swt 0.2.0__tar.gz → 0.5.0__tar.gz

{swt-0.2.0 → swt-0.5.0}/PKG-INFO

@@ -1,23 +1,26 @@
-Metadata-Version: 2.1
+Metadata-Version: 2.4
 Name: swt
-Version: 0.2.0
+Version: 0.5.0
 Summary: Simple Web Token library for Python
-Home-page: https://github.com/davidolrik/python-swt
 License: MIT
+License-File: LICENSE
 Keywords: swt
 Author: David Jack Wange Olrik
 Author-email: david@olrik.dk
-Requires-Python: >=3.7,<4.0
+Requires-Python: >=3.13,<4.0
 Classifier: Development Status :: 4 - Beta
 Classifier: Intended Audience :: Developers
 Classifier: License :: OSI Approved :: MIT License
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.7
-Classifier: Programming Language :: Python :: 3.8
-Classifier: Programming Language :: Python :: 3.9
-Requires-Dist: poetry-version (>=0.1.5,<0.2.0)
-Requires-Dist: pycryptodome (>=3.9.7,<4.0.0)
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Provides-Extra: docs
+Requires-Dist: poetry-version (>=0.2.0,<0.3.0)
+Requires-Dist: pycryptodome (>=3.23.0,<4.0.0)
+Requires-Dist: sphinx (>=9.1.0,<10.0.0) ; extra == "docs"
+Requires-Dist: sphinx_rtd_theme (>=3.1.0,<4.0.0) ; extra == "docs"
 Project-URL: Documentation, https://python-swt.readthedocs.io/
+Project-URL: Homepage, https://github.com/davidolrik/python-swt
 Project-URL: Repository, https://github.com/davidolrik/python-swt
 Description-Content-Type: text/markdown
 

{swt-0.2.0 → swt-0.5.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "swt"
-version = "0.2.0"
+version = "0.5.0"
 description = "Simple Web Token library for Python"
 authors = ["David Jack Wange Olrik <david@olrik.dk>"]
 license = "MIT"
@@ -18,23 +18,27 @@ packages = [
 ]
 
 [tool.poetry.dependencies]
-python = "^3.7|^3.8"
-pycryptodome = "^3.9.7"
-poetry-version = "^0.1.5"
-
-[tool.poetry.dev-dependencies]
-pytest = "^6.0.1"
-coverage = {extras = ["toml"], version = "^5.1"}
-pytest-cov = "^2.9.0"
-sphinx = "^3.0.4"
-sphinx_rtd_theme = "^0.4.3"
-towncrier = "^19.2.0"
-black = {version = "^19.10b0", allow-prereleases = true}
-pytest-black = "^0.3.10"
-
-[tool.pytest.ini_options]
-minversion = "6.0"
-addopts = "--cov --cov-report=xml --black"
+python = ">=3.13,<4.0"
+pycryptodome = "^3.23.0"
+poetry-version = "^0.2.0"
+sphinx = {version = "^9.1.0", optional = true}
+sphinx_rtd_theme = {version = "^3.1.0", optional = true}
+
+[tool.poetry.extras]
+docs = ["sphinx", "sphinx_rtd_theme"]
+
+[tool.poetry.group.dev.dependencies]
+pytest = "^9.0.2"
+coverage = {extras = ["toml"], version = "^7.13.4"}
+pytest-cov = "^7.0.0"
+sphinx = "^9.1.0"
+sphinx_rtd_theme = "^3.1.0"
+towncrier = "^25.8.0"
+pytest-ruff = "^0.5"
+
+[tool.pytest]
+minversion = "9.0"
+addopts = ["--cov", "--cov-report=xml", "--ruff", "--ruff-format"]
 
 [tool.coverage.paths]
 source = ["src", "*/site-packages"]

{swt-0.2.0 → swt-0.5.0}/src/swt/__init__.py

@@ -198,7 +198,7 @@ class SWT_RSA_SHA256(SWT):
 
     @property
     def is_signed(self) -> bool:
-        # Give on beforehand if we don't have a signature
+        # Give up on beforehand if we don't have a signature
         if not self._token_signature:
             return False
 

swt-0.2.0/setup.py

@@ -1,34 +0,0 @@
-# -*- coding: utf-8 -*-
-from setuptools import setup
-
-package_dir = \
-{'': 'src'}
-
-packages = \
-['swt']
-
-package_data = \
-{'': ['*']}
-
-install_requires = \
-['poetry-version>=0.1.5,<0.2.0', 'pycryptodome>=3.9.7,<4.0.0']
-
-setup_kwargs = {
-    'name': 'swt',
-    'version': '0.2.0',
-    'description': 'Simple Web Token library for Python',
-    'long_description': '# Python SWT Library\n\n![Python version](https://img.shields.io/pypi/pyversions/swt)\n![PyPI version](https://img.shields.io/pypi/v/swt)\n![format](https://img.shields.io/pypi/format/swt)\n![status](https://img.shields.io/pypi/status/swt)\n![license](https://img.shields.io/pypi/l/swt)\n\nPython library for handling `Simple Web Tokens`.\n\n## Documentation\n\nYou can find the docs [here](https://python-swt.readthedocs.io/).\n\n## Caveats\n\n- Please use `pycryptodome` and not `pycrypto` as the later is unmaintained and\n  broken on python 3.8+\n- Currently only supports RSA-SHA256\n\n## TODO\n\n- Add support HMAC SHA256\n- Add  Raises: KeyNotFoundError to sign()\n',
-    'author': 'David Jack Wange Olrik',
-    'author_email': 'david@olrik.dk',
-    'maintainer': None,
-    'maintainer_email': None,
-    'url': 'https://github.com/davidolrik/python-swt',
-    'package_dir': package_dir,
-    'packages': packages,
-    'package_data': package_data,
-    'install_requires': install_requires,
-    'python_requires': '>=3.7,<4.0',
-}
-
-
-setup(**setup_kwargs)

swt-0.2.0/src/swt/__init__.py,cover

@@ -1,84 +0,0 @@
-> __version__ = '0.1.0'
-  
-> from Crypto.PublicKey import RSA
-> from Crypto.Signature import PKCS1_v1_5
-> from Crypto.Hash import SHA256
-> from urllib.parse import parse_qsl, unquote
-> from base64 import b64decode
-> import time
-> from os import listdir, getcwd
-> from pathlib import Path
-  
-  
-> class SWT:
->     def __init__(self, token=None):
-          # Assume the worst
-!         self.token_is_signed = False
-!         self.token_is_expired = True
-  
-          # Internal data
-!         self.token_raw = None
-!         self.token_claims = {}
-  
-          # If called with a token, set and verify
-!         if token is not None:
-!             self.token(token)
-  
->     @property
->     def is_valid(self):
-!         return not self.token_is_expired and self.token_is_signed
-  
->     @property
->     def is_expired(self):
-!         return self.token_is_expired
-  
->     @property
->     def is_signed(self):
-!         return self.token_is_signed
-  
->     def __bool__(self):
-!         return self.is_valid
-  
->     def __str__(self):
-!         value = (
-!             f"SWT:[Issuer={self.token_claims.get('Issuer','unknown')} sub={self.token_claims.get('sub','unknown')} "
-!             f"valid={self.is_valid} signed={self.is_signed} expired={self.is_expired} "
-!             f"expire_date={time.strftime('%Y-%m-%dT%H:%M:%S%z', time.localtime(int(self.token_claims.get('ExpiresOn','0'))))}]"
-!         )
-!         return value
-  
->     def token(self, token):
-          # Allow caller to take http header and parse it directly to us
-!         self.token_raw = token.replace('Bearer ', '')
-  
-          # Split token into data and signature
-!         self.token_data, self.token_signature = self.token_raw.rsplit(
-!             '&RSASHA256=')
-!         print(f"Data: {self.token_data}")
-!         print(f"Signature: {self.token_signature}")
-  
-          # Convert to internal format
-!         self.token_signature_raw = b64decode(unquote(self.token_signature))
-!         self.token_claims = dict(parse_qsl(self.token_data))
-  
-          # Make sure we have a signature
-!         if self.token_signature is None or not self.token_signature:
-!             self.signature_is_valid = False
-!             return
-  
-          # Load public key
-!         self.public_key = Path(
-!             f'stskeys/{self.token_claims["Issuer"]}-publickey.pem').read_text()
-  
-          # Validate signature
-!         rsa_key = RSA.importKey(self.public_key)
-!         signer = PKCS1_v1_5.new(rsa_key)
-!         digest = SHA256.new(self.token_data.encode('utf8'))
-!         if signer.verify(digest, self.token_signature_raw):
-!             self.token_is_signed = True
-!             print("Signature is valid")
-  
-          # Check expire date
-!         if int(self.token_claims.get('ExpiresOn', 0)) < int(time.time()):
-!             print("Token is expired")
-!             self.token_is_expired = True