poelis-sdk 0.1.2__py3-none-any.whl → 0.1.3__py3-none-any.whl

poelis_sdk/_transport.py

@@ -6,6 +6,7 @@ import random
 import httpx
 
 from .exceptions import ClientError, HTTPError, NotFoundError, RateLimitError, ServerError, UnauthorizedError
+from .auth0 import Auth0TokenManager
 
 """HTTP transport abstraction for the Poelis SDK.
 
@@ -28,8 +29,8 @@ class Transport:
 
         Args:
             base_url: Base API URL.
-            token: Bearer token for Authorization header.
-            org_id: Optional organization id for tenant scoping.
+            api_key: API key for Auth0 authentication.
+            org_id: Organization id for tenant scoping.
             timeout_seconds: Request timeout in seconds.
         """
 
@@ -37,13 +38,18 @@ class Transport:
         self._api_key = api_key
         self._org_id = org_id
         self._timeout = timeout_seconds
+        
+        # Initialize Auth0 token manager
+        self._auth0_manager = Auth0TokenManager(api_key, org_id, base_url)
 
     def _headers(self, extra: Optional[Mapping[str, str]] = None) -> Dict[str, str]:
         headers: Dict[str, str] = {
             "Accept": "application/json",
             "Content-Type": "application/json",
         }
-        headers["Authorization"] = f"ApiKey {self._api_key}"
+        # Get fresh JWT token from Auth0
+        token = self._auth0_manager.get_token()
+        headers["Authorization"] = f"Bearer {token}"
         headers["X-Poelis-Org"] = self._org_id
         if extra:
             headers.update(dict(extra))

poelis_sdk/auth0.py

@@ -0,0 +1,85 @@
+"""Auth0 Client Credentials flow for SDK authentication.
+
+This module handles automatic JWT token acquisition using Auth0 Client Credentials
+flow when users provide API keys. The API key serves as the client_id, and we
+derive the client_secret and audience from the API key format.
+"""
+
+from __future__ import annotations
+
+import time
+from typing import Optional
+
+import httpx
+
+
+class Auth0TokenManager:
+    """Manages Auth0 JWT tokens using Client Credentials flow.
+    
+    Automatically acquires and refreshes tokens based on API keys.
+    """
+    
+    def __init__(self, api_key: str, org_id: str, base_url: str) -> None:
+        """Initialize token manager.
+        
+        Args:
+            api_key: API key from webapp (used as client_id)
+            org_id: Organization ID for audience
+            base_url: Base URL to derive Auth0 domain and audience
+        """
+        self.api_key = api_key
+        self.org_id = org_id
+        self.base_url = base_url
+        
+        # Extract Auth0 domain from API key format
+        # Format: poelis_live_org_dev_<client_id>_<secret>
+        parts = api_key.split('_')
+        if len(parts) >= 4 and parts[0] == 'poelis' and parts[1] == 'live':
+            self.client_id = parts[3]  # Extract client_id from API key
+            self.client_secret = '_'.join(parts[4:])  # Rest is secret
+        else:
+            raise ValueError("Invalid API key format. Expected: poelis_live_org_dev_<client_id>_<secret>")
+        
+        # Derive Auth0 domain and audience
+        self.auth0_domain = "poelis-prod.eu.auth0.com" 
+        self.audience = base_url
+        
+        self._token: Optional[str] = None
+        self._expires_at: float = 0
+    
+    def get_token(self) -> str:
+        """Get valid JWT token, refreshing if needed.
+        
+        Returns:
+            str: JWT token for Authorization header
+        """
+        if self._token and time.time() < self._expires_at - 60:  # Refresh 1min early
+            return self._token
+        
+        return self._refresh_token()
+    
+    def _refresh_token(self) -> str:
+        """Acquire new JWT token from Auth0.
+        
+        Returns:
+            str: Fresh JWT token
+        """
+        token_url = f"https://{self.auth0_domain}/oauth/token"
+        
+        data = {
+            "client_id": self.client_id,
+            "client_secret": self.client_secret,
+            "audience": self.audience,
+            "grant_type": "client_credentials"
+        }
+        
+        with httpx.Client() as client:
+            response = client.post(token_url, data=data)
+            response.raise_for_status()
+            
+            token_data = response.json()
+            self._token = token_data["access_token"]
+            expires_in = token_data.get("expires_in", 3600)
+            self._expires_at = time.time() + expires_in
+            
+            return self._token

{poelis_sdk-0.1.2.dist-info → poelis_sdk-0.1.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: poelis-sdk
-Version: 0.1.2
+Version: 0.1.3
 Summary: Official Python SDK for Poelis
 Project-URL: Homepage, https://poelis.ai
 Project-URL: Source, https://github.com/PoelisTechnologies/poelis-python-sdk

{poelis_sdk-0.1.2.dist-info → poelis_sdk-0.1.3.dist-info}/RECORD

@@ -1,5 +1,6 @@
 poelis_sdk/__init__.py,sha256=QzPuy0lsmF0JEOrcnHDWsUfR_WCO1XpegwrYpSGyUVI,738
-poelis_sdk/_transport.py,sha256=0yLpcMbZB7KUmBBG3epwbGi2NwOqt0dwMBYh-Y8o6Pc,5830
+poelis_sdk/_transport.py,sha256=F5EX0EJFHJPAE638nKzlX5zLSU6FIMzMemqgh05_V6U,6061
+poelis_sdk/auth0.py,sha256=mNa7QvNR9dWS39jpUE9GYfgkbBF-A7shvLqzQAeH28U,2879
 poelis_sdk/browser.py,sha256=zyMoNqFCvKZDV4ZSFVk2N1-HHiq80gzmkGN3uRo1CuM,12409
 poelis_sdk/client.py,sha256=Sr05go8eNpEXswWAhomQuSakE5Oai_kUsGDwHgPnnLY,3731
 poelis_sdk/exceptions.py,sha256=qX5kpAr8ozJUOW-CNhmspWVIE-bvUZT_PUnimYuBxNY,1101
@@ -11,7 +12,7 @@ poelis_sdk/workspaces.py,sha256=LNVt73nqdssNx42_YB_V5Qp35kEdFn9rNBYmEjpM7vk,1518
 poelis_sdk/.github/workflows/sdk-ci.yml,sha256=hWO-igHeTAsxEJGCueteEQnAEi00GWXJJPa8DWgqhHM,750
 poelis_sdk/.github/workflows/sdk-docs.yml,sha256=bS1uUxOKRMA6TWrmzzJHTokyP0Nt0aJwojcLAgLoEhs,1166
 poelis_sdk/.github/workflows/sdk-publish-testpypi.yml,sha256=FBZcfDrtUijs6rcC8WeIimi9SfgoB8Xm5pTNtcztT44,776
-poelis_sdk-0.1.2.dist-info/METADATA,sha256=jGVzZZFVynSO28j2FE02st7UekeGOZEGRxaJP08zu3U,3280
-poelis_sdk-0.1.2.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-poelis_sdk-0.1.2.dist-info/licenses/LICENSE,sha256=EEmE_r8wk_pdXB8CWp1LG6sBOl7--hNSS2kV94cI6co,1075
-poelis_sdk-0.1.2.dist-info/RECORD,,
+poelis_sdk-0.1.3.dist-info/METADATA,sha256=Z69IrLD4-Bb8oC1cYZF0frbl8IT-uvthky8fY7NIEdI,3280
+poelis_sdk-0.1.3.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+poelis_sdk-0.1.3.dist-info/licenses/LICENSE,sha256=EEmE_r8wk_pdXB8CWp1LG6sBOl7--hNSS2kV94cI6co,1075
+poelis_sdk-0.1.3.dist-info/RECORD,,