sweatstack 0.95.0__tar.gz → 0.97.0__tar.gz

{sweatstack-0.95.0 → sweatstack-0.97.0}/.github/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python: ["3.10", "3.11", "3.12", "3.13"]
+        python: ["3.11", "3.12", "3.13"]
         include:
           # The lock file tracks the newest pandas; this leg keeps the declared
           # lower bound (pyproject `pandas>=2.2.3`) honest.

{sweatstack-0.95.0 → sweatstack-0.97.0}/AGENTS.md

@@ -87,7 +87,7 @@ src/sweatstack/
 ├── _frames.py           # output= backends: parquet/models -> pandas/polars/arrow/bytes.
 ├── _renames.py          # Removed names -> replacement hints. Permanent; see "Breaking changes".
 ├── _transport.py        # Retry policy and the per-request Session on the client's connection pool.
-├── exceptions.py        # Public error contract. No httpx types leak.
+├── exceptions.py        # Public error contract. No HTTP-library types leak.
 ├── client.py            # Client: config, auth, delegation, transport (_request), resource attributes,
 │                        #   and the module-level interface (one shared default client).
 ├── resources/           # One module per URL segment: activities.py, traces.py, tests.py, ...
@@ -233,8 +233,8 @@ Both kinds take `output` as a keyword-only parameter and carry `@overload` stubs
 `Literal` values (clone the neighbours); `tests/typing/output_types.py` pins them.
 
 **Query parameters** are only sent when the caller supplied a non-default value. Repeatable
-ones go through `self._wire(value)` (R8). Always pass `.value` for enums into `httpx` params:
-`httpx` calls `str()`, which gives `"TraceResolution.linked"`, not `"linked"`.
+ones go through `self._wire(value)` (R8). Always pass `.value` for enums into `httpx2` params:
+`httpx2` calls `str()`, which gives `"TraceResolution.linked"`, not `"linked"`.
 
 
 ## Full-replace `replace` methods
@@ -309,7 +309,7 @@ construct fails the suite, not a user's notebook.
 ## Exceptions
 
 The hierarchy in `sweatstack/exceptions.py` is the **public** error
-contract — consumers should never need to import `httpx`.
+contract — consumers should never need to import `httpx2`.
 
 ```
 SweatStackError

{sweatstack-0.95.0 → sweatstack-0.97.0}/CHANGELOG.md

@@ -11,6 +11,39 @@ for a coding agent, are in `UPGRADING.md` next to this file and at
 https://docs.sweatstack.no/learn/python/upgrading/.
 
 
+## [0.97.0] - 2026-10-22
+
+### Changed
+
+- Requires Python 3.11 or later. On Python 3.10, pip and uv keep installing 0.96.
+- The SDK sends its requests with [`httpx2`](https://github.com/pydantic/httpx2), the maintained
+  continuation of `httpx`. Calling the SDK is unchanged, and errors are still the `SweatStack*`
+  exceptions.
+- HTTPS certificates are checked against the operating system's trust store instead of the
+  `certifi` bundle that `httpx` shipped. A root certificate installed on the machine, such as a
+  company proxy's, is now trusted. A Linux image without a CA bundle (the `ca-certificates`
+  package) can no longer connect; install it, or point `SSL_CERT_FILE` at a bundle.
+
+
+## [0.96.0] - 2026-10-16
+
+### Added
+
+- `client.oauth.authorization_url()` takes `nonce`, `integration` and `email_auth_mode`, the
+  authorization parameters it was missing. `integration="garmin_connect"` sends the user straight
+  to Garmin, skipping the sign-in chooser.
+
+### Changed
+
+- No sign-in link sends `prompt` any more: `client.oauth.authorization_url()` defaults to
+  `prompt=None` instead of `"none"`, and the FastAPI plugin and the Streamlit helper leave it out.
+  Users see what they saw before: SweatStack skips the consent screen by itself when the user's
+  grant already covers the request.
+- The Streamlit helper separates scopes with spaces, as the other sign-in links do.
+- `StreamlitAuth.get_authorization_url()` raises `ValueError` without a client ID or redirect
+  URI, instead of building a link that fails on the server.
+
+
 ## [0.95.0] - 2026-10-13
 
 Scopes are categories now. Request what your app uses. Breaking: the default scopes change

{sweatstack-0.95.0 → sweatstack-0.97.0}/DEVELOPMENT.md

@@ -17,7 +17,7 @@ uv run python -c "..."      # ad-hoc scripts
 uv run generate-response-models   # regenerate OpenAPI schemas (see below)
 ```
 
-Python ≥ 3.10 is supported; develop against the version pinned in
+Python ≥ 3.11 is supported; develop against the version pinned in
 `.python-version`.
 
 

{sweatstack-0.95.0 → sweatstack-0.97.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sweatstack
-Version: 0.95.0
+Version: 0.97.0
 Summary: The official Python client for SweatStack
 Project-URL: Homepage, https://sweatstack.no
 Project-URL: Documentation, https://docs.sweatstack.no/learn/python/
@@ -16,14 +16,13 @@ Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Requires-Dist: email-validator>=2.2.0
-Requires-Dist: httpx>=0.28.1
+Requires-Dist: httpx2>=2.16.0
 Requires-Dist: open-sport-taxonomy[pydantic]>=0.10.0
 Requires-Dist: platformdirs>=4.0.0
 Requires-Dist: pydantic>=2.10.5

{sweatstack-0.95.0 → sweatstack-0.97.0}/examples/send_webhook.py

@@ -1,7 +1,7 @@
 #!/usr/bin/env python3
 # /// script
 # dependencies = [
-#   "httpx",
+#   "httpx2",
 # ]
 # ///
 """
@@ -32,9 +32,9 @@ import hmac
 import json
 import sys
 import time
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 
-import httpx
+import httpx2
 
 
 def create_signature(payload: bytes, secret: str, timestamp: int) -> str:
@@ -55,14 +55,14 @@ def send_webhook(
     resource_id: str,
     secret: str,
     verbose: bool = False,
-) -> httpx.Response:
+) -> httpx2.Response:
     """Send a webhook to the specified URL."""
     # Create payload
     payload = {
         "user_id": user_id,
         "event_type": event_type,
         "resource_id": resource_id,
-        "timestamp": datetime.now(timezone.utc).isoformat(),
+        "timestamp": datetime.now(UTC).isoformat(),
     }
 
     payload_bytes = json.dumps(payload).encode()
@@ -79,7 +79,7 @@ def send_webhook(
         print(f"{'=' * 60}\n")
 
     # Send request
-    response = httpx.post(
+    response = httpx2.post(
         url,
         content=payload_bytes,
         headers={
@@ -176,10 +176,10 @@ Examples:
             if args.verbose and response.headers:
                 print(f"  Response headers: {dict(response.headers)}")
 
-        except httpx.ConnectError:
+        except httpx2.ConnectError:
             print(f"✗ Connection failed - is the server running at {args.url}?")
             sys.exit(1)
-        except httpx.TimeoutException:
+        except httpx2.TimeoutException:
             print("✗ Request timed out")
             sys.exit(1)
         except Exception as e:

{sweatstack-0.95.0 → sweatstack-0.97.0}/pyproject.toml

@@ -1,20 +1,19 @@
 [project]
 name = "sweatstack"
-version = "0.95.0"
+version = "0.97.0"
 description = "The official Python client for SweatStack"
 readme = "README.md"
 license = "MIT"
 authors = [
     { name = "Aart Goossens", email = "aart@sweatstack.no" }
 ]
-requires-python = ">=3.10"
+requires-python = ">=3.11"
 keywords = ["sweatstack", "sports", "fitness", "api", "client"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Intended Audience :: Developers",
     "License :: OSI Approved :: MIT License",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
@@ -24,7 +23,7 @@ classifiers = [
 # consumers and anyone who only needs the models. CI's bare-install job keeps it so.
 dependencies = [
     "email-validator>=2.2.0",
-    "httpx>=0.28.1",
+    "httpx2>=2.16.0",
     "open-sport-taxonomy[pydantic]>=0.10.0",
     "platformdirs>=4.0.0",
     "pydantic>=2.10.5",
@@ -91,7 +90,7 @@ evals = [
 
 [tool.ruff]
 line-length = 100
-target-version = "py310"
+target-version = "py311"
 extend-exclude = ["src/sweatstack/openapi_schemas.py"]
 
 [tool.ruff.lint]

{sweatstack-0.95.0 → sweatstack-0.97.0}/skills/sweatstack-python/SKILL.md

@@ -98,7 +98,7 @@ pandas (`summary.power.mean`) and structs in Polars (`.unnest("summary")`).
 
 ## Errors
 
-Everything derives from `SweatStackError`; never import `httpx`. `SweatStackAPIError` (has
+Everything derives from `SweatStackError`; never import `httpx2`. `SweatStackAPIError` (has
 `status_code`, `url`, `method`, `request_id`, `body`) splits into `SweatStackAuthError` (401,
 403), `SweatStackNotFoundError` (404), `SweatStackRateLimitError` (429, `retry_after`),
 `SweatStackBadRequestError` (other 4xx) and `SweatStackServerError` (5xx). Also

{sweatstack-0.95.0 → sweatstack-0.97.0}/skills/sweatstack-python/api.md

@@ -107,7 +107,7 @@ client.portal.sessions.create("manage-integrations", return_url=None)  # user to
 
 client.oauth.userinfo()                 # OpenID claims + issue (needs openid; profile and email add the name and email claims)
 verifier, challenge = client.oauth.generate_pkce_params()
-client.oauth.authorization_url(client_id="YOUR_CLIENT_ID", redirect_uri="http://localhost:8000/callback", code_challenge=challenge)
+client.oauth.authorization_url(client_id="YOUR_CLIENT_ID", redirect_uri="http://localhost:8000/callback", code_challenge=challenge)  # + scope, state, nonce, integration="garmin_connect", email_auth_mode; leave prompt out
 client.oauth.exchange_code("code", client_id="YOUR_CLIENT_ID", code_verifier=verifier)  # persist=True saves on this machine; never in a server
 ```
 

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/_frames.py

@@ -22,7 +22,7 @@ from __future__ import annotations
 import json
 import warnings
 from collections.abc import Sequence
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from enum import Enum
 from functools import cache
 from importlib import import_module
@@ -363,7 +363,6 @@ def field_types(model: type[BaseModel]) -> dict[str, FieldType]:
     }
 
 
-_DATETIME_FORMATS = frozenset({"date-time", "naive-date-time"})
 _STRING_FORMATS = {
     "date-time": "datetime",
     "naive-date-time": "naive_datetime",
@@ -392,8 +391,6 @@ def _field_type(node: dict, definitions: dict, path: str, stack: tuple[str, ...]
             return _field_type(options[0], definitions, path, stack)
         if options and all(option.get("type") in ("integer", "number") for option in options):
             return "float"
-        if options and all(option.get("format") in _DATETIME_FORMATS for option in options):
-            return "datetime"  # aware | naive: naive values are taken as UTC
         return _fallback(path, node)
 
     if "enum" in node or "const" in node:
@@ -492,7 +489,7 @@ def _plain_value(value: Any, node: FieldType) -> Any:
     if node == "string":
         return value if isinstance(value, str) else str(value)  # Sport and other value objects
     if node == "datetime" and isinstance(value, datetime) and value.tzinfo is None:
-        return value.replace(tzinfo=timezone.utc)  # naive value in a UTC column
+        return value.replace(tzinfo=UTC)  # naive value in a UTC column
     if node == "naive_datetime" and isinstance(value, datetime) and value.tzinfo is not None:
-        return value.astimezone(timezone.utc).replace(tzinfo=None)
+        return value.astimezone(UTC).replace(tzinfo=None)
     return value  # date, timedelta, bool, int, float, datetime already matching

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/_transport.py

@@ -4,7 +4,7 @@ The policy follows the OpenAI, Anthropic and Stripe clients, with one difference
 never retried, because the SweatStack API has no idempotency keys and a retried create could
 create twice.
 
-This module is also the only place in the package that calls ``httpx`` to make a request:
+This module is also the only place in the package that calls ``httpx2`` to make a request:
 through a client's pool, or through :func:`post` for the token calls the FastAPI and Streamlit
 integrations make without a client. Both put the SDK's ``User-Agent`` on the wire, and
 ``tests/test_transport.py`` fails on a request made from anywhere else.
@@ -17,7 +17,7 @@ from collections.abc import Iterator
 from contextlib import contextmanager
 from typing import Any
 
-import httpx
+import httpx2
 
 from .constants import USER_AGENT
 
@@ -42,7 +42,7 @@ def backoff(attempt: int) -> float:
     return min(0.5 * 2**attempt * random.uniform(0.75, 1.25), MAX_BACKOFF)
 
 
-def retry_after(response: httpx.Response) -> float | None:
+def retry_after(response: httpx2.Response) -> float | None:
     """The response's ``Retry-After`` in seconds, if it sent one as a number."""
     try:
         return float(response.headers["retry-after"])
@@ -55,7 +55,7 @@ def wait_before_retry(
     attempt: int,
     max_retries: int,
     waited: float,
-    response: httpx.Response | None = None,
+    response: httpx2.Response | None = None,
 ) -> float | None:
     """How long to wait before retrying, or ``None`` to stop.
 
@@ -80,16 +80,16 @@ def wait_before_retry(
     return wait
 
 
-def post(url: str, **kwargs: Any) -> httpx.Response:
-    """``httpx.post`` with the SDK's ``User-Agent``; the caller's headers win on a clash.
+def post(url: str, **kwargs: Any) -> httpx2.Response:
+    """``httpx2.post`` with the SDK's ``User-Agent``; the caller's headers win on a clash.
 
     For the one-off token calls the integrations make without a ``Client``. It adds the header
     and nothing else: no retry (a ``POST`` is never retried), no error translation and no
     timeout, so each caller keeps its own.
     """
-    headers = httpx.Headers({"User-Agent": USER_AGENT})
+    headers = httpx2.Headers({"User-Agent": USER_AGENT})
     headers.update(kwargs.pop("headers", None) or {})
-    return httpx.post(url, headers=headers, **kwargs)
+    return httpx2.post(url, headers=headers, **kwargs)
 
 
 class Session:
@@ -100,29 +100,29 @@ class Session:
     endpoints must never see it.
     """
 
-    def __init__(self, http: httpx.Client, headers: httpx.Headers, timeout: float) -> None:
+    def __init__(self, http: httpx2.Client, headers: httpx2.Headers, timeout: float) -> None:
         self._http = http
         self.headers = headers
         self._timeout = timeout
 
-    def request(self, method: str, url: str, **kwargs: Any) -> httpx.Response:
+    def request(self, method: str, url: str, **kwargs: Any) -> httpx2.Response:
         return self._http.request(method, url, headers=self.headers, **kwargs)
 
-    def get(self, url: str, **kwargs: Any) -> httpx.Response:
+    def get(self, url: str, **kwargs: Any) -> httpx2.Response:
         return self.request("GET", url, **kwargs)
 
-    def post(self, url: str, **kwargs: Any) -> httpx.Response:
+    def post(self, url: str, **kwargs: Any) -> httpx2.Response:
         return self.request("POST", url, **kwargs)
 
-    def put(self, url: str, **kwargs: Any) -> httpx.Response:
+    def put(self, url: str, **kwargs: Any) -> httpx2.Response:
         return self.request("PUT", url, **kwargs)
 
-    def delete(self, url: str, **kwargs: Any) -> httpx.Response:
+    def delete(self, url: str, **kwargs: Any) -> httpx2.Response:
         return self.request("DELETE", url, **kwargs)
 
     @contextmanager
-    def stream(self, method: str, url: str, **kwargs: Any) -> Iterator[httpx.Response]:
+    def stream(self, method: str, url: str, **kwargs: Any) -> Iterator[httpx2.Response]:
         """A streaming request. No read timeout: a stream may stay quiet for a while."""
-        timeout = httpx.Timeout(self._timeout, read=None)
+        timeout = httpx2.Timeout(self._timeout, read=None)
         with self._http.stream(method, url, headers=self.headers, timeout=timeout, **kwargs) as r:
             yield r

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/cli.py

@@ -2,7 +2,7 @@ import ast
 import re
 from pathlib import Path
 
-import httpx
+import httpx2
 from datamodel_code_generator import DataModelType, InputFileType, generate
 
 
@@ -58,18 +58,14 @@ def _bind_sport_to_ost(path: Path) -> None:
     path.write_text("".join(out))
 
 
-# Fields the server sends without a UTC offset, though the OpenAPI schema says date-time.
-_NAIVE_OR_AWARE = {"registered_at", "backfill_loaded_until"}
-
-
 def _restore_naive_local_datetimes(path: Path) -> None:
     """Type local timestamps as ``NaiveDatetime`` rather than ``AwareDatetime``.
 
     The API returns *local* timestamps without a timezone, but datamodel-codegen types every
     ``date-time`` field as ``AwareDatetime`` -- which rejects a naive value. Retype the local fields
-    (those whose name ends in ``_local``) back to ``NaiveDatetime``, and let the fields the server
-    sends without an offset (``registered_at``, ``backfill_loaded_until``) accept either. AST-anchored and idempotent, so it survives regeneration (and replaces the
-    manual fixups this file has needed in the past).
+    (those whose name ends in ``_local``) back to ``NaiveDatetime``; every other timestamp the server
+    returns is UTC with ``Z``. AST-anchored and idempotent, so it survives regeneration (and replaces
+    the manual fixups this file has needed in the past).
     """
     src = path.read_text()
     tree = ast.parse(src)
@@ -83,12 +79,9 @@ def _restore_naive_local_datetimes(path: Path) -> None:
         annotation = ast.get_source_segment(src, node.annotation)
         if annotation is None:
             continue
-        if name.endswith("_local") and "AwareDatetime" in annotation:
-            retyped = annotation.replace("AwareDatetime", "NaiveDatetime")
-        elif name in _NAIVE_OR_AWARE and "NaiveDatetime" not in annotation:
-            retyped = annotation.replace("AwareDatetime", "AwareDatetime | NaiveDatetime", 1)
-        else:
+        if not (name.endswith("_local") and "AwareDatetime" in annotation):
             continue
+        retyped = annotation.replace("AwareDatetime", "NaiveDatetime")
         i = node.lineno - 1
         replace[i] = lines[i].replace(annotation, retyped, 1)
 
@@ -102,7 +95,7 @@ def _restore_naive_local_datetimes(path: Path) -> None:
 
 
 def generate_response_models():
-    response = httpx.get("http://localhost:8080/openapi.json")
+    response = httpx2.get("http://localhost:8080/openapi.json")
     response.raise_for_status()
     output_directory = Path(__file__).parent
     output = Path(output_directory / "openapi_schemas.py")

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/client.py

@@ -20,7 +20,7 @@ from pathlib import Path
 from typing import Any, Literal
 from urllib.parse import parse_qs, urlparse
 
-import httpx
+import httpx2
 from platformdirs import user_cache_dir, user_data_dir
 from pydantic import SecretStr
 
@@ -642,7 +642,6 @@ class Client:
             redirect_uri=f"http://localhost:{port}",
             code_challenge=code_challenge,
             scope=DEFAULT_SCOPE,
-            prompt=None,
         )
 
         webbrowser.open(authorization_url)
@@ -876,7 +875,7 @@ class Client:
     # Transport: the internal API the resources use
     # -------------------------------------------------------------------------
 
-    def _pool(self) -> httpx.Client:
+    def _pool(self) -> httpx2.Client:
         """The client's connection pool, created on first use and kept for its lifetime.
 
         Rebuilt if ``url`` changes. Authorization is per request (see ``_http_client``), so the
@@ -886,7 +885,7 @@ class Client:
         built = self.__dict__.get("_pool_entry")
         if built is not None and built[0] == url:
             return built[1]
-        pool = httpx.Client(
+        pool = httpx2.Client(
             base_url=url,
             headers={"User-Agent": USER_AGENT},
             timeout=self.timeout,
@@ -903,7 +902,7 @@ class Client:
         """A request scope on the client's connection pool, with the right Authorization header.
 
         Transport-level errors (DNS, timeouts, connection refused) are re-raised as
-        SweatStackConnectionError so consumers never see raw httpx types.
+        SweatStackConnectionError so consumers never see the HTTP library's types.
 
         Args:
             skip_token_check: Use the raw token without the expiry check (used during
@@ -912,7 +911,7 @@ class Client:
                 For the token exchange, which authenticates with the app's own credentials in
                 the body, so a user's bearer is never sent where it is not needed.
         """
-        headers = httpx.Headers({"User-Agent": USER_AGENT})
+        headers = httpx2.Headers({"User-Agent": USER_AGENT})
         if not auth:
             token = None
         elif skip_token_check:
@@ -925,7 +924,7 @@ class Client:
 
         try:
             yield _transport.Session(self._pool(), headers, self.timeout)
-        except httpx.HTTPError as exc:
+        except httpx2.HTTPError as exc:
             raise SweatStackConnectionError(str(exc)) from exc
 
     def _request(
@@ -935,7 +934,7 @@ class Client:
         *,
         auth: bool = True,
         **kwargs: Any,
-    ) -> httpx.Response:
+    ) -> httpx2.Response:
         """Send one request, retrying when safe, and raise the typed exception for an error status.
 
         Every resource method that makes a single request goes through here. Retries follow
@@ -982,7 +981,7 @@ class Client:
             waited += wait
             attempt += 1
 
-    def _raise_for_status(self, response: httpx.Response) -> None:
+    def _raise_for_status(self, response: httpx2.Response) -> None:
         if response.is_success:
             return
 
@@ -1009,7 +1008,7 @@ class Client:
         raise SweatStackAPIError(**common)
 
     @staticmethod
-    def _parse_error_body(response: httpx.Response) -> dict | str | None:
+    def _parse_error_body(response: httpx2.Response) -> dict | str | None:
         try:
             return response.json()
         except Exception:

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/exceptions.py

@@ -1,7 +1,7 @@
 """Typed exception hierarchy for the SweatStack client.
 
 This module defines all exceptions raised by the SweatStack library.
-No httpx types are exposed — this is the public error contract.
+No HTTP-library types are exposed — this is the public error contract.
 """
 
 

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/fastapi/dependencies.py

@@ -6,11 +6,11 @@ import hashlib
 import logging
 import time
 from dataclasses import dataclass
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from typing import Annotated, NoReturn
 from urllib.parse import quote
 
-import httpx
+import httpx2
 from fastapi import Depends, HTTPException, Request, Response
 
 from .. import _transport
@@ -37,7 +37,7 @@ TOKEN_EXPIRY_MARGIN = 5
 # endpoint is normally sub-second; 10 seconds is generous enough to
 # absorb a one-off spike but tight enough that a hung server doesn't
 # pin a threadpool worker for minutes.
-REFRESH_HTTP_TIMEOUT = httpx.Timeout(10.0, connect=5.0)
+REFRESH_HTTP_TIMEOUT = httpx2.Timeout(10.0, connect=5.0)
 
 # Maximum time to wait for the per-session refresh lock. Set above
 # ``REFRESH_HTTP_TIMEOUT`` plus a small slack so that under normal
@@ -103,7 +103,7 @@ def _is_token_expiring(token: str) -> bool:
 def _extract_expiry(access_token: str) -> datetime:
     """Extract expiry time from JWT access token."""
     body = decode_jwt_body(access_token)
-    return datetime.fromtimestamp(body["exp"], tz=timezone.utc)
+    return datetime.fromtimestamp(body["exp"], tz=UTC)
 
 
 def _refresh_access_token(

{sweatstack-0.95.0 → sweatstack-0.97.0}/src/sweatstack/fastapi/routes.py

@@ -6,15 +6,16 @@ import base64
 import json
 import logging
 import secrets
-from urllib.parse import urlencode, urlparse
+from urllib.parse import urlparse
 
-import httpx
+import httpx2
 from fastapi import APIRouter, FastAPI, HTTPException, Request, Response
 from fastapi.responses import RedirectResponse
 
 from .. import _transport
 from ..constants import DEFAULT_URL
 from ..exceptions import SweatStackAPIError, SweatStackConnectionError
+from ..resources.oauth import _build_authorization_url
 from ..utils import decode_jwt_body
 from .config import get_config
 from .dependencies import _extract_expiry
@@ -107,7 +108,7 @@ def _fetch_delegated_token(
             headers={"Authorization": f"Bearer {principal_tokens.access_token}"},
             json=body,
         )
-    except httpx.HTTPError as exc:
+    except httpx2.HTTPError as exc:
         raise SweatStackConnectionError(str(exc)) from exc
 
     if response.status_code == 403:
@@ -162,14 +163,13 @@ def create_router() -> APIRouter:
         state = create_state(validated_next)
 
         # Build authorization URL
-        params = {
-            "client_id": config.client_id,
-            "redirect_uri": config.redirect_uri,
-            "scope": " ".join(config.scopes),
-            "state": state,
-            "prompt": "none",
-        }
-        auth_url = f"{DEFAULT_URL}/oauth/authorize?{urlencode(params)}"
+        auth_url = _build_authorization_url(
+            DEFAULT_URL,
+            client_id=config.client_id,
+            redirect_uri=config.redirect_uri,
+            scope=" ".join(config.scopes),
+            state=state,
+        )
 
         # Set state cookie and redirect
         response = RedirectResponse(url=auth_url, status_code=302)
@@ -222,7 +222,7 @@ def create_router() -> APIRouter:
                     "redirect_uri": config.redirect_uri,
                 },
             )
-        except httpx.HTTPError as e:
+        except httpx2.HTTPError as e:
             logger.error("Token exchange error: %s", e)
             return error_redirect("token_exchange_failed")