rp_python_sdk 0.6.0__tar.gz → 0.7.0__tar.gz

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: rp_python_sdk
-Version: 0.6.0
+Version: 0.7.0
 Summary: Python SDK for Relying Parties to enable simple integration with the Digital Identity ecosystem
 License: Proprietary
 Author: Erik Pragt
@@ -423,6 +423,9 @@ poetry publish
 
 ## Release Notes
 
+### 0.7.0 (June 14, 2024)
+- Changed purpose field to allow 3 to 300 characters (up from 50)
+
 ### 0.6.0 (May 17, 2024)
 - Removed logging configuration (see [PR #11](https://github.com/connectid-tools/rp-python-sdk/pull/11))
 

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/README.md

@@ -407,6 +407,9 @@ poetry publish
 
 ## Release Notes
 
+### 0.7.0 (June 14, 2024)
+- Changed purpose field to allow 3 to 300 characters (up from 50)
+
 ### 0.6.0 (May 17, 2024)
 - Removed logging configuration (see [PR #11](https://github.com/connectid-tools/rp-python-sdk/pull/11))
 

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "rp_python_sdk"
-version = "0.6.0"
+version = "0.7.0"
 description = "Python SDK for Relying Parties to enable simple integration with the Digital Identity ecosystem"
 authors = ["Erik Pragt <erik.pragt@connectid.com.au>"]
 license = "Proprietary"

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/rp_python_sdk/endpoints/get_participants.py

@@ -1,7 +1,7 @@
-import time
 from datetime import date
 
 import requests
+
 from rp_python_sdk.filters.participant_filters import remove_out_of_date_certifications, \
     remove_unofficial_certifications, filter_for_fallback_identity_service_providers, \
     remove_participants_without_auth_servers, remove_fallback_identity_service_provider, \
@@ -14,7 +14,6 @@ from rp_python_sdk.setup_logger import logger
 
 
 def get_participants(config: SdkConfig) -> list[Participant]:
-
     participants = _retrieve_full_participants_list(config)
 
     filtered_participants = remove_fallback_identity_service_provider(participants)
@@ -30,18 +29,21 @@ def get_participants(config: SdkConfig) -> list[Participant]:
     if len(config.custom_config.required_claims) != 0:
         logger.debug(f"Identity provider list filtered for participants that support the "
                      f"following claims: {config.custom_config.required_claims}")
-        filtered_participants = filter_auth_servers_for_supported_claims(filtered_participants, config.custom_config.required_claims)
+        filtered_participants = filter_auth_servers_for_supported_claims(filtered_participants,
+                                                                         config.custom_config.required_claims)
 
     if len(config.custom_config.required_participant_certifications) != 0:
         logger.debug(f"Identity provider list filtered for participants that support the "
                      f"following certifications: {config.custom_config.required_participant_certifications}")
-        filtered_participants = filter_for_required_certifications(filtered_participants, config.custom_config.required_participant_certifications)
+        filtered_participants = filter_for_required_certifications(filtered_participants,
+                                                                   config.custom_config.required_participant_certifications)
 
     filtered_participants = remove_inactive_auth_servers(filtered_participants)
     filtered_participants = remove_participants_without_auth_servers(filtered_participants)
 
     return filtered_participants
 
+
 def retrieve_fallback_provider_participants(config: SdkConfig) -> list[Participant]:
     participants = _retrieve_full_participants_list(config)
 

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/rp_python_sdk/endpoints/pushed_authorisation_request.py

@@ -119,6 +119,9 @@ def send_pushed_authorisation_request(config: SdkConfig,
 
     log_x_fapi_interaction_id_matches(authorisation_server, "send_pushed_authorisation_request", x_fapi_interaction_id, response)
 
+    if not response.ok:
+        raise RelyingPartyClientSdkException(f"Response code for PAR to {authorisation_server_id} not successful, was: {response.status_code} x-fapi-interaction-id: {x_fapi_interaction_id}")
+
     request_uri = response.json()['request_uri']
     logger.debug(f"PAR was sent, request_uri='{request_uri}'")
 
@@ -127,8 +130,8 @@ def send_pushed_authorisation_request(config: SdkConfig,
 
 
 def _check_valid_purpose(purpose) -> None:
-    if len(purpose) < 3 or len(purpose) > 50:
-        raise RelyingPartyClientSdkException("Purpose must be between 3 and 50 characters")
+    if len(purpose) < 3 or len(purpose) > 300:
+        raise RelyingPartyClientSdkException("Purpose must be between 3 and 300 characters")
 
     illegal_chars = ["<", ">", "(", ")", "{", "}", "'", "\\"]
 

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/rp_python_sdk/endpoints/retrieve_tokens.py

@@ -25,17 +25,20 @@ def retrieve_tokens(config: SdkConfig, authorisation_server_id: str, callback_bo
 
     if issuer_metadata.issuer != callback_body.iss:
         raise RelyingPartyClientSdkException(
-            f"Issuer returned from authorization endpoint ({callback_body.iss} does not match issuer defined in authorization server well-known ({issuer_metadata.issuer})")
+            f"Issuer returned from authorization endpoint ({callback_body.iss} does not match issuer defined "
+            f"in authorization server well-known ({issuer_metadata.issuer})")
 
     x_fapi_interaction_id = create_x_fapi_interaction_id()
     logger.info(
-        f"Retrieving token response from authorisation server: {authorisation_server_id} - {authorisation_server.customer_friendly_name}, x-fapi-interaction-id: {x_fapi_interaction_id}")
+        f"Retrieving token response from authorisation server: {authorisation_server_id} - "
+        f"{authorisation_server.customer_friendly_name}, x-fapi-interaction-id: {x_fapi_interaction_id}")
 
     token_endpoint = issuer_metadata.get_preferred_token_endpoint()
 
     if callback_body.state != original_state:
         raise RelyingPartyClientSdkException(
-            f"Callback response state value does not match state, callback state: {callback_body.state}, state {original_state}, x-fapi-interaction-id: {x_fapi_interaction_id}")
+            f"Callback response state value does not match state, callback state: {callback_body.state}, "
+            f"state {original_state}, x-fapi-interaction-id: {x_fapi_interaction_id}")
 
     if callback_body.iss != issuer_metadata.issuer:
         raise RelyingPartyClientSdkException(
@@ -86,6 +89,11 @@ def retrieve_tokens(config: SdkConfig, authorisation_server_id: str, callback_bo
 
     log_x_fapi_interaction_id_matches(authorisation_server, "retrieve_tokens", x_fapi_interaction_id, response)
 
+    if not response.ok:
+        raise RelyingPartyClientSdkException(
+            f"Response code for token endpoint to {token_endpoint} not successful, was: {response.status_code}, "
+            f"x-fapi-interaction-id: {x_fapi_interaction_id}, response body: " + response.text)
+
     token_input = TokenInput.from_json(response.text)
 
     jwks_response_body = _get_jwks_json(issuer_metadata, x_fapi_interaction_id)
@@ -99,7 +107,8 @@ def retrieve_tokens(config: SdkConfig, authorisation_server_id: str, callback_bo
         call_user_info(config, authorisation_server_id, token_set.token_input.access_token)
 
     logger.info(
-        f"Token response successfully retrieved from authorisation server {authorisation_server_id}, x-fapi-interaction-id: {x_fapi_interaction_id}, txn: {token_set.claims['txn']}")
+        f"Token response successfully retrieved from authorisation server {authorisation_server_id}, "
+        f"x-fapi-interaction-id: {x_fapi_interaction_id}, txn: {token_set.claims['txn']}")
 
     return token_set
 
@@ -167,7 +176,8 @@ def _validate_payload(json_payload: dict[str, Any], nonce: str, callback_body: C
     # Check the iss claim is valid
     if json_payload['iss'] != callback_body.iss:
         raise RelyingPartyClientSdkException(
-            f'iss claim in token response "{json_payload["iss"]}" does not match the expected value of "{callback_body.iss}"')
+            f'iss claim in token response "{json_payload["iss"]}" does not match '
+            f'the expected value of "{callback_body.iss}"')
 
     # Extract aud claim from either list or string
     if isinstance(json_payload['aud'], list):
@@ -207,7 +217,8 @@ def _validate_header(json_header, jwks, allowed_algs, id_token: str) -> None:
 
     if jwk is None:
         raise RelyingPartyClientSdkException(
-            f"kid provided does not match any key in the jwks for specified algorithm in token header: {json_header['alg']}")
+            f"kid provided does not match any key in the jwks for specified algorithm in "
+            f"token header: {json_header['alg']}")
 
     found_alg = any(alg.lower() == json_header['alg'].lower() for alg in allowed_algs)
     if not found_alg:
@@ -243,12 +254,9 @@ def _get_jwks_json(issuer_metadata: IssuerMetadata, x_fapi_interaction_id: str)
     response = requests.get(issuer_metadata.jwks_uri, headers=headers)
     response.raise_for_status()
 
-    if not _is_success(response):
+    if not response.ok:
         raise RelyingPartyClientSdkException(
-            f"Response code for JWKS to {issuer_metadata.jwks_uri} not successful, was: {response.status_code}, x-fapi-interaction-id: {x_fapi_interaction_id}, response body: {response.text}")
+            f"Response code for JWKS to {issuer_metadata.jwks_uri} not successful, was: {response.status_code}, "
+            f"x-fapi-interaction-id: {x_fapi_interaction_id}, response body: {response.text}")
 
     return response.json()
-
-
-def _is_success(response: requests.Response):
-    return 200 <= response.status_code < 300

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/rp_python_sdk/model.py

@@ -125,13 +125,21 @@ class IssuerMetadata(JSONWizard):
     mtls_endpoint_aliases: MtlsEndpointAliases
 
     def get_preferred_token_endpoint(self) -> str:
-        return self.mtls_endpoint_aliases.token_endpoint if self.mtls_endpoint_aliases.token_endpoint else self.token_endpoint
+        return self.mtls_endpoint_aliases.token_endpoint \
+            if self.mtls_endpoint_aliases.token_endpoint \
+            else self.token_endpoint
 
     def get_preferred_pushed_authorization_request_endpoint(self) -> str:
-        return self.mtls_endpoint_aliases.pushed_authorization_request_endpoint if self.mtls_endpoint_aliases.pushed_authorization_request_endpoint else self.pushed_authorization_request_endpoint
+        return self.mtls_endpoint_aliases.pushed_authorization_request_endpoint \
+            if self.mtls_endpoint_aliases.pushed_authorization_request_endpoint \
+            else self.pushed_authorization_request_endpoint
 
     def get_preferred_authorization_endpoint(self) -> str:
-        return self.mtls_endpoint_aliases.authorization_endpoint if self.mtls_endpoint_aliases.authorization_endpoint else self.authorization_endpoint
+        return self.mtls_endpoint_aliases.authorization_endpoint \
+            if self.mtls_endpoint_aliases.authorization_endpoint \
+            else self.authorization_endpoint
 
     def get_preferred_userinfo_endpoint(self) -> str:
-        return self.mtls_endpoint_aliases.userinfo_endpoint if self.mtls_endpoint_aliases.userinfo_endpoint else self.userinfo_endpoint
+        return self.mtls_endpoint_aliases.userinfo_endpoint \
+            if self.mtls_endpoint_aliases.userinfo_endpoint\
+            else self.userinfo_endpoint

{rp_python_sdk-0.6.0 → rp_python_sdk-0.7.0}/rp_python_sdk/sdk_config.py

@@ -30,10 +30,12 @@ class CustomConfig:
         else:
             if self.required_claims:
                 logger.info(
-                    f"Identity provider list will be filtered for participants that support the following claims: {self.required_claims}")
+                    f"Identity provider list will be filtered for participants "
+                    f"that support the following claims: {self.required_claims}")
             if self.required_participant_certifications:
                 logger.info(
-                    f"Identity provider list will be filtered for participants that support the following certifications: {self.required_participant_certifications}")
+                    f"Identity provider list will be filtered for participants "
+                    f"that support the following certifications: {self.required_participant_certifications}")
 
 
 @dataclass