plain.auth 0.11.0__tar.gz → 0.12.1__tar.gz

{plain_auth-0.11.0 → plain_auth-0.12.1}/.gitignore

@@ -11,3 +11,7 @@ plain*/tests/.plain
 
 # Ottobot
 .aider*
+
+/llms-full.txt
+
+/.plain

{plain_auth-0.11.0 → plain_auth-0.12.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plain.auth
-Version: 0.11.0
+Version: 0.12.1
 Summary: User authentication and authorization for Plain.
 Author-email: Dave Gaeddert <dave.gaeddert@dropseed.dev>
 License-File: LICENSE

{plain_auth-0.11.0 → plain_auth-0.12.1}/plain/auth/middleware.py

@@ -22,6 +22,7 @@ class AuthenticationMiddleware:
                 "'plain.sessions.middleware.SessionMiddleware' before "
                 "'plain.auth.middleware.AuthenticationMiddleware'."
             )
+
         request.user = SimpleLazyObject(lambda: get_user(request))
-        response = self.get_response(request)
-        return response
+
+        return self.get_response(request)

{plain_auth-0.11.0 → plain_auth-0.12.1}/plain/auth/sessions.py

@@ -21,6 +21,20 @@ def get_session_auth_hash(user):
     return _get_session_auth_hash(user)
 
 
+def update_session_auth_hash(request, user):
+    """
+    Updating a user's password (for example) logs out all sessions for the user.
+
+    Take the current request and the updated user object from which the new
+    session hash will be derived and update the session hash appropriately to
+    prevent a password change from logging out the session from which the
+    password was changed.
+    """
+    request.session.cycle_key()
+    if request.user == user:
+        request.session[USER_HASH_SESSION_KEY] = get_session_auth_hash(user)
+
+
 def get_session_auth_fallback_hash(user):
     for fallback_secret in settings.SECRET_KEY_FALLBACKS:
         yield _get_session_auth_hash(user, secret=fallback_secret)

{plain_auth-0.11.0 → plain_auth-0.12.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "plain.auth"
-version = "0.11.0"
+version = "0.12.1"
 description = "User authentication and authorization for Plain."
 authors = [{name = "Dave Gaeddert", email = "dave.gaeddert@dropseed.dev"}]
 readme = "README.md"
@@ -8,6 +8,8 @@ requires-python = ">=3.11"
 dependencies = [
     "plain<1.0.0",
     "plain.models<1.0.0",
+    # Technically you can swap out sessions entirely with your own,
+    # so long as the request.session exists and has a similar API.
     "plain.sessions<1.0.0",
 ]