pytest-neon 2.3.0__py3-none-any.whl → 2.3.2__py3-none-any.whl

pytest_neon/__init__.py

@@ -9,7 +9,7 @@ from pytest_neon.plugin import (
     neon_engine,
 )
 
-__version__ = "2.3.0"
+__version__ = "2.3.2"
 __all__ = [
     "NeonBranch",
     "neon_branch",

pytest_neon/plugin.py

@@ -295,6 +295,48 @@ def _get_git_branch_name() -> str | None:
     return None
 
 
+def _extract_password_from_connection_string(connection_string: str) -> str:
+    """Extract password from a PostgreSQL connection string."""
+    # Format: postgresql://user:password@host/db?params
+    from urllib.parse import urlparse
+
+    parsed = urlparse(connection_string)
+    if parsed.password:
+        return parsed.password
+    raise ValueError(f"No password found in connection string: {connection_string}")
+
+
+def _reveal_role_password(
+    api_key: str, project_id: str, branch_id: str, role_name: str
+) -> str:
+    """
+    Get the password for a role WITHOUT resetting it.
+
+    Uses Neon's reveal_password API endpoint (GET request).
+
+    Note: The neon-api library has a bug where it uses POST instead of GET,
+    so we make the request directly.
+    """
+    url = (
+        f"https://console.neon.tech/api/v2/projects/{project_id}"
+        f"/branches/{branch_id}/roles/{role_name}/reveal_password"
+    )
+    headers = {
+        "Authorization": f"Bearer {api_key}",
+        "Accept": "application/json",
+    }
+
+    response = requests.get(url, headers=headers, timeout=30)
+    try:
+        response.raise_for_status()
+    except requests.exceptions.HTTPError:
+        # Wrap in NeonAPIError for consistent error handling
+        raise NeonAPIError(response.text) from None
+
+    data = response.json()
+    return data["password"]
+
+
 def _get_schema_fingerprint(connection_string: str) -> tuple[tuple[Any, ...], ...]:
     """
     Get a fingerprint of the database schema for change detection.
@@ -497,7 +539,7 @@ class NeonBranchManager:
             )
 
         # Get password
-        connection_string = self._reset_password_and_build_connection_string(
+        connection_string = self._get_password_and_build_connection_string(
             branch.id, host
         )
 
@@ -537,9 +579,15 @@ class NeonBranchManager:
         endpoint_id = result.endpoint.id
         host = self._wait_for_endpoint(endpoint_id)
 
-        # Get password for the read_only endpoint
-        connection_string = self._reset_password_and_build_connection_string(
-            branch.branch_id, host
+        # Reuse the password from the parent branch's connection string.
+        # DO NOT call role_password_reset here - it would invalidate the
+        # password used by the parent branch's read_write endpoint, breaking
+        # any existing connections (especially in xdist where other workers
+        # may be using the cached connection string).
+        password = _extract_password_from_connection_string(branch.connection_string)
+        connection_string = (
+            f"postgresql://{self.config.role_name}:{password}@{host}/"
+            f"{self.config.database_name}?sslmode=require"
         )
 
         return NeonBranch(
@@ -615,19 +663,19 @@ class NeonBranchManager:
             time.sleep(poll_interval)
             waited += poll_interval
 
-    def _reset_password_and_build_connection_string(
+    def _get_password_and_build_connection_string(
         self, branch_id: str, host: str
     ) -> str:
-        """Reset role password and build connection string."""
-        password_response = _retry_on_rate_limit(
-            lambda: self._neon.role_password_reset(
+        """Get role password (without resetting) and build connection string."""
+        password = _retry_on_rate_limit(
+            lambda: _reveal_role_password(
+                api_key=self.config.api_key,
                 project_id=self.config.project_id,
                 branch_id=branch_id,
                 role_name=self.config.role_name,
             ),
-            operation_name="role_password_reset",
+            operation_name="role_password_reveal",
         )
-        password = password_response.role.password
 
         return (
             f"postgresql://{self.config.role_name}:{password}@{host}/"
@@ -1030,31 +1078,17 @@ def _create_neon_branch(
 
     host = endpoint.host
 
-    # SAFETY CHECK: Ensure we never reset password on the default/production branch
-    # This should be impossible since we just created this branch, but we check
-    # defensively to prevent catastrophic mistakes if there's ever a bug
-    default_branch_id = getattr(config, "_neon_default_branch_id", None)
-    if default_branch_id and branch.id == default_branch_id:
-        raise RuntimeError(
-            f"SAFETY CHECK FAILED: Attempted to reset password on default branch "
-            f"{branch.id}. This should never happen - the plugin creates new "
-            f"branches and should never operate on the default branch. "
-            f"Please report this bug at https://github.com/ZainRizvi/pytest-neon/issues"
-        )
-
-    # Reset password to get the password value
-    # (newly created branches don't expose password)
-    # Wrap in retry logic to handle rate limits
-    # See: https://api-docs.neon.tech/reference/api-rate-limiting
-    password_response = _retry_on_rate_limit(
-        lambda: neon.role_password_reset(
+    # Get password using reveal (not reset) to avoid invalidating existing connections
+    # See: https://api-docs.neon.tech/reference/getprojectbranchrolepassword
+    password = _retry_on_rate_limit(
+        lambda: _reveal_role_password(
+            api_key=api_key,
             project_id=project_id,
             branch_id=branch.id,
             role_name=role_name,
         ),
-        operation_name="role_password_reset",
+        operation_name="role_password_reveal",
     )
-    password = password_response.role.password
 
     # Build connection string
     connection_string = (
@@ -1170,16 +1204,10 @@ def _create_readonly_endpoint(
 
     host = endpoint.host
 
-    # Reset password to get the password value for this endpoint
-    password_response = _retry_on_rate_limit(
-        lambda: neon.role_password_reset(
-            project_id=branch.project_id,
-            branch_id=branch.branch_id,
-            role_name=role_name,
-        ),
-        operation_name="role_password_reset_readonly",
-    )
-    password = password_response.role.password
+    # Reuse the password from the parent branch's connection string.
+    # DO NOT call role_password_reset here - it would invalidate the
+    # password used by the parent branch's read_write endpoint.
+    password = _extract_password_from_connection_string(branch.connection_string)
 
     # Build connection string for the read_only endpoint
     connection_string = (

{pytest_neon-2.3.0.dist-info → pytest_neon-2.3.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pytest-neon
-Version: 2.3.0
+Version: 2.3.2
 Summary: Pytest plugin for Neon database branch isolation in tests
 Project-URL: Homepage, https://github.com/ZainRizvi/pytest-neon
 Project-URL: Repository, https://github.com/ZainRizvi/pytest-neon

pytest_neon-2.3.2.dist-info/RECORD

@@ -0,0 +1,8 @@
+pytest_neon/__init__.py,sha256=fFWOT5wYJg_WkV_FjkC8rv2YhvuyJAEHIGdsaG4c7iY,398
+pytest_neon/plugin.py,sha256=Kokmw9qvfDiuvvqJMSx3mTJ7tKHQ4GouwvE9wvHbEZ4,76270
+pytest_neon/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+pytest_neon-2.3.2.dist-info/METADATA,sha256=aY4AnACisvVnH2L1Raf5VzK4RNNMWwuU9ctmCZKI0ic,23149
+pytest_neon-2.3.2.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+pytest_neon-2.3.2.dist-info/entry_points.txt,sha256=5U88Idj_G8-PSDb9VF3OwYFbGLHnGOo_GxgYvi0dtXw,37
+pytest_neon-2.3.2.dist-info/licenses/LICENSE,sha256=aKKp_Ex4WBHTByY4BhXJ181dzB_qYhi2pCUmZ7Spn_0,1067
+pytest_neon-2.3.2.dist-info/RECORD,,

pytest_neon-2.3.0.dist-info/RECORD

@@ -1,8 +0,0 @@
-pytest_neon/__init__.py,sha256=FXdSRppBRXZYUknN1S7PKgX_m-3mNsqPn62ADFX65gg,398
-pytest_neon/plugin.py,sha256=dRW-BIGDCevZ_CQcTwCREqcUNmbLMTD-qSxU99x9FAU,75414
-pytest_neon/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-pytest_neon-2.3.0.dist-info/METADATA,sha256=EMgs_UAYwziYhbStM70pIswpsVynGF7QY9U-0OxHQFQ,23149
-pytest_neon-2.3.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-pytest_neon-2.3.0.dist-info/entry_points.txt,sha256=5U88Idj_G8-PSDb9VF3OwYFbGLHnGOo_GxgYvi0dtXw,37
-pytest_neon-2.3.0.dist-info/licenses/LICENSE,sha256=aKKp_Ex4WBHTByY4BhXJ181dzB_qYhi2pCUmZ7Spn_0,1067
-pytest_neon-2.3.0.dist-info/RECORD,,