pypomes-jwt 1.2.7__py3-none-any.whl → 1.2.9__py3-none-any.whl

pypomes_jwt/jwt_config.py

@@ -52,14 +52,19 @@ class JwtConfig(Enum):
                                       def_value=300)
     ACCOUNT_LIMIT: int = env_get_int(key=f"{APP_PREFIX}_JWT_ACCOUNT_LIMIT",
                                      def_value=5)
+    DEFAULT_ALGORITHM: _default_algorithm
     ENCODING_KEY: bytes = _encoding_key
     DECODING_KEY: bytes = _decoding_key
-    DEFAULT_ALGORITHM: str = _default_algorithm
     # recommended: at least 2 hours (set to 24 hours)
     REFRESH_MAX_AGE: int = env_get_int(key=f"{APP_PREFIX}_JWT_REFRESH_MAX_AGE",
                                        def_value=86400)
 
 
+del _decoding_key
+del _encoding_key
+del _default_algorithm
+
+
 class JwtDbConfig(StrEnum):
     """
     Parameters for JWT database connection.

pypomes_jwt/jwt_pomes.py

@@ -6,7 +6,7 @@ from logging import Logger
 from pypomes_core import exc_format
 from pypomes_db import (
     DbEngine, db_connect, db_commit,
-    db_rollback, db_select, db_delete
+    db_rollback, db_close, db_select, db_delete
 )
 from typing import Any
 
@@ -254,18 +254,18 @@ def jwt_validate_token(token: str,
     return result
 
 
-def jwt_revoke_token(errors: list[str] | None,
-                     account_id: str,
+def jwt_revoke_token(account_id: str,
                      token: str,
+                     errors: list[str] = None,
                      logger: Logger = None) -> bool:
     """
     Revoke the *refresh_token* associated with *account_id*.
 
     Revoke operations require access to a database table defined by *JWT_DB_TABLE*.
 
-    :param errors: incidental error messages
     :param account_id: the account identification
     :param token: the token to be revoked
+    :param errors: incidental error messages
     :param logger: optional logger
     :return: *True* if operation could be performed, *False* otherwise
     """
@@ -285,13 +285,13 @@ def jwt_revoke_token(errors: list[str] | None,
         if token_kid[0:1] not in ["A", "R"]:
             op_errors.append("Invalid token")
         else:
-            db_delete(errors=op_errors,
-                      delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+            db_delete(delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
                       where_data={
                           JwtDbConfig.COL_KID: int(token_kid[1:]),
                           JwtDbConfig.COL_ACCOUNT: account_id
                       },
                       engine=DbEngine(JwtDbConfig.ENGINE),
+                      errors=op_errors,
                       logger=logger)
     if op_errors:
         if logger:
@@ -304,12 +304,12 @@ def jwt_revoke_token(errors: list[str] | None,
     return result
 
 
-def jwt_issue_token(errors: list[str] | None,
-                    account_id: str,
+def jwt_issue_token(account_id: str,
                     nature: str,
                     duration: int,
                     lead_interval: int = None,
                     claims: dict[str, Any] = None,
+                    errors: list[str] = None,
                     logger: Logger = None) -> str:
     """
     Issue or refresh, and return, a JWT token associated with *account_id*, of the specified *nature*.
@@ -319,12 +319,12 @@ def jwt_issue_token(errors: list[str] | None,
     The parameter *duration* specifies the token's validity interval (at least 60 seconds).
     These claims are ignored, if specified in *claims*: *iat*, *iss*, *exp*, *jti*, *nbf*, and *sub*.
 
-    :param errors: incidental error messages
     :param account_id: the account identification
     :param nature: the token's nature, must be a single letter in the range *[B-Z]*, less *R*
     :param duration: the number of seconds for the token to remain valid (at least 60 seconds)
     :param claims: optional token's claims
     :param lead_interval: optional interval for the token to become active (in seconds)
+    :param errors: incidental error messages
     :param logger: optional logger
     :return: the JWT token data, or *None* if error
     """
@@ -358,9 +358,9 @@ def jwt_issue_token(errors: list[str] | None,
     return result
 
 
-def jwt_issue_tokens(errors: list[str] | None,
-                     account_id: str,
+def jwt_issue_tokens(account_id: str,
                      account_claims: dict[str, Any] = None,
+                     errors: list[str] = None,
                      logger: Logger = None) -> dict[str, Any]:
     """
     Issue the JWT token pair associated with *account_id*, for access and refresh operations.
@@ -376,9 +376,9 @@ def jwt_issue_tokens(errors: list[str] | None,
       "refresh-token": <jwt-token>
     }
 
-    :param errors: incidental error messages
     :param account_id: the account identification
     :param account_claims: if provided, may supercede currently registered account-related claims
+    :param errors: incidental error messages
     :param logger: optional logger
     :return: the JWT token data, or *None* if error
     """
@@ -412,9 +412,9 @@ def jwt_issue_tokens(errors: list[str] | None,
     return result
 
 
-def jwt_refresh_tokens(errors: list[str] | None,
-                       account_id: str,
+def jwt_refresh_tokens(account_id: str,
                        refresh_token: str,
+                       errors: list[str] = None,
                        logger: Logger = None) -> dict[str, Any]:
     """
     Refresh the JWT token pair associated with *account_id*, for access and refresh operations.
@@ -440,7 +440,10 @@ def jwt_refresh_tokens(errors: list[str] | None,
 
     if logger:
         logger.debug(msg=f"Refreshing a JWT token pair for '{account_id}'")
-    op_errors: list[str] = []
+
+    # make sure to have an errors list
+    if not isinstance(errors, list):
+        errors = []
 
     # assert the refresh token
     if refresh_token:
@@ -448,7 +451,7 @@ def jwt_refresh_tokens(errors: list[str] | None,
         token_claims: dict[str, Any] = jwt_validate_token(token=refresh_token,
                                                           nature="R",
                                                           account_id=account_id,
-                                                          errors=op_errors,
+                                                          errors=errors,
                                                           logger=logger)
         if token_claims:
             # yes, proceed
@@ -457,7 +460,7 @@ def jwt_refresh_tokens(errors: list[str] | None,
             # start the database transaction
             db_conn: Any = db_connect(autocommit=False,
                                       engine=DbEngine(JwtDbConfig.ENGINE),
-                                      errors=op_errors,
+                                      errors=errors,
                                       logger=logger)
             if db_conn:
                 # delete current refresh token
@@ -469,11 +472,11 @@ def jwt_refresh_tokens(errors: list[str] | None,
                           engine=DbEngine(JwtDbConfig.ENGINE),
                           connection=db_conn,
                           committable=False,
-                          errors=op_errors,
+                          errors=errors,
                           logger=logger)
 
                 # issue the token pair
-                if not op_errors:
+                if not errors:
                     try:
                         result = __jwt_registry.issue_tokens(account_id=account_id,
                                                              account_claims=token_claims.get("payload"),
@@ -487,25 +490,24 @@ def jwt_refresh_tokens(errors: list[str] | None,
                                                   exc_info=sys.exc_info())
                         if logger:
                             logger.error(msg=f"Error refreshing the token pair: {exc_err}")
-                        op_errors.append(exc_err)
+                        errors.append(exc_err)
 
                 # wrap-up the transaction
-                if op_errors:
+                if errors:
                     db_rollback(connection=db_conn,
                                 logger=logger)
                 else:
                     db_commit(connection=db_conn,
-                              errors=op_errors,
+                              errors=errors,
                               logger=logger)
+                db_close(connection=db_conn,
+                         logger=logger)
     else:
         # refresh token not found
-        op_errors.append("Refresh token was not provided")
+        errors.append("Refresh token was not provided")
 
-    if op_errors:
-        if logger:
-            logger.error("; ".join(op_errors))
-        if isinstance(errors, list):
-            errors.extend(op_errors)
+    if errors and logger:
+        logger.error(msg="; ".join(errors))
 
     return result
 

pypomes_jwt/jwt_providers.py

@@ -62,14 +62,14 @@ def provider_register(provider_id: str,
     }
 
 
-def provider_get_token(errors: list[str] | None,
-                       provider_id: str,
+def provider_get_token(provider_id: str,
+                       errors: list[str] | None,
                        logger: Logger = None) -> str | None:
     """
     Obtain an authentication token from the external provider *provider_id*.
 
-    :param errors: incidental error messages
     :param provider_id: the provider's identification
+    :param errors: incidental error messages
     :param logger: optional logger
     """
     # initialize the return variable

pypomes_jwt/jwt_registry.py

@@ -6,7 +6,7 @@ from datetime import datetime, UTC
 from logging import Logger
 from pypomes_core import str_random
 from pypomes_db import (
-    DbEngine, db_connect, db_commit, db_rollback,
+    DbEngine, db_connect, db_commit, db_rollback, db_close,
     db_select, db_insert, db_update, db_delete
 )
 from threading import Lock
@@ -296,6 +296,8 @@ class JwtRegistry:
                         db_commit(connection=curr_conn,
                                   errors=errors,
                                   logger=logger)
+                    db_close(connection=curr_conn)
+
             if errors:
                 raise RuntimeError("; ".join(errors))
 
@@ -359,102 +361,100 @@ class JwtRegistry:
         """
         from .jwt_pomes import jwt_get_claims
 
-        # retrieve the account's tokens
-        errors: list[str] = []
-        # noinspection PyTypeChecker
-        recs: list[tuple[int, str, str, str]] = \
-            db_select(sel_stmt=f"SELECT {JwtDbConfig.COL_KID}, {JwtDbConfig.COL_TOKEN} "
-                               f"FROM {JwtDbConfig.TABLE}",
-                      where_data={JwtDbConfig.COL_ACCOUNT: account_id},
-                      engine=DbEngine(JwtDbConfig.ENGINE),
-                      connection=db_conn,
-                      errors=errors,
-                      logger=logger)
-        if errors:
-            raise RuntimeError("; ".join(errors))
+        # initialize the return variable
+        result: int | None = None
 
-        if logger:
-            logger.debug(msg=f"Retrieved {len(recs)} tokens from storage for account '{account_id}'")
-        # remove the expired tokens
-        just_now: int = int(datetime.now(tz=UTC).timestamp())
-        oldest_ts: int = sys.maxsize
-        oldest_id: int | None = None
-        expired: list[int] = []
-        for rec in recs:
-            token: str = rec[1]
-            token_id: int = rec[0]
-            token_payload: dict[str, Any] = (jwt_get_claims(token=token,
-                                                            errors=errors,
-                                                            logger=logger) or {}).get("payload")
-            if errors:
-                raise RuntimeError("; ".join(errors))
-
-            # find expired tokens
-            exp: int = token_payload.get("exp", sys.maxsize)
-            if exp < just_now:
-                expired.append(token_id)
-
-            # find oldest token
-            iat: int = token_payload.get("iat", sys.maxsize)
-            if iat < oldest_ts:
-                oldest_ts = iat
-                oldest_id = token_id
-
-        # remove expired tokens from persistence
-        if expired:
-            db_delete(delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
-                      where_data={JwtDbConfig.COL_KID: expired},
-                      engine=DbEngine(JwtDbConfig.ENGINE),
-                      connection=db_conn,
-                      errors=errors,
-                      logger=logger)
-            if errors:
-                raise RuntimeError("; ".join(errors))
-            if logger:
-                logger.debug(msg=f"{len(expired)} tokens of account "
-                                 f"'{account_id}' removed from storage")
-
-        if 0 < JwtConfig.ACCOUNT_LIMIT.value <= len(recs) - len(expired):
-            # delete the oldest token to make way for the new one
-            db_delete(delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
-                      where_data={JwtDbConfig.COL_KID: oldest_id},
-                      engine=DbEngine(JwtDbConfig.ENGINE),
-                      connection=db_conn,
-                      errors=errors,
-                      logger=logger)
+        # make sure to have a database connection
+        errors: list[str] = []
+        curr_conn: Any = db_conn or db_connect(autocommit=False,
+                                               engine=DbEngine(JwtDbConfig.ENGINE),
+                                               errors=errors,
+                                               logger=logger)
+        if not errors:
+
+            # retrieve the account's tokens
+            # noinspection PyTypeChecker
+            recs: list[tuple[int, str, str, str]] = \
+                db_select(sel_stmt=f"SELECT {JwtDbConfig.COL_KID}, {JwtDbConfig.COL_TOKEN} "
+                                   f"FROM {JwtDbConfig.TABLE}",
+                          where_data={JwtDbConfig.COL_ACCOUNT: account_id},
+                          engine=DbEngine(JwtDbConfig.ENGINE),
+                          connection=curr_conn,
+                          errors=errors,
+                          logger=logger)
+            if not errors:
+                if logger:
+                    logger.debug(msg=f"Retrieved {len(recs)} tokens from storage for account '{account_id}'")
+                # remove the expired tokens
+                just_now: int = int(datetime.now(tz=UTC).timestamp())
+                oldest_ts: int = sys.maxsize
+                oldest_id: int | None = None
+                expired: list[int] = []
+                for rec in recs:
+                    token: str = rec[1]
+                    token_id: int = rec[0]
+                    token_payload: dict[str, Any] = (jwt_get_claims(token=token,
+                                                                    errors=errors,
+                                                                    logger=logger) or {}).get("payload")
+                    if errors:
+                        break
+                    # find expired tokens
+                    exp: int = token_payload.get("exp", sys.maxsize)
+                    if exp < just_now:
+                        expired.append(token_id)
+
+                    # find oldest token
+                    iat: int = token_payload.get("iat", sys.maxsize)
+                    if iat < oldest_ts:
+                        oldest_ts = iat
+                        oldest_id = token_id
+
+                # remove expired tokens from persistence
+                if not errors and expired:
+                    db_delete(delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+                              where_data={JwtDbConfig.COL_KID: expired},
+                              engine=DbEngine(JwtDbConfig.ENGINE),
+                              connection=curr_conn,
+                              errors=errors,
+                              logger=logger)
+                    if not errors and logger:
+                        logger.debug(msg=f"{len(expired)} tokens of account "
+                                         f"'{account_id}' removed from storage")
+
+                if not errors and 0 < JwtConfig.ACCOUNT_LIMIT.value <= len(recs) - len(expired):
+                    # delete the oldest token to make way for the new one
+                    db_delete(delete_stmt=f"DELETE FROM {JwtDbConfig.TABLE}",
+                              where_data={JwtDbConfig.COL_KID: oldest_id},
+                              engine=DbEngine(JwtDbConfig.ENGINE),
+                              connection=curr_conn,
+                              errors=errors,
+                              logger=logger)
+                    if not errors and logger:
+                        logger.debug(msg="Oldest active token of account "
+                                         f"'{account_id}' removed from storage")
+                # persist token
+                if not errors:
+                    result = db_insert(insert_stmt=f"INSERT INTO {JwtDbConfig.TABLE}",
+                                       insert_data={
+                                           JwtDbConfig.COL_ACCOUNT: account_id,
+                                           JwtDbConfig.COL_TOKEN: jwt_token,
+                                           JwtDbConfig.COL_ALGORITHM: JwtConfig.DEFAULT_ALGORITHM.value,
+                                           JwtDbConfig.COL_DECODER: b64encode(s=JwtConfig.DECODING_KEY.value).decode()
+                                       },
+                                       return_cols={JwtDbConfig.COL_KID: int},
+                                       engine=DbEngine(JwtDbConfig.ENGINE),
+                                       connection=curr_conn,
+                                       errors=errors,
+                                       logger=logger)
+        # finish the operation
+        if not db_conn:
             if errors:
-                raise RuntimeError("; ".join(errors))
-            if logger:
-                logger.debug(msg="Oldest active token of account "
-                                 f"'{account_id}' removed from storage")
-        # persist token
-        col_kid: int = db_insert(insert_stmt=f"INSERT INTO {JwtDbConfig.TABLE}",
-                                 insert_data={
-                                     JwtDbConfig.COL_ACCOUNT: account_id,
-                                     JwtDbConfig.COL_TOKEN: jwt_token,
-                                     JwtDbConfig.COL_ALGORITHM: JwtConfig.DEFAULT_ALGORITHM.value,
-                                     JwtDbConfig.COL_DECODER: b64encode(s=JwtConfig.DECODING_KEY.value).decode()
-                                 },
-                                 return_cols={JwtDbConfig.COL_KID: int},
-                                 engine=DbEngine(JwtDbConfig.ENGINE),
-                                 connection=db_conn,
-                                 errors=errors,
-                                 logger=logger)
-        if errors:
-            raise RuntimeError("; ".join(errors))
+                db_rollback(connection=curr_conn)
+            else:
+                db_commit(connection=curr_conn)
+            db_close(connection=curr_conn)
 
-        # obtain and return the token's storage id
-        reply: list[tuple[int]] = db_select(sel_stmt=f"SELECT {JwtDbConfig.COL_KID} "
-                                                     f"FROM {JwtDbConfig.TABLE}",
-                                            where_data={JwtDbConfig.COL_KID: col_kid},
-                                            min_count=1,
-                                            max_count=1,
-                                            engine=DbEngine(JwtDbConfig.ENGINE),
-                                            connection=db_conn,
-                                            committable=False,
-                                            errors=errors,
-                                            logger=logger)
         if errors:
             raise RuntimeError("; ".join(errors))
 
-        return reply[0][0]
+        return result

{pypomes_jwt-1.2.7.dist-info → pypomes_jwt-1.2.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pypomes_jwt
-Version: 1.2.7
+Version: 1.2.9
 Summary: A collection of Python pomes, penyeach (JWT module)
 Project-URL: Homepage, https://github.com/TheWiseCoder/PyPomes-JWT
 Project-URL: Bug Tracker, https://github.com/TheWiseCoder/PyPomes-JWT/issues
@@ -11,7 +11,7 @@ Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Requires-Python: >=3.12
 Requires-Dist: cryptography>=45.0.6
-Requires-Dist: flask>=3.1.1
+Requires-Dist: flask>=3.1.2
 Requires-Dist: pyjwt>=2.10.1
 Requires-Dist: pypomes-core>=2.7.0
-Requires-Dist: pypomes-db>=2.5.7
+Requires-Dist: pypomes-db>=2.5.9

pypomes_jwt-1.2.9.dist-info/RECORD

@@ -0,0 +1,9 @@
+pypomes_jwt/__init__.py,sha256=vXAeaEnuUqpvGtV465TsW2Lf3ihijrMP2Hm4My79y88,968
+pypomes_jwt/jwt_config.py,sha256=E8fGof_krCx2gZ_QCo87tF46J_2OLZk1m9erf3oX4O4,3398
+pypomes_jwt/jwt_pomes.py,sha256=5EZ0gYj-zRJx1iQHfdmtdk-4V7NuWnhof69Vr6_TpRs,23836
+pypomes_jwt/jwt_providers.py,sha256=LL2OxdyGH3_O-qEOVjg_GsPQVRtaSi37AE-BOZ6tiqs,5928
+pypomes_jwt/jwt_registry.py,sha256=SDP2pFPsbjJ9w3r9c_DPJuN86rdwhHkg3lyX3gTBuNY,22305
+pypomes_jwt-1.2.9.dist-info/METADATA,sha256=ptV7ecaz2x0IuwO_xGzNAozIOBN15Powzl9-utmMFgM,660
+pypomes_jwt-1.2.9.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+pypomes_jwt-1.2.9.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
+pypomes_jwt-1.2.9.dist-info/RECORD,,

pypomes_jwt-1.2.7.dist-info/RECORD

@@ -1,9 +0,0 @@
-pypomes_jwt/__init__.py,sha256=vXAeaEnuUqpvGtV465TsW2Lf3ihijrMP2Hm4My79y88,968
-pypomes_jwt/jwt_config.py,sha256=3r9XPWXXAG_wKUs_FDZoTj9j6lmTdNymud_q4E4Opk0,3338
-pypomes_jwt/jwt_pomes.py,sha256=u9TEe2oNpk6QlcpjnJ4-lH6WitkLjuDXLNTveeiFFqw,23784
-pypomes_jwt/jwt_providers.py,sha256=wDIP6W-l_X1zrWeCNFGcRsb8Ui1Sja-3StcuRtLTjR4,5928
-pypomes_jwt/jwt_registry.py,sha256=AyaoSK4KMhRiRACTImK5z0AzQBwhG5cBkazPjkrzdaI,22046
-pypomes_jwt-1.2.7.dist-info/METADATA,sha256=ft9-OuYTf4hgDHVz2iMHyQC21emonjpZEdQ9oF5K9w8,660
-pypomes_jwt-1.2.7.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-pypomes_jwt-1.2.7.dist-info/licenses/LICENSE,sha256=NdakochSXm_H_-DSL_x2JlRCkYikj3snYYvTwgR5d_c,1086
-pypomes_jwt-1.2.7.dist-info/RECORD,,