scim2-models 0.4.2__tar.gz → 0.5.0__tar.gz

scim2_models-0.5.0/PKG-INFO

@@ -0,0 +1,280 @@
+Metadata-Version: 2.3
+Name: scim2-models
+Version: 0.5.0
+Summary: SCIM2 models serialization and validation with pydantic
+Keywords: scim,scim2,provisioning,pydantic,rfc7643,rfc7644
+Author: Yaal Coop
+Author-email: Yaal Coop <contact@yaal.coop>
+License:                                  Apache License
+                                    Version 2.0, January 2004
+                                 http://www.apache.org/licenses/
+         
+            TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+         
+            1. Definitions.
+         
+               "License" shall mean the terms and conditions for use, reproduction,
+               and distribution as defined by Sections 1 through 9 of this document.
+         
+               "Licensor" shall mean the copyright owner or entity authorized by
+               the copyright owner that is granting the License.
+         
+               "Legal Entity" shall mean the union of the acting entity and all
+               other entities that control, are controlled by, or are under common
+               control with that entity. For the purposes of this definition,
+               "control" means (i) the power, direct or indirect, to cause the
+               direction or management of such entity, whether by contract or
+               otherwise, or (ii) ownership of fifty percent (50%) or more of the
+               outstanding shares, or (iii) beneficial ownership of such entity.
+         
+               "You" (or "Your") shall mean an individual or Legal Entity
+               exercising permissions granted by this License.
+         
+               "Source" form shall mean the preferred form for making modifications,
+               including but not limited to software source code, documentation
+               source, and configuration files.
+         
+               "Object" form shall mean any form resulting from mechanical
+               transformation or translation of a Source form, including but
+               not limited to compiled object code, generated documentation,
+               and conversions to other media types.
+         
+               "Work" shall mean the work of authorship, whether in Source or
+               Object form, made available under the License, as indicated by a
+               copyright notice that is included in or attached to the work
+               (an example is provided in the Appendix below).
+         
+               "Derivative Works" shall mean any work, whether in Source or Object
+               form, that is based on (or derived from) the Work and for which the
+               editorial revisions, annotations, elaborations, or other modifications
+               represent, as a whole, an original work of authorship. For the purposes
+               of this License, Derivative Works shall not include works that remain
+               separable from, or merely link (or bind by name) to the interfaces of,
+               the Work and Derivative Works thereof.
+         
+               "Contribution" shall mean any work of authorship, including
+               the original version of the Work and any modifications or additions
+               to that Work or Derivative Works thereof, that is intentionally
+               submitted to Licensor for inclusion in the Work by the copyright owner
+               or by an individual or Legal Entity authorized to submit on behalf of
+               the copyright owner. For the purposes of this definition, "submitted"
+               means any form of electronic, verbal, or written communication sent
+               to the Licensor or its representatives, including but not limited to
+               communication on electronic mailing lists, source code control systems,
+               and issue tracking systems that are managed by, or on behalf of, the
+               Licensor for the purpose of discussing and improving the Work, but
+               excluding communication that is conspicuously marked or otherwise
+               designated in writing by the copyright owner as "Not a Contribution."
+         
+               "Contributor" shall mean Licensor and any individual or Legal Entity
+               on behalf of whom a Contribution has been received by Licensor and
+               subsequently incorporated within the Work.
+         
+            2. Grant of Copyright License. Subject to the terms and conditions of
+               this License, each Contributor hereby grants to You a perpetual,
+               worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+               copyright license to reproduce, prepare Derivative Works of,
+               publicly display, publicly perform, sublicense, and distribute the
+               Work and such Derivative Works in Source or Object form.
+         
+            3. Grant of Patent License. Subject to the terms and conditions of
+               this License, each Contributor hereby grants to You a perpetual,
+               worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+               (except as stated in this section) patent license to make, have made,
+               use, offer to sell, sell, import, and otherwise transfer the Work,
+               where such license applies only to those patent claims licensable
+               by such Contributor that are necessarily infringed by their
+               Contribution(s) alone or by combination of their Contribution(s)
+               with the Work to which such Contribution(s) was submitted. If You
+               institute patent litigation against any entity (including a
+               cross-claim or counterclaim in a lawsuit) alleging that the Work
+               or a Contribution incorporated within the Work constitutes direct
+               or contributory patent infringement, then any patent licenses
+               granted to You under this License for that Work shall terminate
+               as of the date such litigation is filed.
+         
+            4. Redistribution. You may reproduce and distribute copies of the
+               Work or Derivative Works thereof in any medium, with or without
+               modifications, and in Source or Object form, provided that You
+               meet the following conditions:
+         
+               (a) You must give any other recipients of the Work or
+                   Derivative Works a copy of this License; and
+         
+               (b) You must cause any modified files to carry prominent notices
+                   stating that You changed the files; and
+         
+               (c) You must retain, in the Source form of any Derivative Works
+                   that You distribute, all copyright, patent, trademark, and
+                   attribution notices from the Source form of the Work,
+                   excluding those notices that do not pertain to any part of
+                   the Derivative Works; and
+         
+               (d) If the Work includes a "NOTICE" text file as part of its
+                   distribution, then any Derivative Works that You distribute must
+                   include a readable copy of the attribution notices contained
+                   within such NOTICE file, excluding those notices that do not
+                   pertain to any part of the Derivative Works, in at least one
+                   of the following places: within a NOTICE text file distributed
+                   as part of the Derivative Works; within the Source form or
+                   documentation, if provided along with the Derivative Works; or,
+                   within a display generated by the Derivative Works, if and
+                   wherever such third-party notices normally appear. The contents
+                   of the NOTICE file are for informational purposes only and
+                   do not modify the License. You may add Your own attribution
+                   notices within Derivative Works that You distribute, alongside
+                   or as an addendum to the NOTICE text from the Work, provided
+                   that such additional attribution notices cannot be construed
+                   as modifying the License.
+         
+               You may add Your own copyright statement to Your modifications and
+               may provide additional or different license terms and conditions
+               for use, reproduction, or distribution of Your modifications, or
+               for any such Derivative Works as a whole, provided Your use,
+               reproduction, and distribution of the Work otherwise complies with
+               the conditions stated in this License.
+         
+            5. Submission of Contributions. Unless You explicitly state otherwise,
+               any Contribution intentionally submitted for inclusion in the Work
+               by You to the Licensor shall be under the terms and conditions of
+               this License, without any additional terms or conditions.
+               Notwithstanding the above, nothing herein shall supersede or modify
+               the terms of any separate license agreement you may have executed
+               with Licensor regarding such Contributions.
+         
+            6. Trademarks. This License does not grant permission to use the trade
+               names, trademarks, service marks, or product names of the Licensor,
+               except as required for reasonable and customary use in describing the
+               origin of the Work and reproducing the content of the NOTICE file.
+         
+            7. Disclaimer of Warranty. Unless required by applicable law or
+               agreed to in writing, Licensor provides the Work (and each
+               Contributor provides its Contributions) on an "AS IS" BASIS,
+               WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+               implied, including, without limitation, any warranties or conditions
+               of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+               PARTICULAR PURPOSE. You are solely responsible for determining the
+               appropriateness of using or redistributing the Work and assume any
+               risks associated with Your exercise of permissions under this License.
+         
+            8. Limitation of Liability. In no event and under no legal theory,
+               whether in tort (including negligence), contract, or otherwise,
+               unless required by applicable law (such as deliberate and grossly
+               negligent acts) or agreed to in writing, shall any Contributor be
+               liable to You for damages, including any direct, indirect, special,
+               incidental, or consequential damages of any character arising as a
+               result of this License or out of the use or inability to use the
+               Work (including but not limited to damages for loss of goodwill,
+               work stoppage, computer failure or malfunction, or any and all
+               other commercial damages or losses), even if such Contributor
+               has been advised of the possibility of such damages.
+         
+            9. Accepting Warranty or Additional Liability. While redistributing
+               the Work or Derivative Works thereof, You may choose to offer,
+               and charge a fee for, acceptance of support, warranty, indemnity,
+               or other liability obligations and/or rights consistent with this
+               License. However, in accepting such obligations, You may act only
+               on Your own behalf and on Your sole responsibility, not on behalf
+               of any other Contributor, and only if You agree to indemnify,
+               defend, and hold each Contributor harmless for any liability
+               incurred by, or claims asserted against, such Contributor by reason
+               of your accepting any such warranty or additional liability.
+         
+            END OF TERMS AND CONDITIONS
+         
+            APPENDIX: How to apply the Apache License to your work.
+         
+               To apply the Apache License to your work, attach the following
+               boilerplate notice, with the fields enclosed by brackets "[]"
+               replaced with your own identifying information. (Don't include
+               the brackets!)  The text should be enclosed in the appropriate
+               comment syntax for the file format. We also recommend that a
+               file or class name and description of purpose be included on the
+               same "printed page" as the copyright notice for easier
+               identification within third-party archives.
+         
+            Copyright [yyyy] [name of copyright owner]
+         
+            Licensed under the Apache License, Version 2.0 (the "License");
+            you may not use this file except in compliance with the License.
+            You may obtain a copy of the License at
+         
+                http://www.apache.org/licenses/LICENSE-2.0
+         
+            Unless required by applicable law or agreed to in writing, software
+            distributed under the License is distributed on an "AS IS" BASIS,
+            WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+            See the License for the specific language governing permissions and
+            limitations under the License.
+Classifier: Intended Audience :: Developers
+Classifier: Development Status :: 3 - Alpha
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Environment :: Web Environment
+Classifier: Programming Language :: Python
+Classifier: Operating System :: OS Independent
+Requires-Dist: pydantic[email]>=2.7.0
+Requires-Python: >=3.9
+Project-URL: changelog, https://scim2-models.readthedocs.io/en/latest/changelog.html
+Project-URL: documentation, https://scim2-models.readthedocs.io
+Project-URL: funding, https://github.com/sponsors/python-scim
+Project-URL: repository, https://github.com/python-scim/scim2-models
+Description-Content-Type: text/markdown
+
+# scim2-models
+
+[Pydantic](https://docs.pydantic.dev) models for SCIM schemas defined in [RFC7643](https://datatracker.ietf.org/doc/html/rfc7643.html) and [RFC7644](https://datatracker.ietf.org/doc/html/rfc7644.html).
+
+This library provides utilities to parse and produce SCIM2 payloads, and handle them with native Python objects.
+It aims to be used as a basis to build SCIM2 servers and clients.
+
+## What's SCIM anyway?
+
+SCIM stands for System for Cross-domain Identity Management, and it is a provisioning protocol.
+Provisioning is the action of managing a set of resources across different services, usually users and groups.
+SCIM is often used between Identity Providers and applications in completion of standards like OAuth2 and OpenID Connect.
+It allows users and groups creations, modifications and deletions to be synchronized between applications.
+
+## Installation
+
+```shell
+pip install scim2-models
+```
+
+## Usage
+
+Check the [tutorial](https://scim2-models.readthedocs.io/en/latest/tutorial.html) and the [reference](https://scim2-models.readthedocs.io/en/latest/reference.html) for more details.
+
+```python
+from scim2_models import User
+import datetime
+
+payload = {
+    "schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
+    "id": "2819c223-7f76-453a-919d-413861904646",
+    "userName": "bjensen@example.com",
+    "meta": {
+        "resourceType": "User",
+        "created": "2010-01-23T04:56:22Z",
+        "lastModified": "2011-05-13T04:42:34Z",
+        "version": 'W\\/"3694e05e9dff590"',
+        "location": "https://example.com/v2/Users/2819c223-7f76-453a-919d-413861904646",
+    },
+}
+
+user = User.model_validate(payload)
+assert user.user_name == "bjensen@example.com"
+assert user.meta.created == datetime.datetime(
+    2010, 1, 23, 4, 56, 22, tzinfo=datetime.timezone.utc
+)
+```
+
+scim2-models belongs in a collection of SCIM tools developed by [Yaal Coop](https://yaal.coop),
+with [scim2-client](https://github.com/python-scim/scim2-client),
+[scim2-tester](https://github.com/python-scim/scim2-tester) and
+[scim2-cli](https://github.com/python-scim/scim2-cli)

{scim2_models-0.4.2 → scim2_models-0.5.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [build-system]
-requires = ["hatchling"]
-build-backend = "hatchling.build"
+requires = ["uv_build>=0.8.9,<0.9.0"]
+build-backend = "uv_build"
 
 [project]
 name = "scim2-models"
-version = "0.4.2"
+version = "0.5.0"
 description = "SCIM2 models serialization and validation with pydantic"
 authors = [{name="Yaal Coop", email="contact@yaal.coop"}]
 license = {file = "LICENSE"}
@@ -36,6 +36,9 @@ repository = "https://github.com/python-scim/scim2-models"
 changelog = "https://scim2-models.readthedocs.io/en/latest/changelog.html"
 funding = "https://github.com/sponsors/python-scim"
 
+[tool.uv.build-backend]
+module-root = ""
+
 [dependency-groups]
 dev = [
     "mypy>=1.13.0",
@@ -152,6 +155,7 @@ commands = [
 [tool.tox.env.minversions]
 runner = "uv-venv-runner"
 uv_resolution = "lowest-direct"
+base_python = ["3.10"]
 
 [tool.tox.env.doc]
 dependency_groups = ["doc"]

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/attributes.py

@@ -53,5 +53,5 @@ def is_complex_attribute(type_: type) -> bool:
     return (
         get_origin(type_) != Reference
         and isclass(type_)
-        and issubclass(type_, (ComplexAttribute, MultiValuedComplexAttribute))
+        and issubclass(type_, ComplexAttribute)
     )

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/messages/patch_op.py

@@ -22,6 +22,7 @@ from ..resources.resource import Resource
 from ..urn import _resolve_path_to_target
 from ..utils import _extract_field_name
 from ..utils import _find_field_name
+from ..utils import _get_path_parts
 from ..utils import _validate_scim_path_syntax
 from .error import Error
 from .message import Message
@@ -217,12 +218,17 @@ class PatchOp(Message, Generic[T]):
     "Operations", whose value is an array of one or more PATCH operations."""
 
     @model_validator(mode="after")
-    def validate_operations(self) -> Self:
+    def validate_operations(self, info: ValidationInfo) -> Self:
         """Validate operations against resource type metadata if available.
 
         When PatchOp is used with a specific resource type (e.g., PatchOp[User]),
         this validator will automatically check mutability and required constraints.
         """
+        # RFC 7644: The body of an HTTP PATCH request MUST contain the attribute "Operations"
+        scim_ctx = info.context.get("scim") if info.context else None
+        if scim_ctx == Context.RESOURCE_PATCH_REQUEST and self.operations is None:
+            raise ValueError(Error.make_invalid_value_error().detail)
+
         resource_class = _get_resource_class(self)
         if resource_class is None or not self.operations:
             return self
@@ -334,10 +340,19 @@ class PatchOp(Message, Generic[T]):
         """Set a value at a specific path."""
         target, attr_path = _resolve_path_to_target(resource, path)
 
-        if not attr_path or not target:
+        if not target:
             raise ValueError(Error.make_invalid_path_error().detail)
 
-        path_parts = attr_path.split(".")
+        if not attr_path:
+            if not isinstance(value, dict):
+                raise ValueError(Error.make_invalid_path_error().detail)
+
+            updated_data = {**target.model_dump(), **value}
+            updated_target = type(target).model_validate(updated_data)
+            target.__dict__.update(updated_target.__dict__)
+            return True
+
+        path_parts = _get_path_parts(attr_path)
         if len(path_parts) == 1:
             return cls._set_simple_attribute(target, path_parts[0], value, is_add)
 
@@ -462,7 +477,7 @@ class PatchOp(Message, Generic[T]):
         if not attr_path or not target:
             raise ValueError(Error.make_invalid_path_error().detail)
 
-        parent_attr, *path_parts = attr_path.split(".")
+        parent_attr, *path_parts = _get_path_parts(attr_path)
         field_name = _find_field_name(type(target), parent_attr)
         if not field_name:
             raise ValueError(Error.make_no_target_error().detail)

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/resources/group.py

@@ -10,12 +10,11 @@ from pydantic import Field
 from ..annotations import Mutability
 from ..annotations import Required
 from ..attributes import ComplexAttribute
-from ..attributes import MultiValuedComplexAttribute
 from ..reference import Reference
 from .resource import Resource
 
 
-class GroupMember(MultiValuedComplexAttribute):
+class GroupMember(ComplexAttribute):
     value: Annotated[Optional[str], Mutability.immutable] = None
     """Identifier of the member of this Group."""
 

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/resources/resource.py

@@ -22,7 +22,6 @@ from ..annotations import Required
 from ..annotations import Returned
 from ..annotations import Uniqueness
 from ..attributes import ComplexAttribute
-from ..attributes import MultiValuedComplexAttribute
 from ..attributes import is_complex_attribute
 from ..base import BaseModel
 from ..context import Context
@@ -437,10 +436,7 @@ def _model_attribute_to_scim_attribute(
     sub_attributes = (
         [
             _model_attribute_to_scim_attribute(root_type, sub_attribute_name)
-            for sub_attribute_name in _dedicated_attributes(
-                root_type,
-                [MultiValuedComplexAttribute],
-            )
+            for sub_attribute_name in root_type.model_fields  # type: ignore
             if (
                 attribute_name != "sub_attributes"
                 or sub_attribute_name != "sub_attributes"

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/resources/schema.py

@@ -23,7 +23,6 @@ from ..annotations import Required
 from ..annotations import Returned
 from ..annotations import Uniqueness
 from ..attributes import ComplexAttribute
-from ..attributes import MultiValuedComplexAttribute
 from ..attributes import is_complex_attribute
 from ..base import BaseModel
 from ..constants import RESERVED_WORDS
@@ -49,7 +48,6 @@ def _make_python_identifier(identifier: str) -> str:
 def _make_python_model(
     obj: Union["Schema", "Attribute"],
     base: type[T],
-    multiple: bool = False,
 ) -> type[T]:
     """Build a Python model from a Schema or an Attribute object."""
     if isinstance(obj, Attribute):
@@ -99,7 +97,6 @@ class Attribute(ComplexAttribute):
 
         def _to_python(
             self,
-            multiple: bool = False,
             reference_types: Optional[list[str]] = None,
         ) -> type:
             if self.value == self.reference and reference_types is not None:
@@ -119,9 +116,7 @@ class Attribute(ComplexAttribute):
                 self.integer: int,
                 self.date_time: datetime,
                 self.binary: Base64Bytes,
-                self.complex: MultiValuedComplexAttribute
-                if multiple
-                else ComplexAttribute,
+                self.complex: ComplexAttribute,
             }
             return attr_types[self.value]
 
@@ -215,12 +210,10 @@ class Attribute(ComplexAttribute):
         if not self.name or not self.type:
             return None
 
-        attr_type = self.type._to_python(bool(self.multi_valued), self.reference_types)
+        attr_type = self.type._to_python(self.reference_types)
 
-        if attr_type in (ComplexAttribute, MultiValuedComplexAttribute):
-            attr_type = _make_python_model(
-                obj=self, base=attr_type, multiple=bool(self.multi_valued)
-            )
+        if attr_type == ComplexAttribute:
+            attr_type = _make_python_model(obj=self, base=attr_type)
 
         if self.multi_valued:
             attr_type = list[attr_type]  # type: ignore

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/resources/service_provider_config.py

@@ -38,7 +38,7 @@ class Filter(ComplexAttribute):
     """A Boolean value specifying whether or not the operation is supported."""
 
     max_results: Annotated[Optional[int], Mutability.read_only, Required.true] = None
-    """A Boolean value specifying whether or not the operation is supported."""
+    """An integer value specifying the maximum number of resources returned in a response."""
 
 
 class ChangePassword(ComplexAttribute):
@@ -66,7 +66,7 @@ class AuthenticationScheme(ComplexAttribute):
 
     type: Annotated[Optional[Type], Mutability.read_only, Required.true] = Field(
         None,
-        examples=["oauth", "oauth2", "oauthbreakertoken", "httpbasic", "httpdigest"],
+        examples=["oauth", "oauth2", "oauthbearertoken", "httpbasic", "httpdigest"],
     )
     """The authentication scheme."""
 

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/resources/user.py

@@ -14,7 +14,6 @@ from ..annotations import Required
 from ..annotations import Returned
 from ..annotations import Uniqueness
 from ..attributes import ComplexAttribute
-from ..attributes import MultiValuedComplexAttribute
 from ..reference import ExternalReference
 from ..reference import Reference
 from ..utils import Base64Bytes
@@ -48,7 +47,7 @@ class Name(ComplexAttribute):
     languages (e.g., 'III' given the full name 'Ms. Barbara J Jensen, III')."""
 
 
-class Email(MultiValuedComplexAttribute):
+class Email(ComplexAttribute):
     class Type(str, Enum):
         work = "work"
         home = "home"
@@ -69,7 +68,7 @@ class Email(MultiValuedComplexAttribute):
     address."""
 
 
-class PhoneNumber(MultiValuedComplexAttribute):
+class PhoneNumber(ComplexAttribute):
     class Type(str, Enum):
         work = "work"
         home = "home"
@@ -96,7 +95,7 @@ class PhoneNumber(MultiValuedComplexAttribute):
     number."""
 
 
-class Im(MultiValuedComplexAttribute):
+class Im(ComplexAttribute):
     class Type(str, Enum):
         aim = "aim"
         gtalk = "gtalk"
@@ -124,7 +123,7 @@ class Im(MultiValuedComplexAttribute):
     for this attribute, e.g., the preferred messenger or primary messenger."""
 
 
-class Photo(MultiValuedComplexAttribute):
+class Photo(ComplexAttribute):
     class Type(str, Enum):
         photo = "photo"
         thumbnail = "thumbnail"
@@ -144,7 +143,7 @@ class Photo(MultiValuedComplexAttribute):
     for this attribute, e.g., the preferred photo or thumbnail."""
 
 
-class Address(MultiValuedComplexAttribute):
+class Address(ComplexAttribute):
     class Type(str, Enum):
         work = "work"
         home = "home"
@@ -181,11 +180,22 @@ class Address(MultiValuedComplexAttribute):
     for this attribute, e.g., the preferred photo or thumbnail."""
 
 
-class Entitlement(MultiValuedComplexAttribute):
-    pass
+class Entitlement(ComplexAttribute):
+    value: Optional[str] = None
+    """The value of an entitlement."""
+
+    display: Optional[str] = None
+    """A human-readable name, primarily used for display purposes."""
+
+    type: Optional[str] = None
+    """A label indicating the attribute's function."""
+
+    primary: Optional[bool] = None
+    """A Boolean value indicating the 'primary' or preferred attribute value
+    for this attribute."""
 
 
-class GroupMembership(MultiValuedComplexAttribute):
+class GroupMembership(ComplexAttribute):
     value: Annotated[Optional[str], Mutability.read_only] = None
     """The identifier of the User's group."""
 
@@ -206,14 +216,35 @@ class GroupMembership(MultiValuedComplexAttribute):
     'indirect'."""
 
 
-class Role(MultiValuedComplexAttribute):
-    pass
+class Role(ComplexAttribute):
+    value: Optional[str] = None
+    """The value of a role."""
+
+    display: Optional[str] = None
+    """A human-readable name, primarily used for display purposes."""
 
+    type: Optional[str] = None
+    """A label indicating the attribute's function."""
 
-class X509Certificate(MultiValuedComplexAttribute):
+    primary: Optional[bool] = None
+    """A Boolean value indicating the 'primary' or preferred attribute value
+    for this attribute."""
+
+
+class X509Certificate(ComplexAttribute):
     value: Annotated[Optional[Base64Bytes], CaseExact.true] = None
     """The value of an X.509 certificate."""
 
+    display: Optional[str] = None
+    """A human-readable name, primarily used for display purposes."""
+
+    type: Optional[str] = None
+    """A label indicating the attribute's function."""
+
+    primary: Optional[bool] = None
+    """A Boolean value indicating the 'primary' or preferred attribute value
+    for this attribute."""
+
 
 class User(Resource[AnyExtension]):
     schemas: Annotated[list[str], Required.true] = [

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/urn.py

@@ -4,6 +4,7 @@ from typing import Optional
 from typing import Union
 
 from .base import BaseModel
+from .utils import _get_path_parts
 from .utils import _normalize_attribute_name
 
 if TYPE_CHECKING:
@@ -29,6 +30,16 @@ def _normalize_path(model: Optional[type["BaseModel"]], path: str) -> tuple[str,
 
     # Absolute URN
     if ":" in path:
+        if (
+            model
+            and issubclass(model, Resource)
+            and (
+                path in model.get_extension_models()
+                or path == model.model_fields["schemas"].default[0]
+            )
+        ):
+            return path, ""
+
         parts = path.rsplit(":", 1)
         return parts[0], parts[1]
 
@@ -42,7 +53,7 @@ def _normalize_path(model: Optional[type["BaseModel"]], path: str) -> tuple[str,
 
 def _validate_model_attribute(model: type["BaseModel"], attribute_base: str) -> None:
     """Validate that an attribute name or a sub-attribute path exist for a given model."""
-    attribute_name, *sub_attribute_blocks = attribute_base.split(".")
+    attribute_name, *sub_attribute_blocks = _get_path_parts(attribute_base)
     sub_attribute_base = ".".join(sub_attribute_blocks)
 
     aliases = {field.validation_alias for field in model.model_fields.values()}
@@ -100,12 +111,17 @@ def _resolve_path_to_target(
     if not schema_urn:
         return resource, attr_path
 
+    if extension_class := resource.get_extension_model(schema_urn):
+        # Points to the extension root
+        if not attr_path:
+            return resource, extension_class.__name__
+
+        extension_instance = _get_or_create_extension_instance(
+            resource, extension_class
+        )
+        return extension_instance, attr_path
+
     if schema_urn in resource.schemas:
         return resource, attr_path
 
-    extension_class = resource.get_extension_model(schema_urn)
-    if not extension_class:
-        return (None, "")
-
-    extension_instance = _get_or_create_extension_instance(resource, extension_class)
-    return extension_instance, attr_path
+    return (None, "")

{scim2_models-0.4.2 → scim2_models-0.5.0}/scim2_models/utils.py

@@ -195,3 +195,7 @@ def _find_field_name(model_class: type["BaseModel"], attr_name: str) -> Optional
             return field_key
 
     return None
+
+
+def _get_path_parts(path: str) -> list[str]:
+    return path.split(".")

scim2_models-0.4.2/.github/FUNDING.yml

@@ -1,2 +0,0 @@
----
-github: [yaal-coop]