sovaria-cli 0.3.0__tar.gz → 0.4.0__tar.gz

{sovaria_cli-0.3.0 → sovaria_cli-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sovaria-cli
-Version: 0.3.0
+Version: 0.4.0
 Summary: Sovaria BaaS command-line interface (sov)
 Project-URL: Homepage, https://sovaria.in
 Project-URL: Documentation, https://docs.sovaria.in/cli
@@ -12,7 +12,7 @@ Requires-Dist: httpx>=0.28.1
 Requires-Dist: keyring>=25.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: rich>=13.7.0
-Requires-Dist: sovaria-sdk==0.5.0
+Requires-Dist: sovaria-sdk==0.6.0
 Requires-Dist: tomli-w>=1.2.0
 Requires-Dist: typer>=0.17.4
 Provides-Extra: dev
@@ -22,7 +22,7 @@ Requires-Dist: pytest>=8.0; extra == 'dev'
 Requires-Dist: ruff>=0.9; extra == 'dev'
 Requires-Dist: twine>=6.0; extra == 'dev'
 Provides-Extra: mcp
-Requires-Dist: sovaria-sdk[mcp]==0.5.0; extra == 'mcp'
+Requires-Dist: sovaria-sdk[mcp]==0.6.0; extra == 'mcp'
 Description-Content-Type: text/markdown
 
 # Sovaria CLI

{sovaria_cli-0.3.0 → sovaria_cli-0.4.0}/apps/cli/src/__init__.py

@@ -1,3 +1,3 @@
 """Sovaria CLI — sov command."""
 
-__version__ = "0.3.0"
+__version__ = "0.4.0"

{sovaria_cli-0.3.0 → sovaria_cli-0.4.0}/apps/cli/src/commands/auth_enterprise.py

@@ -1,10 +1,11 @@
 """Enterprise auth for a project's app users: SCIM 2.0 provisioning and blocking auth hooks.
 
+    sov saml list | add NAME --domain acme.com --metadata idp.xml | enable ID | disable ID | remove ID [--yes]
     sov scim status | token [--yes] | revoke [--yes]
     sov auth-hooks list | set before-sign-in --url https://… [--fail open] [--timeout-ms 1500] | set before-create
         --function check-signup | test before-create [--email a@b.co] | delete before-create [--yes]
 
-Both need a project owner/admin; plan keys auth.scim (Team+) and auth.blocking_hooks (Pro+).
+All need a project owner/admin; plan keys res.sso (Team+), auth.scim (Team+) and auth.blocking_hooks (Pro+).
 """
 
 from __future__ import annotations
@@ -15,6 +16,7 @@ from apps.cli.src.utils.api_client import CLIRequestError, call_api
 from apps.cli.src.utils.display import handle_cli_error, print_json
 from apps.cli.src.utils.premium_display import run_with_spinner
 
+saml_app = typer.Typer(help="SAML single sign-on for your app's users: one connection per customer identity provider")
 scim_app = typer.Typer(help="SCIM 2.0 provisioning of app users and groups (Okta, Entra ID, Google Workspace …)")
 hooks_app = typer.Typer(help="Blocking auth hooks: before-create and before-sign-in (refuse or add custom claims)")
 
@@ -38,6 +40,78 @@ def _event(raw: str) -> str:
     return event
 
 
+# ── SAML ──────────────────────────────────────────────────────────────────────
+
+
+@saml_app.command("list")
+def saml_list(
+    profile: str | None = typer.Option(None, "--profile"),
+    org_id: str | None = typer.Option(None, "--org"),
+    project_id: str | None = typer.Option(None, "--project"),
+) -> None:
+    """The project's SAML connections, with the ACS URL and entity ID to give each IdP admin."""
+    print_json(_call("GET", "/api/v1/auth/saml/connections", "Loading SAML connections…", profile=profile,
+                     org_id=org_id, project_id=project_id))
+
+
+@saml_app.command("add")
+def saml_add(
+    name: str = typer.Argument(..., help='A name, like "Acme (Okta)"'),
+    domain: list[str] = typer.Option(..., "--domain", "-d", help="Email domain this IdP signs in (repeat for more)"),
+    metadata: typer.FileText | None = typer.Option(None, "--metadata", help="The IdP's metadata XML file"),
+    entity_id: str | None = typer.Option(None, "--entity-id", help="IdP entity ID (instead of --metadata)"),
+    sso_url: str | None = typer.Option(None, "--sso-url", help="IdP HTTP-Redirect sign-in URL (instead of --metadata)"),
+    certificate: typer.FileText | None = typer.Option(None, "--certificate", help="IdP signing certificate PEM file"),
+    profile: str | None = typer.Option(None, "--profile"),
+    org_id: str | None = typer.Option(None, "--org"),
+    project_id: str | None = typer.Option(None, "--project"),
+) -> None:
+    """Connect a customer's identity provider (metadata XML, or entity ID + sign-in URL + certificate)."""
+    body: dict = {"name": name, "domains": domain}
+    if metadata is not None:
+        body["metadata_xml"] = metadata.read()
+    elif entity_id and sso_url and certificate is not None:
+        body.update(idp_entity_id=entity_id, idp_sso_url=sso_url, idp_certificate_pem=certificate.read())
+    else:
+        raise typer.BadParameter("give --metadata, or --entity-id, --sso-url and --certificate")
+    print_json(_call("POST", "/api/v1/auth/saml/connections", "Adding the connection…", body=body, profile=profile,
+                     org_id=org_id, project_id=project_id))
+
+
+def _toggle(connection_id: str, enabled: bool, profile, org_id, project_id) -> None:
+    print_json(_call("PATCH", f"/api/v1/auth/saml/connections/{connection_id}", "Saving…", body={"enabled": enabled},
+                     profile=profile, org_id=org_id, project_id=project_id))
+
+
+@saml_app.command("enable")
+def saml_enable(connection_id: str, profile: str | None = typer.Option(None, "--profile"),
+                org_id: str | None = typer.Option(None, "--org"), project_id: str | None = typer.Option(None, "--project")) -> None:
+    """Turn a connection on."""
+    _toggle(connection_id, True, profile, org_id, project_id)
+
+
+@saml_app.command("disable")
+def saml_disable(connection_id: str, profile: str | None = typer.Option(None, "--profile"),
+                 org_id: str | None = typer.Option(None, "--org"), project_id: str | None = typer.Option(None, "--project")) -> None:
+    """Turn a connection off (its users keep their accounts)."""
+    _toggle(connection_id, False, profile, org_id, project_id)
+
+
+@saml_app.command("remove")
+def saml_remove(
+    connection_id: str,
+    yes: bool = typer.Option(False, "--yes", "-y"),
+    profile: str | None = typer.Option(None, "--profile"),
+    org_id: str | None = typer.Option(None, "--org"),
+    project_id: str | None = typer.Option(None, "--project"),
+) -> None:
+    """Remove a connection: its domains can no longer sign in with SSO (accounts stay)."""
+    if not yes:
+        typer.confirm("Remove this SAML connection? Its users can no longer sign in with SSO.", abort=True)
+    _call("DELETE", f"/api/v1/auth/saml/connections/{connection_id}", "Removing…", profile=profile,
+          org_id=org_id, project_id=project_id)
+
+
 # ── SCIM ──────────────────────────────────────────────────────────────────────
 
 

{sovaria_cli-0.3.0 → sovaria_cli-0.4.0}/apps/cli/src/main.py

@@ -100,6 +100,7 @@ app.add_typer(login_mod.app, name="auth", help="Authentication commands")
 app.add_typer(auth_product_mod.app, name="auth-product", help="Product auth admin commands")
 from apps.cli.src.commands import auth_enterprise as auth_enterprise_mod  # noqa: E402
 
+app.add_typer(auth_enterprise_mod.saml_app, name="saml", help="SAML single sign-on for your app's users")
 app.add_typer(auth_enterprise_mod.scim_app, name="scim", help="SCIM 2.0 provisioning of app users and groups")
 app.add_typer(auth_enterprise_mod.hooks_app, name="auth-hooks", help="Blocking auth hooks (before-create, before-sign-in)")
 app.add_typer(context_mod.app, name="context", help="Context and identity commands")

{sovaria_cli-0.3.0 → sovaria_cli-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sovaria-cli"
-version = "0.3.0"
+version = "0.4.0"
 description = "Sovaria BaaS command-line interface (sov)"
 readme = "apps/cli/README.md"
 requires-python = ">=3.11"
@@ -12,7 +12,7 @@ license = { text = "MIT" }
 authors = [{ name = "Sovaria Team" }]
 # Keep in sync with requirements.txt. Pin sovaria-sdk exactly and publish CLI+SDK together.
 dependencies = [
-    "sovaria-sdk==0.5.0",
+    "sovaria-sdk==0.6.0",
     "typer>=0.17.4",
     "httpx>=0.28.1",
     "keyring>=25.0",
@@ -31,7 +31,7 @@ sov = "apps.cli.src.main:cli_entry"
 
 [project.optional-dependencies]
 mcp = [
-    "sovaria-sdk[mcp]==0.5.0",
+    "sovaria-sdk[mcp]==0.6.0",
 ]
 dev = [
     "pytest>=8.0",