scim2-server 0.6.2__tar.gz → 0.7.0__tar.gz

{scim2_server-0.6.2 → scim2_server-0.7.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: scim2-server
-Version: 0.6.2
+Version: 0.7.0
 Summary: SCIM server core for any storage and web framework
 Keywords: scim,scim2,provisioning,rfc7643,rfc7644
 Author: Yaal Coop, Christian Friedrich Coors
@@ -217,11 +217,13 @@ Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Environment :: Web Environment
 Classifier: Programming Language :: Python
 Classifier: Operating System :: OS Independent
-Requires-Dist: scim2-models>=0.10.6
+Requires-Dist: scim2-models>=0.12.0
+Requires-Dist: precis-i18n>=1.1.2 ; extra == 'precis'
 Requires-Dist: pytest>=9.1.1 ; extra == 'testing'
 Requires-Python: >=3.11
 Project-URL: repository, https://github.com/python-scim/scim2-server
 Project-URL: funding, https://github.com/sponsors/python-scim
+Provides-Extra: precis
 Provides-Extra: testing
 Description-Content-Type: text/markdown
 

{scim2_server-0.6.2 → scim2_server-0.7.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "scim2-server"
-version = "0.6.2"
+version = "0.7.0"
 description = "SCIM server core for any storage and web framework"
 readme = "README.md"
 keywords = [
@@ -28,7 +28,7 @@ classifiers = [
     "Operating System :: OS Independent",
 ]
 requires-python = ">= 3.11"
-dependencies = ["scim2-models>=0.10.6"]
+dependencies = ["scim2-models>=0.12.0"]
 
 [[project.authors]]
 name = "Yaal Coop"
@@ -43,6 +43,7 @@ file = "LICENSE"
 
 [project.optional-dependencies]
 testing = ["pytest>=9.1.1"]
+precis = ["precis-i18n>=1.1.2"]
 
 [project.urls]
 repository = "https://github.com/python-scim/scim2-server"
@@ -60,6 +61,7 @@ dev = [
     "time-machine>=2.14.2",
     "tox-uv>=1.16.0",
     "aiosqlite>=0.22.1",
+    "precis-i18n>=1.1.2",
     "mypy>=2.3.1",
     "scim2-client[werkzeug]>=0.11.2",
     "scim2-tester>=0.5.1",

{scim2_server-0.6.2 → scim2_server-0.7.0}/pyproject.toml.orig

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "scim2-server"
-version = "0.6.2"
+version = "0.7.0"
 description = "SCIM server core for any storage and web framework"
 authors = [
     {name="Yaal Coop", email="contact@yaal.coop"},
@@ -29,13 +29,16 @@ classifiers = [
 
 requires-python = ">= 3.11"
 dependencies = [
-    "scim2-models>=0.10.6",
+    "scim2-models>=0.12.0",
 ]
 
 [project.optional-dependencies]
 testing = [
     "pytest>=9.1.1",
 ]
+precis = [
+    "precis-i18n>=1.1.2",
+]
 
 [project.urls]
 repository = "https://github.com/python-scim/scim2-server"
@@ -53,6 +56,7 @@ dev = [
     "time-machine>=2.14.2",
     "tox-uv>=1.16.0",
     "aiosqlite>=0.22.1",
+    "precis-i18n>=1.1.2",
     "mypy>=2.3.1",
     "scim2-client[werkzeug]>=0.11.2",
     "scim2-tester>=0.5.1",

{scim2_server-0.6.2 → scim2_server-0.7.0}/scim2_server/memory.py

@@ -203,13 +203,16 @@ class InMemoryStorage(ScimStorage):
         """Return the value a resource holds for a unique attribute, in the form it is compared in.
 
         A resource whose schemas do not declare the attribute holds no value.
+        A string the policy cannot compare is equal to no other value, so it
+        is held as missing too.
         """
         value = parametrize(Path, type(resource))(attribute.urn).get(
             resource, strict=False
         )
-        if isinstance(value, str) and not attribute.case_exact:
-            return value.casefold()
-        return value
+        try:
+            return attribute.comparable(value)
+        except ValueError:
+            return None
 
 
 class AsyncInMemoryStorage(AsyncScimStorage):

{scim2_server-0.6.2 → scim2_server-0.7.0}/scim2_server/resources/default-service-provider-config.json

@@ -22,6 +22,5 @@
     },
     "etag": {
         "supported": true
-    },
-    "authenticationSchemes": []
+    }
 }

{scim2_server-0.6.2 → scim2_server-0.7.0}/scim2_server/service.py

@@ -122,7 +122,6 @@ def patch_only_config() -> ServiceProviderConfig:
         change_password=ChangePassword(supported=False),
         sort=Sort(supported=False),
         etag=ETag(supported=False),
-        authentication_schemes=[],
     )
 
 

{scim2_server-0.6.2 → scim2_server-0.7.0}/scim2_server/testserver/cli.py

@@ -87,6 +87,12 @@ def build_parser() -> argparse.ArgumentParser:
         help="Accept a static bearer token, and announce the bearer token scheme. "
         "Can be repeated. Without it, the server accepts every request.",
     )
+    parser.add_argument(
+        "--precis",
+        action="store_true",
+        help="Compare the usernames and the passwords with the PRECIS profiles of "
+        "RFC 8265, and refuse the values they do not allow. Needs the precis extra.",
+    )
     parser.add_argument(
         "--hostname",
         default="127.0.0.1",
@@ -169,7 +175,20 @@ def main() -> None:
             BEARER_TOKEN_SCHEME,
         ]
 
-    provider = ScimProvider.from_discovery(schemas, resource_types, config=config)
+    policy = None
+    if args.precis:
+        try:
+            # Imported on demand, so that the server runs without the precis extra.
+            from scim2_server.testserver.precis import PRECIS_POLICY
+        except ModuleNotFoundError:
+            parser.error(
+                "--precis needs the precis extra: pip install 'scim2-server[precis]'"
+            )
+        policy = PRECIS_POLICY
+
+    provider = ScimProvider.from_discovery(
+        schemas, resource_types, config=config, policy=policy
+    )
 
     storages: dict[str | None, InMemoryStorage] = {}
 

scim2_server-0.7.0/scim2_server/testserver/precis.py

@@ -0,0 +1,29 @@
+"""The PRECIS comparison of the ``--precis`` option of the ``scim2-server`` command."""
+
+from typing import Any
+
+from precis_i18n import get_profile
+from scim2_models import ScimPolicy
+from scim2_models import default_comparison_key
+
+USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User"
+
+PROFILES = {
+    f"{USER_SCHEMA}:userName": get_profile("UsernameCaseMapped"),
+    f"{USER_SCHEMA}:password": get_profile("OpaqueString"),
+}
+
+
+def precis_comparison_key(binding: Any, value: str) -> str:
+    """Compare the usernames and the passwords with the PRECIS profiles of RFC 8265.
+
+    Per RFC 7644 §5, the usernames and the passwords are prepared with PRECIS
+    before they are compared. The other strings are compared as by default.
+    """
+    profile = PROFILES.get(binding.urn)
+    if profile is None:
+        return default_comparison_key(binding, value)
+    return str(profile.enforce(value))
+
+
+PRECIS_POLICY = ScimPolicy(comparison_key=precis_comparison_key)