scim2-models 0.3.6__py3-none-any.whl → 0.4.0__py3-none-any.whl

scim2_models/__init__.py

@@ -1,56 +1,56 @@
+from .annotations import CaseExact
+from .annotations import Mutability
+from .annotations import Required
+from .annotations import Returned
+from .annotations import Uniqueness
+from .attributes import ComplexAttribute
+from .attributes import MultiValuedComplexAttribute
 from .base import BaseModel
-from .base import CaseExact
-from .base import ComplexAttribute
-from .base import Context
-from .base import ExternalReference
-from .base import MultiValuedComplexAttribute
-from .base import Mutability
-from .base import Reference
-from .base import Required
-from .base import Returned
-from .base import Uniqueness
-from .base import URIReference
-from .rfc7643.enterprise_user import EnterpriseUser
-from .rfc7643.enterprise_user import Manager
-from .rfc7643.group import Group
-from .rfc7643.group import GroupMember
-from .rfc7643.resource import AnyExtension
-from .rfc7643.resource import AnyResource
-from .rfc7643.resource import Extension
-from .rfc7643.resource import Meta
-from .rfc7643.resource import Resource
-from .rfc7643.resource_type import ResourceType
-from .rfc7643.resource_type import SchemaExtension
-from .rfc7643.schema import Attribute
-from .rfc7643.schema import Schema
-from .rfc7643.service_provider_config import AuthenticationScheme
-from .rfc7643.service_provider_config import Bulk
-from .rfc7643.service_provider_config import ChangePassword
-from .rfc7643.service_provider_config import ETag
-from .rfc7643.service_provider_config import Filter
-from .rfc7643.service_provider_config import Patch
-from .rfc7643.service_provider_config import ServiceProviderConfig
-from .rfc7643.service_provider_config import Sort
-from .rfc7643.user import Address
-from .rfc7643.user import Email
-from .rfc7643.user import Entitlement
-from .rfc7643.user import GroupMembership
-from .rfc7643.user import Im
-from .rfc7643.user import Name
-from .rfc7643.user import PhoneNumber
-from .rfc7643.user import Photo
-from .rfc7643.user import Role
-from .rfc7643.user import User
-from .rfc7643.user import X509Certificate
-from .rfc7644.bulk import BulkOperation
-from .rfc7644.bulk import BulkRequest
-from .rfc7644.bulk import BulkResponse
-from .rfc7644.error import Error
-from .rfc7644.list_response import ListResponse
-from .rfc7644.message import Message
-from .rfc7644.patch_op import PatchOp
-from .rfc7644.patch_op import PatchOperation
-from .rfc7644.search_request import SearchRequest
+from .context import Context
+from .messages.bulk import BulkOperation
+from .messages.bulk import BulkRequest
+from .messages.bulk import BulkResponse
+from .messages.error import Error
+from .messages.list_response import ListResponse
+from .messages.message import Message
+from .messages.patch_op import PatchOp
+from .messages.patch_op import PatchOperation
+from .messages.search_request import SearchRequest
+from .reference import ExternalReference
+from .reference import Reference
+from .reference import URIReference
+from .resources.enterprise_user import EnterpriseUser
+from .resources.enterprise_user import Manager
+from .resources.group import Group
+from .resources.group import GroupMember
+from .resources.resource import AnyExtension
+from .resources.resource import AnyResource
+from .resources.resource import Extension
+from .resources.resource import Meta
+from .resources.resource import Resource
+from .resources.resource_type import ResourceType
+from .resources.resource_type import SchemaExtension
+from .resources.schema import Attribute
+from .resources.schema import Schema
+from .resources.service_provider_config import AuthenticationScheme
+from .resources.service_provider_config import Bulk
+from .resources.service_provider_config import ChangePassword
+from .resources.service_provider_config import ETag
+from .resources.service_provider_config import Filter
+from .resources.service_provider_config import Patch
+from .resources.service_provider_config import ServiceProviderConfig
+from .resources.service_provider_config import Sort
+from .resources.user import Address
+from .resources.user import Email
+from .resources.user import Entitlement
+from .resources.user import GroupMembership
+from .resources.user import Im
+from .resources.user import Name
+from .resources.user import PhoneNumber
+from .resources.user import Photo
+from .resources.user import Role
+from .resources.user import User
+from .resources.user import X509Certificate
 
 __all__ = [
     "Address",

scim2_models/annotations.py

@@ -0,0 +1,104 @@
+from enum import Enum
+
+
+class Mutability(str, Enum):
+    """A single keyword indicating the circumstances under which the value of the attribute can be (re)defined."""
+
+    read_only = "readOnly"
+    """The attribute SHALL NOT be modified."""
+
+    read_write = "readWrite"
+    """The attribute MAY be updated and read at any time."""
+
+    immutable = "immutable"
+    """The attribute MAY be defined at resource creation (e.g., POST) or at
+    record replacement via a request (e.g., a PUT).
+
+    The attribute SHALL NOT be updated.
+    """
+
+    write_only = "writeOnly"
+    """The attribute MAY be updated at any time.
+
+    Attribute values SHALL NOT be returned (e.g., because the value is a
+    stored hash).  Note: An attribute with a mutability of "writeOnly"
+    usually also has a returned setting of "never".
+    """
+
+    _default = read_write
+
+
+class Returned(str, Enum):
+    """A single keyword that indicates when an attribute and associated values are returned in response to a GET request or in response to a PUT, POST, or PATCH request."""
+
+    always = "always"  # cannot be excluded
+    """The attribute is always returned, regardless of the contents of the
+    "attributes" parameter.
+
+    For example, "id" is always returned to identify a SCIM resource.
+    """
+
+    never = "never"  # always excluded
+    """The attribute is never returned, regardless of the contents of the
+    "attributes" parameter."""
+
+    default = "default"  # included by default but can be excluded
+    """The attribute is returned by default in all SCIM operation responses
+    where attribute values are returned, unless it is explicitly excluded."""
+
+    request = "request"  # excluded by default but can be included
+    """The attribute is returned in response to any PUT, POST, or PATCH
+    operations if specified in the "attributes" parameter."""
+
+    _default = default
+
+
+class Uniqueness(str, Enum):
+    """A single keyword value that specifies how the service provider enforces uniqueness of attribute values."""
+
+    none = "none"
+    """The values are not intended to be unique in any way."""
+
+    server = "server"
+    """The value SHOULD be unique within the context of the current SCIM
+    endpoint (or tenancy) and MAY be globally unique (e.g., a "username", email
+    address, or other server-generated key or counter).
+
+    No two resources on the same server SHOULD possess the same value.
+    """
+
+    global_ = "global"
+    """The value SHOULD be globally unique (e.g., an email address, a GUID, or
+    other value).
+
+    No two resources on any server SHOULD possess the same value.
+    """
+
+    _default = none
+
+
+class Required(Enum):
+    """A Boolean value that specifies whether the attribute is required or not.
+
+    Missing required attributes raise a :class:`~pydantic.ValidationError` on :attr:`~scim2_models.Context.RESOURCE_CREATION_REQUEST` and :attr:`~scim2_models.Context.RESOURCE_REPLACEMENT_REQUEST` validations.
+    """
+
+    true = True
+    false = False
+
+    _default = false
+
+    def __bool__(self) -> bool:
+        return self.value
+
+
+class CaseExact(Enum):
+    """A Boolean value that specifies whether a string attribute is case- sensitive or not."""
+
+    true = True
+    false = False
+
+    _default = false
+
+    def __bool__(self) -> bool:
+        return self.value

scim2_models/attributes.py

@@ -0,0 +1,57 @@
+from inspect import isclass
+from typing import Annotated
+from typing import Any
+from typing import Optional
+from typing import get_origin
+
+from pydantic import Field
+
+from .annotations import Mutability
+
+# This import will work because we'll import this module after BaseModel is defined
+from .base import BaseModel
+from .reference import Reference
+
+
+class ComplexAttribute(BaseModel):
+    """A complex attribute as defined in :rfc:`RFC7643 §2.3.8 <7643#section-2.3.8>`."""
+
+    _attribute_urn: Optional[str] = None
+
+    def get_attribute_urn(self, field_name: str) -> str:
+        """Build the full URN of the attribute.
+
+        See :rfc:`RFC7644 §3.10 <7644#section-3.10>`.
+        """
+        alias = (
+            self.__class__.model_fields[field_name].serialization_alias or field_name
+        )
+        return f"{self._attribute_urn}.{alias}"
+
+
+class MultiValuedComplexAttribute(ComplexAttribute):
+    type: Optional[str] = None
+    """A label indicating the attribute's function."""
+
+    primary: Optional[bool] = None
+    """A Boolean value indicating the 'primary' or preferred attribute value
+    for this attribute."""
+
+    display: Annotated[Optional[str], Mutability.immutable] = None
+    """A human-readable name, primarily used for display purposes."""
+
+    value: Optional[Any] = None
+    """The value of an entitlement."""
+
+    ref: Optional[Reference] = Field(None, serialization_alias="$ref")
+    """The reference URI of a target resource, if the attribute is a
+    reference."""
+
+
+def is_complex_attribute(type_: type) -> bool:
+    # issubclass raise a TypeError with 'Reference' on python < 3.11
+    return (
+        get_origin(type_) != Reference
+        and isclass(type_)
+        and issubclass(type_, (ComplexAttribute, MultiValuedComplexAttribute))
+    )