poelis-sdk 0.1.2__tar.gz → 0.1.3__tar.gz

{poelis_sdk-0.1.2 → poelis_sdk-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: poelis-sdk
-Version: 0.1.2
+Version: 0.1.3
 Summary: Official Python SDK for Poelis
 Project-URL: Homepage, https://poelis.ai
 Project-URL: Source, https://github.com/PoelisTechnologies/poelis-python-sdk

{poelis_sdk-0.1.2 → poelis_sdk-0.1.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "poelis-sdk"
-version = "0.1.2"
+version = "0.1.3"
 description = "Official Python SDK for Poelis"
 readme = "README.md"
 requires-python = ">=3.11"

{poelis_sdk-0.1.2 → poelis_sdk-0.1.3}/src/poelis_sdk/_transport.py

@@ -6,6 +6,7 @@ import random
 import httpx
 
 from .exceptions import ClientError, HTTPError, NotFoundError, RateLimitError, ServerError, UnauthorizedError
+from .auth0 import Auth0TokenManager
 
 """HTTP transport abstraction for the Poelis SDK.
 
@@ -28,8 +29,8 @@ class Transport:
 
         Args:
             base_url: Base API URL.
-            token: Bearer token for Authorization header.
-            org_id: Optional organization id for tenant scoping.
+            api_key: API key for Auth0 authentication.
+            org_id: Organization id for tenant scoping.
             timeout_seconds: Request timeout in seconds.
         """
 
@@ -37,13 +38,18 @@ class Transport:
         self._api_key = api_key
         self._org_id = org_id
         self._timeout = timeout_seconds
+        
+        # Initialize Auth0 token manager
+        self._auth0_manager = Auth0TokenManager(api_key, org_id, base_url)
 
     def _headers(self, extra: Optional[Mapping[str, str]] = None) -> Dict[str, str]:
         headers: Dict[str, str] = {
             "Accept": "application/json",
             "Content-Type": "application/json",
         }
-        headers["Authorization"] = f"ApiKey {self._api_key}"
+        # Get fresh JWT token from Auth0
+        token = self._auth0_manager.get_token()
+        headers["Authorization"] = f"Bearer {token}"
         headers["X-Poelis-Org"] = self._org_id
         if extra:
             headers.update(dict(extra))

poelis_sdk-0.1.3/src/poelis_sdk/auth0.py

@@ -0,0 +1,85 @@
+"""Auth0 Client Credentials flow for SDK authentication.
+
+This module handles automatic JWT token acquisition using Auth0 Client Credentials
+flow when users provide API keys. The API key serves as the client_id, and we
+derive the client_secret and audience from the API key format.
+"""
+
+from __future__ import annotations
+
+import time
+from typing import Optional
+
+import httpx
+
+
+class Auth0TokenManager:
+    """Manages Auth0 JWT tokens using Client Credentials flow.
+    
+    Automatically acquires and refreshes tokens based on API keys.
+    """
+    
+    def __init__(self, api_key: str, org_id: str, base_url: str) -> None:
+        """Initialize token manager.
+        
+        Args:
+            api_key: API key from webapp (used as client_id)
+            org_id: Organization ID for audience
+            base_url: Base URL to derive Auth0 domain and audience
+        """
+        self.api_key = api_key
+        self.org_id = org_id
+        self.base_url = base_url
+        
+        # Extract Auth0 domain from API key format
+        # Format: poelis_live_org_dev_<client_id>_<secret>
+        parts = api_key.split('_')
+        if len(parts) >= 4 and parts[0] == 'poelis' and parts[1] == 'live':
+            self.client_id = parts[3]  # Extract client_id from API key
+            self.client_secret = '_'.join(parts[4:])  # Rest is secret
+        else:
+            raise ValueError("Invalid API key format. Expected: poelis_live_org_dev_<client_id>_<secret>")
+        
+        # Derive Auth0 domain and audience
+        self.auth0_domain = "poelis-prod.eu.auth0.com" 
+        self.audience = base_url
+        
+        self._token: Optional[str] = None
+        self._expires_at: float = 0
+    
+    def get_token(self) -> str:
+        """Get valid JWT token, refreshing if needed.
+        
+        Returns:
+            str: JWT token for Authorization header
+        """
+        if self._token and time.time() < self._expires_at - 60:  # Refresh 1min early
+            return self._token
+        
+        return self._refresh_token()
+    
+    def _refresh_token(self) -> str:
+        """Acquire new JWT token from Auth0.
+        
+        Returns:
+            str: Fresh JWT token
+        """
+        token_url = f"https://{self.auth0_domain}/oauth/token"
+        
+        data = {
+            "client_id": self.client_id,
+            "client_secret": self.client_secret,
+            "audience": self.audience,
+            "grant_type": "client_credentials"
+        }
+        
+        with httpx.Client() as client:
+            response = client.post(token_url, data=data)
+            response.raise_for_status()
+            
+            token_data = response.json()
+            self._token = token_data["access_token"]
+            expires_in = token_data.get("expires_in", 3600)
+            self._expires_at = time.time() + expires_in
+            
+            return self._token

{poelis_sdk-0.1.2 → poelis_sdk-0.1.3}/uv.lock

@@ -538,7 +538,7 @@ wheels = [
 
 [[package]]
 name = "poelis-sdk"
-version = "0.1.2"
+version = "0.1.3"
 source = { editable = "." }
 dependencies = [
     { name = "build" },