UUID keys and scope field
     # Always create exactly one common auth:org:admin permission for all org admin needs
     org_admin_perm_uuid: UUID = uuid7.create()
-    json_db._data.permissions[org_admin_perm_uuid] = _PermissionData(
+    org_admin_perm = Permission(
         scope="auth:org:admin",
         display_name="Org Admin",
         orgs={},
     )
+    org_admin_perm.uuid = org_admin_perm_uuid
+    db.permissions[org_admin_perm_uuid] = org_admin_perm
     # Mapping from old permission ID to new permission UUID
     perm_id_to_uuid: dict[str, UUID] = {}
@@ -113,11 +114,13 @@ async def migrate_from_sql(
         # Regular permission - create with UUID key
         perm_uuid: UUID = uuid7.create()
-        json_db._data.permissions[perm_uuid] = _PermissionData(
+        new_perm = Permission(
             scope=perm.id,  # Old ID becomes the scope
             display_name=perm.display_name,
             orgs={},
         )
+        new_perm.uuid = perm_uuid
+        db.permissions[perm_uuid] = new_perm
         perm_id_to_uuid[perm.id] = perm_uuid
     print(
         f"  Migrated {len(permissions)} permissions (with {len(org_admin_uuids)} org-specific admins consolidated to auth:org:admin)"
@@ -127,16 +130,16 @@ async def migrate_from_sql(
     orgs = await sql_db.list_organizations()
     for org in orgs:
         org_key: UUID = org.uuid
-        json_db._data.orgs[org_key] = _OrgData(
-            display_name=org.display_name,
-        )
+        new_org = Org(display_name=org.display_name)
+        new_org.uuid = org_key
+        db.orgs[org_key] = new_org
         # Update permissions to allow this org to grant them (by UUID)
         for old_perm_id in org.permissions:
             perm_uuid = perm_id_to_uuid.get(old_perm_id)
-            if perm_uuid and perm_uuid in json_db._data.permissions:
-                json_db._data.permissions[perm_uuid].orgs[org_key] = True
+            if perm_uuid and perm_uuid in db.permissions:
+                db.permissions[perm_uuid].orgs[org_key] = True
         # Ensure every org can grant auth:org:admin
-        json_db._data.permissions[org_admin_perm_uuid].orgs[org_key] = True
+        db.permissions[org_admin_perm_uuid].orgs[org_key] = True
     print(f"  Migrated {len(orgs)} organizations")
     # Migrate roles - convert old permission IDs to UUIDs
@@ -150,11 +153,13 @@ async def migrate_from_sql(
                 perm_uuid = perm_id_to_uuid.get(old_perm_id)
                 if perm_uuid:
                     new_permissions[perm_uuid] = True
-            json_db._data.roles[role_key] = _RoleData(
+            new_role = Role(
                 org=role.org_uuid,
                 display_name=role.display_name,
                 permissions=new_permissions,
             )
+            new_role.uuid = role_key
+            db.roles[role_key] = new_role
             role_count += 1
     print(f"  Migrated {role_count} roles")
@@ -163,15 +168,17 @@ async def migrate_from_sql(
         result = await session.execute(select(UserModel))
         user_models = result.scalars().all()
         for um in user_models:
-            user = um.as_dataclass()
-            user_key: UUID = user.uuid
-            json_db._data.users[user_key] = _UserData(
-                display_name=user.display_name,
-                role=user.role_uuid,
-                created_at=user.created_at or datetime.now(timezone.utc),
-                last_seen=user.last_seen,
-                visits=user.visits,
+            legacy_user = um.as_dataclass()
+            user_key: UUID = legacy_user.uuid
+            new_user = User(
+                display_name=legacy_user.display_name,
+                role=legacy_user.role_uuid,
+                created_at=legacy_user.created_at or datetime.now(timezone.utc),
+                last_seen=legacy_user.last_seen,
+                visits=legacy_user.visits,
             )
+            new_user.uuid = user_key
+            db.users[user_key] = new_user
         print(f"  Migrated {len(user_models)} users")
     # Migrate credentials
@@ -179,18 +186,20 @@ async def migrate_from_sql(
         result = await session.execute(select(CredentialModel))
         cred_models = result.scalars().all()
         for cm in cred_models:
-            cred = cm.as_dataclass()
-            cred_key: UUID = cred.uuid
-            json_db._data.credentials[cred_key] = _CredentialData(
-                credential_id=cred.credential_id,
-                user=cred.user_uuid,
-                aaguid=cred.aaguid,
-                public_key=cred.public_key,
-                sign_count=cred.sign_count,
-                created_at=cred.created_at,
-                last_used=cred.last_used,
-                last_verified=cred.last_verified,
+            legacy_cred = cm.as_dataclass()
+            cred_key: UUID = legacy_cred.uuid
+            new_cred = Credential(
+                credential_id=legacy_cred.credential_id,
+                user=legacy_cred.user_uuid,
+                aaguid=legacy_cred.aaguid,
+                public_key=legacy_cred.public_key,
+                sign_count=legacy_cred.sign_count,
+                created_at=legacy_cred.created_at,
+                last_used=legacy_cred.last_used,
+                last_verified=legacy_cred.last_verified,
             )
+            new_cred.uuid = cred_key
+            db.credentials[cred_key] = new_cred
         print(f"  Migrated {len(cred_models)} credentials")
     # Migrate sessions
@@ -207,7 +216,7 @@ async def migrate_from_sql(
             else:
                 # Already in new format or unknown - try to use as-is
                 session_key = base64url.enc(old_key[:12])
-            json_db._data.sessions[session_key] = _SessionData(
+            db.sessions[session_key] = Session(
                 user=sess.user_uuid,
                 credential=sess.credential_uuid,
                 host=sess.host,
@@ -231,26 +240,24 @@ async def migrate_from_sql(
             else:
                 # Already in new format or unknown - truncate to 9 bytes
                 token_key = old_key[:9]
-            json_db._data.reset_tokens[token_key] = _ResetTokenData(
+            db.reset_tokens[token_key] = ResetToken(
                 user=token.user_uuid,
                 expiry=token.expiry,
                 token_type=token.token_type,
             )
         print(f"  Migrated {len(token_models)} reset tokens")
-    # Queue and flush all changes with actor "migrate"
-    json_db._current_actor = "migrate"
-    json_db._queue_change()
-    from paskia.db.jsonl import flush_changes
+    # Queue and flush all changes using the transaction mechanism
+    with db.transaction("migrate"):
+        pass  # All data already added to _data, transaction commits on exit
-    await flush_changes(json_db.db_path, json_db._pending_changes)
+    await store.flush()
     print("Migration complete!")
 def main():
     """CLI entry point for migration."""
-    import argparse
     parser = argparse.ArgumentParser(
         description="Migrate Paskia database from SQL to JSON"

paskia/migrate/sql.py CHANGED Viewed

@@ -26,30 +26,55 @@ from sqlalchemy.ext.asyncio import async_sessionmaker, create_async_engine
 from sqlalchemy.orm import DeclarativeBase, Mapped, mapped_column
 from paskia.db import (
-    Credential,
     Org,
-    ResetToken,
     Role,
-    User,
 )
-# Local Permission class for SQL schema (uses 'id' not 'uuid' + 'scope')
+# Legacy User class for SQL schema (uses 'role_uuid' not 'role')
 @dataclass
-class SqlPermission:
-    """Permission as stored in the old SQL schema with id field."""
+class _LegacyUser:
+    """User as stored in the old SQL schema with role_uuid field."""
-    id: str
+    uuid: UUID
     display_name: str
+    role_uuid: UUID
+    created_at: datetime | None = None
+    last_seen: datetime | None = None
+    visits: int = 0
-DB_PATH_DEFAULT = "sqlite+aiosqlite:///paskia.sqlite"
+# Legacy Credential class for SQL schema (uses 'user_uuid' not 'user')
+@dataclass
+class _LegacyCredential:
+    """Credential as stored in the old SQL schema with user_uuid field."""
+    uuid: UUID
+    credential_id: bytes
+    user_uuid: UUID
+    aaguid: UUID
+    public_key: bytes
+    sign_count: int
+    created_at: datetime
+    last_used: datetime | None = None
+    last_verified: datetime | None = None
-# Local Session class for SQL schema (uses 'renewed' not 'expiry')
+# Legacy Role class for SQL schema (uses 'org_uuid' not 'org')
 @dataclass
-class _SqlSession:
-    """Session as stored in the old SQL schema with renewed timestamp."""
+class _LegacyRole:
+    """Role as stored in the old SQL schema with org_uuid field."""
+    uuid: UUID
+    org_uuid: UUID
+    display_name: str
+    permissions: list[str] | None = None
+# Legacy Session class for SQL schema (uses 'key' as field, 'user_uuid', 'credential_uuid')
+@dataclass
+class _LegacySession:
+    """Session as stored in the old SQL schema."""
     key: bytes
     user_uuid: UUID
@@ -60,6 +85,29 @@ class _SqlSession:
     renewed: datetime
+# Legacy ResetToken class for SQL schema (uses 'key' as field, 'user_uuid')
+@dataclass
+class _LegacyResetToken:
+    """ResetToken as stored in the old SQL schema."""
+    key: bytes
+    user_uuid: UUID
+    token_type: str
+    expiry: datetime
+# Local Permission class for SQL schema (uses 'id' not 'uuid' + 'scope')
+@dataclass
+class SqlPermission:
+    """Permission as stored in the old SQL schema with id field."""
+    id: str
+    display_name: str
+DB_PATH_DEFAULT = "sqlite+aiosqlite:///paskia.sqlite"
 def _normalize_dt(value: datetime | None) -> datetime | None:
     if value is None:
         return None
@@ -80,7 +128,9 @@ class OrgModel(Base):
     def as_dataclass(self):
         # Base Org without permissions/roles (filled by data accessors)
-        return Org(UUID(bytes=self.uuid), self.display_name)
+        org = Org(display_name=self.display_name)
+        org.uuid = UUID(bytes=self.uuid)
+        return org
     @staticmethod
     def from_dataclass(org: Org):
@@ -98,14 +148,14 @@ class RoleModel(Base):
     def as_dataclass(self):
         # Base Role without permissions (filled by data accessors)
-        return Role(
+        return _LegacyRole(
             uuid=UUID(bytes=self.uuid),
             org_uuid=UUID(bytes=self.org_uuid),
             display_name=self.display_name,
         )
     @staticmethod
-    def from_dataclass(role: Role):
+    def from_dataclass(role: _LegacyRole):
         return RoleModel(
             uuid=role.uuid.bytes,
             org_uuid=role.org_uuid.bytes,
@@ -129,8 +179,8 @@ class UserModel(Base):
     )
     visits: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
-    def as_dataclass(self) -> User:
-        return User(
+    def as_dataclass(self) -> "_LegacyUser":
+        return _LegacyUser(
             uuid=UUID(bytes=self.uuid),
             display_name=self.display_name,
             role_uuid=UUID(bytes=self.role_uuid),
@@ -140,7 +190,7 @@ class UserModel(Base):
         )
     @staticmethod
-    def from_dataclass(user: User):
+    def from_dataclass(user: "_LegacyUser"):
         return UserModel(
             uuid=user.uuid.bytes,
             display_name=user.display_name,
@@ -175,7 +225,7 @@ class CredentialModel(Base):
     )
     def as_dataclass(self):
-        return Credential(
+        return _LegacyCredential(
             uuid=UUID(bytes=self.uuid),
             credential_id=self.credential_id,
             user_uuid=UUID(bytes=self.user_uuid),
@@ -210,7 +260,7 @@ class SessionModel(Base):
     )
     def as_dataclass(self):
-        return _SqlSession(
+        return _LegacySession(
             key=self.key,
             user_uuid=UUID(bytes=self.user_uuid),
             credential_uuid=UUID(bytes=self.credential_uuid),
@@ -221,7 +271,7 @@ class SessionModel(Base):
         )
     @staticmethod
-    def from_dataclass(session: _SqlSession):
+    def from_dataclass(session: _LegacySession):
         return SessionModel(
             key=session.key,
             user_uuid=session.user_uuid.bytes,
@@ -243,8 +293,8 @@ class ResetTokenModel(Base):
     token_type: Mapped[str] = mapped_column(String, nullable=False)
     expiry: Mapped[datetime] = mapped_column(DateTime(timezone=True), nullable=False)
-    def as_dataclass(self) -> ResetToken:
-        return ResetToken(
+    def as_dataclass(self) -> _LegacyResetToken:
+        return _LegacyResetToken(
             key=self.key,
             user_uuid=UUID(bytes=self.user_uuid),
             token_type=self.token_type,

paskia/remoteauth.py CHANGED Viewed

@@ -24,7 +24,7 @@ from datetime import datetime, timedelta, timezone
 from typing import Callable
 from uuid import UUID
-from paskia.util import passphrase
+from paskia.util import passphrase, pow
 # Remote auth requests expire after this duration
 REMOTE_AUTH_LIFETIME = timedelta(minutes=5)
@@ -319,7 +319,6 @@ class RemoteAuthManager:
         Returns:
             PoW work units (pow.NORMAL or pow.HARD)
         """
-        from paskia.util import pow
         count = self.get_connection_count()
         return pow.HARD if count >= 10 else pow.NORMAL

paskia/sansio.py CHANGED Viewed

@@ -8,11 +8,9 @@ This module provides a unified interface for WebAuthn operations including:
 """
 import json
-from datetime import datetime, timezone
 from urllib.parse import urlparse
 from uuid import UUID
-import uuid7
 from webauthn import (
     generate_authentication_options,
     generate_registration_options,
@@ -176,14 +174,12 @@ class Passkey:
             expected_origin=origin,
             expected_rp_id=self.rp_id,
         )
-        return Credential(
-            uuid=uuid7.create(),
+        return Credential.create(
             credential_id=credential.raw_id,
-            user_uuid=user_uuid,
+            user=user_uuid,
             aaguid=UUID(registration.aaguid),
             public_key=registration.credential_public_key,
             sign_count=registration.sign_count,
-            created_at=datetime.now(timezone.utc),
         )
     ### Authentication Methods ###
@@ -234,8 +230,11 @@ class Passkey:
         Args:
             credential: The authentication credential response from the client
             expected_challenge: The earlier generated challenge bytes
-            stored_cred: The server stored credential record (modified by this function)
+            stored_cred: The server stored credential record (NOT modified)
             origin: The origin URL (required, must be pre-validated)
+        Returns:
+            VerifiedAuthentication with new_sign_count and user_verified status
         """
         # Verify the authentication response
         verification = verify_authentication_response(
@@ -246,11 +245,6 @@ class Passkey:
             credential_public_key=stored_cred.public_key,
             credential_current_sign_count=stored_cred.sign_count,
         )
-        stored_cred.sign_count = verification.new_sign_count
-        now = datetime.now(timezone.utc)
-        stored_cred.last_used = now
-        if verification.user_verified:
-            stored_cred.last_verified = now
         return verification

{paskia-0.8.0.dist-info → paskia-0.9.0.dist-info}/METADATA RENAMED Viewed

@@ -1,14 +1,15 @@
 Metadata-Version: 2.4
 Name: paskia
-Version: 0.8.0
+Version: 0.9.0
 Summary: Passkey Auth made easy: all sites and APIs can be guarded even without any changes on the protected site.
 Project-URL: Homepage, https://git.zi.fi/LeoVasanko/paskia
 Project-URL: Repository, https://github.com/LeoVasanko/paskia
 Author: Leo Vasanko
 Keywords: FastAPI,auth_request,forward_auth
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Requires-Dist: aiofiles>=25.1.0
 Requires-Dist: base64url>=1.0.0
+Requires-Dist: fastapi-vue>=0.3.0
 Requires-Dist: fastapi[standard]>=0.104.1
 Requires-Dist: jsondiff>=2.2.1
 Requires-Dist: msgspec>=0.20.0

paskia-0.9.0.dist-info/RECORD ADDED Viewed

@@ -0,0 +1,57 @@
+paskia/__init__.py,sha256=6eopO87IOFA2zfOuqt8Jj8Tdtp93HBMOgUBtTzMRweM,57
+paskia/_version.py,sha256=TvxBYkx8Rz_Q1S3JFp831BRT8Wo0Yxt6TJMtgZKenTo,704
+paskia/authsession.py,sha256=WtHC0iurDfNbjCxbKzZXZL-hklYorLFLsXM2w9JaUu0,1741
+paskia/bootstrap.py,sha256=FShAMvLmLxQ4HfE9yz1ZB6EO9fC-lQroesU4dC58VO8,3875
+paskia/config.py,sha256=BdGzQ3Ja1enSTHmkDkBDGQk_JluT3VaK3Y7AqB5xMlk,723
+paskia/globals.py,sha256=ip03kLoS_27cNIgXTVcXNoeQDjTAC_IILuXaHKShTws,1712
+paskia/remoteauth.py,sha256=0lDH6mQg7YGxTdj4OHSJFJzAahtK8M8nrCK6k0iLk20,12450
+paskia/sansio.py,sha256=LQRdV1kW_aGwDWC8fhyEvqWPwKZVx_8qzQv65et6utg,9727
+paskia/aaguid/__init__.py,sha256=Moy67wiJSYulL_whgEEBBKabKEOvlR-NRLyXprDdBO0,1007
+paskia/aaguid/combined_aaguid.json,sha256=CaZ96AiwdAjBnyVZnJ1eolAHxUQMB2H6mDgZkorYg_A,4124722
+paskia/db/__init__.py,sha256=5ZUTqpwY939DvR-4ejodwXep8dPtml8k2Z_2ecPJoTM,3274
+paskia/db/background.py,sha256=6vBLFh0HPIZQy9fSbSX5C3MmnkkxyOaJ3V4MKPz0aaQ,3569
+paskia/db/jsonl.py,sha256=9fX31DmQL3YiTIcwwOaao6Z6grGZGrMyw-U-M5apXNQ,10240
+paskia/db/migrations.py,sha256=fwdVbIf2ybXra8qO2th3G26ocpUCftA4lP4s6zRhjoY,969
+paskia/db/operations.py,sha256=mva4hMsi8080AisjgXXuo5PGJ55zWPzmcl4v_3CLseM,29826
+paskia/db/structs.py,sha256=y6X2W0t64qvzDnin6HRoiMFHV-KhovaPe4fPnV1tF_g,7838
+paskia/fastapi/__init__.py,sha256=NFsTX1qytoyZKiur7RDTa2fxiOWHrop5CAAx8rqK9E0,58
+paskia/fastapi/__main__.py,sha256=qxApOdjY51pQquDsmoMNkXWEBTr2edQo-p2AKB8NbWc,7701
+paskia/fastapi/admin.py,sha256=51Gm3Mf_laHpXJNfR6d6-zPy0L__zQ7L95XJ-TDwS40,34960
+paskia/fastapi/api.py,sha256=zUM7x3w05STphaVAAmd7e02-D8_ETtz-zR4vyiFZBiY,9377
+paskia/fastapi/auth_host.py,sha256=Y5w9Mz6jyq0hj7SX8LfwebaesUOLGcWzGW9lsmw5WOo,3242
+paskia/fastapi/authz.py,sha256=6s2TGkb3C7qWTXHOaMj613NiqMfztqM5QENuSb2IjO8,3529
+paskia/fastapi/mainapp.py,sha256=SgPuXbgh82S0zlCfdlxmZajicwE4w7yh67PsSw0pdFI,4622
+paskia/fastapi/remote.py,sha256=bbE9U90wo7cpfXxMlBFm7s-eR0ALq7ImiKKUXeynA1s,18835
+paskia/fastapi/reset.py,sha256=k5UEVc3yWKwc3tHk7IuKAAdmSsbX3Zq9J6twXpaU9so,3609
+paskia/fastapi/session.py,sha256=BRnlgR8pTY7o0f7qFnkdyepS2fKEAgqwT9Hj951sZJM,1479
+paskia/fastapi/user.py,sha256=2mB4OU6BxeO9KQBvd1usgzSvTW5rsY37UdPp_OcGjr4,4620
+paskia/fastapi/ws.py,sha256=p0rHGbvglWw7S2ti89iTy_FlEScxjYqL1oJxkoWcPDY,4479
+paskia/fastapi/wschat.py,sha256=eUtVTGyxVIG2DOZIpjeYGgJRBpU5LnWfTT66vIsKaOA,1818
+paskia/fastapi/wsutil.py,sha256=CJZOyy4e9jazgyvj6CQ_kXVlGtpHNwfjGOdmHL02Nec,2620
+paskia/frontend-build/auth/index.html,sha256=PhNRnHQSaQCIyiSl8fZqidC-PIGMe_KWLJokw0N8628,936
+paskia/frontend-build/auth/admin/index.html,sha256=jiCkfwVKDRT-nmz1OEwWzZBw8tNMXGnNjIfaIBXJ4fE,862
+paskia/frontend-build/auth/assets/AccessDenied-DPkUS8LZ.css,sha256=s7BvCBUV8YZQA1riEuXFvBGcm8dRr6QNZ1VJMBWoKPA,7941
+paskia/frontend-build/auth/assets/AccessDenied-Fmeb6EtF.js,sha256=6ZgY9gSDDLtQUq0k4N5YWlpqpGyQW9r_X9ocWgSHuVM,51702
+paskia/frontend-build/auth/assets/RestrictedAuth-CvR33_Z0.css,sha256=jOnmoy1hon9QwzoY9tHmhd-0zUye9v9-bv5zPku82GY,5397
+paskia/frontend-build/auth/assets/RestrictedAuth-DsJXicIw.js,sha256=YctOv9_npORcB8kdudZs2iEf2yKhWJkLPTZTkvu-qB8,9761
+paskia/frontend-build/auth/assets/_plugin-vue_export-helper-BTzJAQlS.css,sha256=GpCu32ZoXHmL_8wVVa0Yja8dtKpaJSRyfitYAURx4Yc,12796
+paskia/frontend-build/auth/assets/_plugin-vue_export-helper-nhjnO_bd.js,sha256=6UQZRGDUU0m_cRZd_QKtt-4C1-3H2MtocoRR89is2AI,84746
+paskia/frontend-build/auth/assets/admin-CPE1pLMm.js,sha256=EgB9vPz_8Zey0klCLnAaQgPANnLrAXWnar64oZFZiqM,41005
+paskia/frontend-build/auth/assets/admin-DzzjSg72.css,sha256=X8K-ycZwZ3gXNdB8YFMxdGpRD8uS_Qeq0_awx9eJ-VY,7599
+paskia/frontend-build/auth/assets/auth-C7k64Wad.css,sha256=x1CKaX0MmuunxZvew4ArCusqTYNrNjLv4JW2bnvZhDg,4333
+paskia/frontend-build/auth/assets/auth-YIZvPlW_.js,sha256=pSJnxtX9ALwKNAu0rL7LAfr0zZIxy_Y--Qn5UllyMng,25209
+paskia/frontend-build/auth/assets/forward-DmqVHZ7e.js,sha256=rfiUg6N9ez9WuZA-pWf0CViV7j4-UoWqH3riFDr81xE,782
+paskia/frontend-build/auth/assets/helpers-DzjFIx78.js,sha256=w_IsCBn3QwidsuwQhVRycd8Fa53lvbgRGGojTBXVlUc,940
+paskia/frontend-build/auth/assets/pow-2N9bxgAo.js,sha256=7AfzW5lcTefPI6YGXrYao1b56L7v5Bon9Y9N40yHsaE,9447
+paskia/frontend-build/auth/assets/reset-Chtv69AT.css,sha256=1iFB1F8va7Ktdn7YxAMyNU8keFcaalmo25mCCM5QQys,238
+paskia/frontend-build/auth/assets/reset-s20PATTN.js,sha256=Fo4u2Kz58spVVJ2BmV3Q_HPG8x5jysL5_0KDYQbVRac,3976
+paskia/frontend-build/auth/assets/restricted-D3AJx3_6.js,sha256=H7L5F3nW6btinOZPgi8U_yLkxBO93L_rTeDMUWx7-Ow,1023
+paskia/frontend-build/auth/restricted/index.html,sha256=6RPwe3edRPjM2-TLp87S9C170NM0gGYufboL_sp7q-k,785
+paskia/frontend-build/int/forward/index.html,sha256=iA5lgiEgLxszNEdvTi7jMawKkhSTWydU8idRs0LLKlw,870
+paskia/frontend-build/int/reset/index.html,sha256=E6ylRX8-OupR3eBUPSzFRH1_rXVft93esAY0zaoVFBQ,612
+paskia/migrate/__init__.py,sha256=CuJxt4w7ZvnL4JJ6FxiBKXTSRvCx-rPxKe9CbMGagD4,9896
+paskia/migrate/sql.py,sha256=MK6KfmvoD3U65IN6EV2au3mhdLdicFIrV83mpQq8Bp4,14096
+paskia-0.9.0.dist-info/METADATA,sha256=fGtkP1RbaVeNZ2B-mcaX7hCgZn9Nc0QS1gfPg5av4l8,4261
+paskia-0.9.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+paskia-0.9.0.dist-info/entry_points.txt,sha256=vvx6RYetgd61I2ODqQPHqrKHgCfuo08w_T35yDlHenE,93
+paskia-0.9.0.dist-info/RECORD,,

paskia 0.8.0__py3-none-any.whl → 0.9.0__py3-none-any.whl

paskia 0.8.0py3-none-any.whl → 0.9.0py3-none-any.whl