proxcli 0.7.0__tar.gz → 0.7.1__tar.gz

{proxcli-0.7.0 → proxcli-0.7.1}/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.7.1] - 2026-06-20
+
+### Fixed
+- API token authentication: Removed incorrect base64 encoding.
+  Proxmox expects `PVEAPIToken=user@realm!tokenid=secret` as plain text
+  in the Authorization header, not base64-encoded.
+- Dry-run mode now always sets API token headers so that
+  `--dry-run` output accurately reflects the Authorization header
+  that would be sent. (Password auth is still skipped in dry-run
+  since it requires a network call.)
+
 ## [0.7.0] - 2026-06-20
 
 ### Added
@@ -82,6 +93,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CSRF ticket auto-refresh on 401.
 - AI-agent-friendly: default JSON output, strict exit codes, `--dry-run` mode.
 
+[0.7.1]: https://github.com/xezpeleta/proxcli/releases/tag/v0.7.1
 [0.7.0]: https://github.com/xezpeleta/proxcli/releases/tag/v0.7.0
 [0.6.0]: https://github.com/xezpeleta/proxcli/releases/tag/v0.6.0
 [0.5.0]: https://github.com/xezpeleta/proxcli/releases/tag/v0.5.0

{proxcli-0.7.0 → proxcli-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: proxcli
-Version: 0.7.0
+Version: 0.7.1
 Summary: A CLI tool to interact with Proxmox VE nodes and clusters via the REST API
 Author-email: Xabi Ezpeleta <xezpeleta@gmail.com>
 License: MIT

{proxcli-0.7.0 → proxcli-0.7.1}/proxmox/cli/main.py

@@ -149,21 +149,19 @@ def _build_client(overrides: dict[str, Any], args: argparse.Namespace) -> Proxmo
 
     auth_mgr = AuthManager()
 
-    # Don't authenticate if dry-run (no actual API calls will be made)
-    if not args.dry_run:
-        if overrides["api_token_id"] and overrides["api_token_secret"]:
-            auth_mgr.set_api_token(
-                overrides["username"] or "root@pam",
-                overrides["api_token_id"],
-                overrides["api_token_secret"],
-            )
-        elif overrides["password"]:
-            auth_mgr.authenticate_password(
-                overrides["url"],
-                overrides["username"] or "root@pam",
-                overrides["password"],
-                verify=overrides["verify_tls"],
-            )
+    if overrides["api_token_id"] and overrides["api_token_secret"]:
+        auth_mgr.set_api_token(
+            overrides["username"] or "root@pam",
+            overrides["api_token_id"],
+            overrides["api_token_secret"],
+        )
+    elif overrides["password"] and not args.dry_run:
+        auth_mgr.authenticate_password(
+            overrides["url"],
+            overrides["username"] or "root@pam",
+            overrides["password"],
+            verify=overrides["verify_tls"],
+        )
 
     client = ProxmoxClient(
         base_url=overrides["url"],

{proxcli-0.7.0 → proxcli-0.7.1}/proxmox/client/auth.py

@@ -2,7 +2,6 @@
 
 from __future__ import annotations
 
-import base64
 from enum import Enum
 from typing import Any
 
@@ -63,9 +62,7 @@ class AuthManager:
 
     def set_api_token(self, user: str, token_id: str, secret: str) -> None:
         """Use a Proxmox API token for authentication."""
-        raw = f"{user}!{token_id}={secret}"
-        encoded = base64.b64encode(raw.encode()).decode()
-        self._auth_header = f"PVEAPIToken {encoded}"
+        self._auth_header = f"PVEAPIToken={user}!{token_id}={secret}"
         self._method = AuthMethod.API_TOKEN
         self._ticket = None
         self._csrf_token = None

{proxcli-0.7.0 → proxcli-0.7.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "proxcli"
-version = "0.7.0"
+version = "0.7.1"
 description = "A CLI tool to interact with Proxmox VE nodes and clusters via the REST API"
 readme = "README.md"
 authors = [

{proxcli-0.7.0 → proxcli-0.7.1}/tests/test_auth.py

@@ -2,8 +2,6 @@
 
 from __future__ import annotations
 
-import base64
-
 import pytest
 
 from proxmox.client.auth import AuthMethod
@@ -60,9 +58,7 @@ class TestAuthManager:
         assert auth_manager.method == AuthMethod.API_TOKEN
 
         headers = auth_manager.get_headers()
-        expected_raw = "root@pam!my-token=my-secret"
-        expected_encoded = base64.b64encode(expected_raw.encode()).decode()
-        assert headers["Authorization"] == f"PVEAPIToken {expected_encoded}"
+        assert headers["Authorization"] == "PVEAPIToken=root@pam!my-token=my-secret"
         assert "Cookie" not in headers
         assert "CSRFPreventionToken" not in headers
 

{proxcli-0.7.0 → proxcli-0.7.1}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 2
 requires-python = ">=3.10"
 
 [[package]]
@@ -254,7 +254,7 @@ wheels = [
 
 [[package]]
 name = "proxcli"
-version = "0.7.0"
+version = "0.7.1"
 source = { editable = "." }
 dependencies = [
     { name = "httpx" },