splent-feature-github 0.2.1__tar.gz → 0.4.0__tar.gz

{splent_feature_github-0.2.1/src/splent_feature_github.egg-info → splent_feature_github-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: splent_feature_github
-Version: 0.2.1
+Version: 0.4.0
 License-Expression: LGPL-3.0-or-later
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "splent_feature_github"
-version = "0.2.1"
+version = "0.4.0"
 readme = "README.md"
 requires-python = ">=3.13"
 license = "LGPL-3.0-or-later"
@@ -48,7 +48,7 @@ translations = ["es"]
 docker     = []
 
 [tool.splent.contract.requires]
-features = ["auth", "identities", "profile"]
+features = ["auth>=1.23.0", "identities>=0.3.0", "profile"]
 features_manual = ["profile"]
 features_optional = ["signup"]
 env_vars = ["GITHUB_CLIENT_ID", "GITHUB_CLIENT_SECRET", "GITHUB_SCOPE"]
@@ -85,3 +85,15 @@ GITHUB_CLIENT_SECRET = ""
 # person's addresses it verified; without it every new account asks for an
 # address, which then has to be confirmed by mail.
 GITHUB_SCOPE = "user:email"
+
+# ── Parameters ────────────────────────────────────────────────────────────────
+# The type of each key above, which product:validate checks a product's
+# value against and the framework (1.22.0 and later) resolves at boot:
+# default < product < environment. An older framework ignores it. deploy:
+# the deployment's .env decides it; derivation: the product decides it, and
+# an environment that changes it is drift. A secret never goes in a
+# committed file: product:validate refuses it in the product's pyproject.
+[tool.splent.config_schema]
+GITHUB_CLIENT_ID = { type = "str", bind = "deploy", help = "The client ID of the OAuth app registered at https://github.com/settings/developers." }
+GITHUB_CLIENT_SECRET = { type = "secret", help = "The client secret of that OAuth app." }
+GITHUB_SCOPE = { type = "str", bind = "derivation", help = "What the sign-in asks GitHub for." }

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0/src/splent_feature_github.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: splent_feature_github
-Version: 0.2.1
+Version: 0.4.0
 License-Expression: LGPL-3.0-or-later
 Requires-Python: >=3.13
 Description-Content-Type: text/markdown

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0}/src/splent_io/splent_feature_github/config.py

@@ -4,6 +4,12 @@ github feature configuration.
 The OAuth app registered at https://github.com/settings/developers.
 Without both values GitHub sign-in is off: the app logs a warning at start,
 and whoever tries is told it is not available.
+
+[tool.splent.config_schema] in pyproject.toml declares each one's type, the
+secret among them. A framework that reads it (1.22.0 and later) resolves
+them itself right after inject_config, and the product's value reaches
+app.config as written, so services.py reads the scope with its default. An
+older one leaves them to this module.
 """
 
 import os

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0}/src/splent_io/splent_feature_github/hooks.py

@@ -37,11 +37,16 @@ def github_profile_row():
     from splent_io.splent_feature_github.services import PROVIDER, github_url
     from splent_io.splent_feature_identities.services import IdentitiesService
 
-    identity = IdentitiesService().identity_of(current_user.id, PROVIDER)
+    identities = IdentitiesService()
+    identity = identities.identity_of(current_user.id, PROVIDER)
     return render_template(
         "hooks/github_profile_row.html",
         identity=identity,
         github_url=github_url(identity) if identity else None,
+        # The only way the account signs in is not disconnected: the row
+        # offers to set a password first.
+        can_disconnect=identity is not None
+        and identities.keeps_a_way_in(current_user, PROVIDER, identity.provider_id),
     )
 
 

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0}/src/splent_io/splent_feature_github/templates/hooks/github_profile_row.html

@@ -1,8 +1,9 @@
 {# A section of profile's edit page (profile.edit.sections), below the
    profile form. The login links to the account on GitHub. The disconnect
    button opens identities' modal, which posts the provider and account id
-   it carries. The colours are in assets/css/github.css, and the mark is
-   drawn in currentColor. #}
+   it carries; for the only way the account signs in, a link to set a
+   password comes first. The colours are in assets/css/github.css, and the
+   mark is drawn in currentColor. #}
 {% if identity %}
 <div class="mb-4 profile-identity" data-identity="github">
     <label class="form-label fw-semibold">GitHub</label>
@@ -15,12 +16,18 @@
         {% else %}
         <span class="github-identity__value">{{ identity.provider_id }}</span>
         {% endif %}
+        {% if can_disconnect %}
         <button type="button" class="btn btn-sm p-0 github-identity__disconnect" title="{{ _('Disconnect') }}" aria-label="{{ _('Disconnect') }}" data-bs-toggle="modal" data-bs-target="#disconnectModal" data-provider="github" data-provider-id="{{ identity.provider_id }}">
             <svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">
                 <line x1="18" y1="6" x2="6" y2="18"></line>
                 <line x1="6" y1="6" x2="18" y2="18"></line>
             </svg>
         </button>
+        {% else %}
+        {# The only way the account signs in: a password of its own comes
+           first, on My account, and then it can be disconnected. #}
+        <a class="ms-auto small github-identity__set-password" href="{{ url_for('auth.my_account', _anchor='password') }}" data-set-password-first>{{ _('Set a password to disconnect it') }}</a>
+        {% endif %}
     </div>
 </div>
 {% else %}

{splent_feature_github-0.2.1 → splent_feature_github-0.4.0}/src/splent_io/splent_feature_github/translations/es/LC_MESSAGES/messages.po

@@ -31,3 +31,5 @@ msgstr "Desconectar"
 msgid "Connect GitHub"
 msgstr "Conectar GitHub"
 
+msgid "Set a password to disconnect it"
+msgstr "Establece una contraseña para desconectarla"