surfdataverse 4.2.1__tar.gz → 4.2.2__tar.gz

{surfdataverse-4.2.1 → surfdataverse-4.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: surfdataverse
-Version: 4.2.1
+Version: 4.2.2
 Summary: A Python package for ionysis Microsoft Dataverse integration
 Keywords: dataverse,microsoft,crm,api
 Author: ionysis

{surfdataverse-4.2.1 → surfdataverse-4.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "surfdataverse"
-version = "4.2.1"
+version = "4.2.2"
 description = "A Python package for ionysis Microsoft Dataverse integration"
 readme = "README.md"
 authors = [

{surfdataverse-4.2.1 → surfdataverse-4.2.2}/src/surfdataverse/core.py

@@ -200,32 +200,33 @@ class DataverseClient:
 
 
 class MsalStorageCredential:
-    """Azure TokenCredential backed by MSAL.
-
-    If the user already authenticated for Dataverse in this session, acquiring a
-    storage token is silent (no browser popup). Otherwise the browser opens once.
-    """
+    """Azure TokenCredential over one shared MSAL app + on-disk cache.
+    First resource opens a browser; every later resource — and every restart,
+    because the cache is persisted here — is silent."""
 
     def __init__(self, client_id: str, authority: str):
-        token_cache, _ = get_token_cache()
+        self._cache, self._cache_file = get_token_cache()
         self._app = msal.PublicClientApplication(
-            client_id, authority=authority, token_cache=token_cache
+            client_id, authority=authority, token_cache=self._cache
         )
 
     def get_token(self, *scopes, **kwargs) -> AccessToken:
-        scope = list(scopes) if scopes else [kwargs.get("scope")]
+        scope = list(scopes) if scopes else [kwargs["scope"]]
         result = None
-        accounts = self._app.get_accounts()
-        if accounts:
-            result = self._app.acquire_token_silent(scopes=scope, account=accounts[0])
+        if accounts := self._app.get_accounts():
+            result = self._app.acquire_token_silent(scope, account=accounts[0])
         if not result:
             result = self._app.acquire_token_interactive(scope)
         if "access_token" not in result:
-            raise RuntimeError(
-                f"Blob storage authentication failed: {result.get('error_description', result.get('error'))}"
+            raise AuthenticationError(
+                f"Authentication failed for {scope}: "
+                f"{result.get('error_description', result.get('error'))}"
             )
-        expires_on = int(time.time()) + result.get("expires_in", 3600)
-        return AccessToken(result["access_token"], expires_on)
+        if self._cache.has_state_changed:                     # persist for ALL consumers
+            self._cache_file.write_text(self._cache.serialize())
+        return AccessToken(
+            result["access_token"], int(time.time()) + result.get("expires_in", 3600)
+        )
 
 
 class DataverseBase: