simple-module-auth 0.0.39__tar.gz → 0.0.40__tar.gz

{simple_module_auth-0.0.39 → simple_module_auth-0.0.40}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: simple_module_auth
-Version: 0.0.39
+Version: 0.0.40
 Summary: Session-cookie authentication primitives — middleware, login/logout, redirect helpers for simple_module
 Project-URL: Homepage, https://github.com/antosubash/simple_module_python
 Project-URL: Repository, https://github.com/antosubash/simple_module_python
@@ -22,9 +22,9 @@ Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
 Classifier: Typing :: Typed
 Requires-Python: >=3.12
 Requires-Dist: itsdangerous<3,>=2.2
-Requires-Dist: simple-module-core==0.0.39
-Requires-Dist: simple-module-db==0.0.39
-Requires-Dist: simple-module-hosting==0.0.39
+Requires-Dist: simple-module-core==0.0.40
+Requires-Dist: simple-module-db==0.0.40
+Requires-Dist: simple-module-hosting==0.0.40
 Description-Content-Type: text/markdown
 
 # simple_module_auth

{simple_module_auth-0.0.39 → simple_module_auth-0.0.40}/auth/contracts/schemas.py

@@ -58,6 +58,9 @@ class UserContext:
     # routes). ``None`` (a session, a service key) requires nothing.
     required_permission: str | None = None
 
+    # Providers must explicitly attest ownership of the principal's email.
+    email_verified: bool = False
+
     @property
     def is_scoped(self) -> bool:
         """Whether a scope cap applies (any token-authenticated principal)."""
@@ -83,6 +86,7 @@ class UserContext:
         return cls(
             id=str(user.id),
             email=user.email,
+            email_verified=getattr(user, "is_verified", False) is True,
             name=user.full_name or user.email,
             roles=[r.name for r in user.roles],
             auth_kind=auth_kind,
@@ -98,6 +102,7 @@ class UserContext:
         return {
             "id": self.id,
             "email": self.email,
+            "email_verified": self.email_verified,
             "name": self.name,
             "roles": list(self.roles),
             "tenant_id": self.tenant_id,
@@ -117,6 +122,7 @@ class UserContext:
             return cls(
                 id=str(payload["id"]),
                 email=str(payload["email"]),
+                email_verified=payload.get("email_verified") is True,
                 name=str(payload["name"]),
                 roles=list(payload.get("roles") or []),
                 tenant_id=payload.get("tenant_id"),

{simple_module_auth-0.0.39 → simple_module_auth-0.0.40}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simple-module-py/auth",
-  "version": "0.0.39",
+  "version": "0.0.40",
   "private": true,
   "description": "Frontend assets for the Auth module",
   "peerDependencies": {

{simple_module_auth-0.0.39 → simple_module_auth-0.0.40}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "simple_module_auth"
-version = "0.0.39"
+version = "0.0.40"
 description = "Session-cookie authentication primitives — middleware, login/logout, redirect helpers for simple_module"
 readme = "README.md"
 license = "MIT"
@@ -22,9 +22,9 @@ classifiers = [
 ]
 dependencies = [
     "itsdangerous>=2.2,<3",
-    "simple_module_core==0.0.39",
-    "simple_module_db==0.0.39",
-    "simple_module_hosting==0.0.39",
+    "simple_module_core==0.0.40",
+    "simple_module_db==0.0.40",
+    "simple_module_hosting==0.0.40",
 ]
 
 [project.entry-points.simple_module]