tastytrade 11.0.2__tar.gz → 11.0.4__tar.gz

{tastytrade-11.0.2 → tastytrade-11.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tastytrade
-Version: 11.0.2
+Version: 11.0.4
 Summary: An unofficial, sync/async SDK for Tastytrade!
 Project-URL: Homepage, https://github.com/tastyware/tastytrade
 Project-URL: Documentation, https://tastyworks-api.rtfd.io

{tastytrade-11.0.2 → tastytrade-11.0.4}/docs/sessions.rst

@@ -13,15 +13,6 @@ Generating an initial refresh token
 
 In order to generate an initial refresh token, you have two options. The easiest way is to simply generate one from Tastytrade's website: go to OAuth Applications > Manage > Create Grant to get a new refresh token, **which you should also save**.
 
-The other option (which is actually the only option for sandbox accounts) is to run this helper code:
-
-.. code-block:: python
-
-   from tastytrade.oauth import login
-   login(is_test=True)
-
-This will open up a web interface in your browser where you'll be prompted to paste your client ID and client secret. These credentials will then be used to connect your application to Tastytrade. After following the steps in your browser, you should see your new refresh token in the browser and in the console.
-
 At this point, OAuth is now setup correctly! Doing these steps once is sufficient for **indefinite usage** of ``Session`` for authentication to the API, since refresh tokens never expire. From now on you can simply authenticate with your client secret and refresh token.
 
 Creating a session

{tastytrade-11.0.2 → tastytrade-11.0.4}/tastytrade/__init__.py

@@ -4,7 +4,7 @@ API_URL = "https://api.tastyworks.com"
 API_VERSION = "20251101"
 CERT_URL = "https://api.cert.tastyworks.com"
 VAST_URL = "https://vast.tastyworks.com"
-VERSION = "11.0.2"
+VERSION = "11.0.4"
 
 __version__ = VERSION
 version_str: str = f"tastyware/tastytrade:v{VERSION}"

{tastytrade-11.0.2 → tastytrade-11.0.4}/tastytrade/order.py

@@ -254,6 +254,8 @@ class NewOrder(TastytradeData):
     preflight_id: str | None = None
     rules: OrderRule | None = None
     advanced_instructions: AdvancedInstructions | None = None
+    #: External identifier for the order, used to track orders across systems
+    external_identifier: str | None = None
 
     @computed_field  # type: ignore[misc]
     @property
@@ -316,8 +318,8 @@ class PlacedOrder(TastytradeData):
     cancelled_at: datetime | None = None
     cancel_user_id: str | None = None
     cancel_username: str | None = None
-    replacing_order_id: str | None = None
-    replaces_order_id: str | None = None
+    replacing_order_id: int | None = None
+    replaces_order_id: int | None = None
     in_flight_at: datetime | None = None
     live_at: datetime | None = None
     received_at: datetime | None = None
@@ -330,6 +332,8 @@ class PlacedOrder(TastytradeData):
     preflight_id: str | int | None = None
     order_rule: OrderRule | None = None
     source: str | None = None
+    #: External identifier for the order, used to track orders across systems
+    external_identifier: str | None = None
 
     @model_validator(mode="before")
     @classmethod

{tastytrade-11.0.2 → tastytrade-11.0.4}/tastytrade/session.py

@@ -9,8 +9,8 @@ from typing_extensions import Self
 
 from tastytrade import API_URL, API_VERSION, CERT_URL, logger
 from tastytrade.utils import (
-    TZ,
     TastytradeData,
+    now_in_new_york,
     validate_and_parse,
     validate_response,
 )
@@ -274,11 +274,9 @@ class Session:
         #: Refresh token for the user
         self.refresh_token = refresh_token
         # The headers to use for API requests
-        headers = {
-            "Accept": "application/json",
-            "Accept-Version": API_VERSION,
-            "Content-Type": "application/json",
-        }
+        headers = {"Accept": "application/json", "Content-Type": "application/json"}
+        if not is_test:  # not accepted in sandbox
+            headers["Accept-Version"] = API_VERSION
         #: httpx client for sync requests
         self.sync_client = Client(
             base_url=(CERT_URL if is_test else API_URL), headers=headers, proxy=proxy
@@ -288,7 +286,7 @@ class Session:
             base_url=self.sync_client.base_url, headers=headers, proxy=proxy
         )
         #: expiration for streamer token
-        self.streamer_expiration = datetime.now(TZ)
+        self.streamer_expiration = now_in_new_york()
         self.refresh()
 
     def _streamer_refresh(self) -> None:
@@ -325,14 +323,14 @@ class Session:
         self.session_token = data["access_token"]
         token_lifetime: int = data.get("expires_in", 900)
         #: expiration for session token
-        self.session_expiration = datetime.now(TZ) + timedelta(seconds=token_lifetime)
+        self.session_expiration = now_in_new_york() + timedelta(seconds=token_lifetime)
         logger.debug(f"Refreshed token, expires in {token_lifetime}ms")
         auth_headers = {"Authorization": f"Bearer {self.session_token}"}
         # update the httpx clients with the new token
         self.sync_client.headers.update(auth_headers)
         self.async_client.headers.update(auth_headers)
         # update the streamer token if necessary
-        if self.streamer_expiration < self.session_expiration:
+        if not self.is_test and self.streamer_expiration < self.session_expiration:
             self._streamer_refresh()
 
     async def a_refresh(self) -> None:
@@ -357,14 +355,14 @@ class Session:
         # update the relevant tokens
         self.session_token = data["access_token"]
         token_lifetime: int = data.get("expires_in", 900)
-        self.session_expiration = datetime.now(TZ) + timedelta(token_lifetime)
+        self.session_expiration = now_in_new_york() + timedelta(token_lifetime)
         logger.debug(f"Refreshed token, expires in {token_lifetime}ms")
         auth_headers = {"Authorization": f"Bearer {self.session_token}"}
         # update the httpx clients with the new token
         self.sync_client.headers.update(auth_headers)
         self.async_client.headers.update(auth_headers)
         # update the streamer token if necessary
-        if self.streamer_expiration < self.session_expiration:
+        if not self.is_test and self.streamer_expiration < self.session_expiration:
             # Pull streamer tokens and urls
             data = await self._a_get("/api-quote-tokens")
             # Auth token for dxfeed websocket

{tastytrade-11.0.2 → tastytrade-11.0.4}/uv.lock

@@ -1368,15 +1368,15 @@ wheels = [
 
 [[package]]
 name = "pyright"
-version = "1.1.406"
+version = "1.1.407"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "nodeenv" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/f7/16/6b4fbdd1fef59a0292cbb99f790b44983e390321eccbc5921b4d161da5d1/pyright-1.1.406.tar.gz", hash = "sha256:c4872bc58c9643dac09e8a2e74d472c62036910b3bd37a32813989ef7576ea2c", size = 4113151, upload-time = "2025-10-02T01:04:45.488Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a6/1b/0aa08ee42948b61745ac5b5b5ccaec4669e8884b53d31c8ec20b2fcd6b6f/pyright-1.1.407.tar.gz", hash = "sha256:099674dba5c10489832d4a4b2d302636152a9a42d317986c38474c76fe562262", size = 4122872, upload-time = "2025-10-24T23:17:15.145Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/f6/a2/e309afbb459f50507103793aaef85ca4348b66814c86bc73908bdeb66d12/pyright-1.1.406-py3-none-any.whl", hash = "sha256:1d81fb43c2407bf566e97e57abb01c811973fdb21b2df8df59f870f688bdca71", size = 5980982, upload-time = "2025-10-02T01:04:43.137Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/93/b69052907d032b00c40cb656d21438ec00b3a471733de137a3f65a49a0a0/pyright-1.1.407-py3-none-any.whl", hash = "sha256:6dd419f54fcc13f03b52285796d65e639786373f433e243f8b94cf93a7444d21", size = 5997008, upload-time = "2025-10-24T23:17:13.159Z" },
 ]
 
 [[package]]
@@ -1549,6 +1549,8 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/42/cd/85b422d24ee2096eaf6faa360c95ef9bdb59097d19b9624cebce4dd9bc2a/ruamel.yaml.clib-0.2.14-cp39-cp39-musllinux_1_2_x86_64.whl", hash = "sha256:808c7190a0fe7ae7014c42f73897cf8e9ef14ff3aa533450e51b1e72ec5239ad", size = 725028, upload-time = "2025-09-22T19:51:19.782Z" },
     { url = "https://files.pythonhosted.org/packages/4d/ac/99e6e0ea2584f84f447069d0187fe411e9b5deb7e3ddecda25001cfc7a95/ruamel.yaml.clib-0.2.14-cp39-cp39-win32.whl", hash = "sha256:6d5472f63a31b042aadf5ed28dd3ef0523da49ac17f0463e10fda9c4a2773352", size = 100915, upload-time = "2025-09-22T19:51:21.764Z" },
     { url = "https://files.pythonhosted.org/packages/5d/8d/846e43369658958c99d959bb7774136fff9210f9017d91a4277818ceafbf/ruamel.yaml.clib-0.2.14-cp39-cp39-win_amd64.whl", hash = "sha256:8dd3c2cc49caa7a8d64b67146462aed6723a0495e44bf0aa0a2e94beaa8432f6", size = 118706, upload-time = "2025-09-22T19:51:20.878Z" },
+    { url = "https://files.pythonhosted.org/packages/e7/cd/150fdb96b8fab27fe08d8a59fe67554568727981806e6bc2677a16081ec7/ruamel_yaml_clib-0.2.14-cp314-cp314-win32.whl", hash = "sha256:9b4104bf43ca0cd4e6f738cb86326a3b2f6eef00f417bd1e7efb7bdffe74c539", size = 102394, upload-time = "2025-11-14T21:57:36.703Z" },
+    { url = "https://files.pythonhosted.org/packages/bd/e6/a3fa40084558c7e1dc9546385f22a93949c890a8b2e445b2ba43935f51da/ruamel_yaml_clib-0.2.14-cp314-cp314-win_amd64.whl", hash = "sha256:13997d7d354a9890ea1ec5937a219817464e5cc344805b37671562a401ca3008", size = 122673, upload-time = "2025-11-14T21:57:38.177Z" },
 ]
 
 [[package]]

tastytrade-11.0.2/tastytrade/oauth.py

@@ -1,129 +0,0 @@
-import re
-import webbrowser
-from http.server import BaseHTTPRequestHandler, HTTPServer
-from urllib.parse import parse_qs
-
-import httpx
-
-PORT = 8000
-REDIRECT_URI = f"http://localhost:{PORT}"
-SCOPES = ["read", "trade", "openid"]
-
-authorize_url = "https://my.tastytrade.com/auth.html"
-token_url = "https://api.tastyworks.com/oauth/token"
-client_id = ""
-client_secret = ""
-
-
-root_page = """
-<!DOCTYPE html>
-<html lang="en-us">
-  <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>OAuth Setup</title>
-    <!-- Favicon -->
-    <link rel="icon" type="image/x-icon" href="/static/favicon.ico">
-    <link href="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css"
-          rel="stylesheet"
-          integrity="sha384-QWTKZyjpPEjISv5WaRU9OFeRpok6YctnYmDr5pNlyT2bRjXh0JMhjY6hW+ALEwIH"
-          crossorigin="anonymous">
-  </head>
-  <body>
-    <div class="container position-absolute top-50 start-50 translate-middle"
-         style="width: 400px">
-      <form method="POST">
-        <div class="row mb-3">
-          <input type="text"
-                 required
-                 placeholder="Client ID"
-                 name="client_id"
-                 class="form-control">
-        </div>
-        <div class="row mb-3">
-          <input type="password"
-                 required
-                 placeholder="Client Secret"
-                 name="client_secret"
-                 class="form-control">
-        </div>
-        <div class="row mb-3">
-          <button type="submit" class="btn btn-success">Connect</button>
-        </div>
-      </form>
-    </div>
-    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"
-            integrity="sha384-YvpcrYf0tY3lHB60NNkmXc5s9fDVZLESaAA55NDzOxhy9GkcIdslK1eN7N6jIeHz"
-            crossorigin="anonymous"></script>
-  </body>
-</html>
-""".encode()
-
-
-class RequestHandler(BaseHTTPRequestHandler):
-    def do_POST(self) -> None:
-        global client_id, client_secret
-        content_length = int(self.headers["Content-Length"])
-        raw = self.rfile.read(content_length)
-        data = parse_qs(raw.decode("utf-8"))
-        client_id = data["client_id"][0]
-        client_secret = data["client_secret"][0]
-
-        # Redirect to login page using API key submitted by user
-        self.send_response(302)
-        query_string = "&".join(
-            [
-                "response_type=code",
-                f"redirect_uri={REDIRECT_URI}",
-                f"client_id={data['client_id'][0]}",
-                f"scope={' '.join(SCOPES)}",
-            ]
-        )
-        url = f"{authorize_url}?{query_string}"
-        self.send_header("Location", url)
-        self.end_headers()
-
-    def do_GET(self) -> None:
-        global client_id, client_secret
-        # Serve root page with sign in link
-        if self.path == "/":
-            self.send_response(200)
-            self.send_header("Content-type", "text/html; charset=utf-8")
-            self.end_headers()
-            self.wfile.write(root_page)
-        else:
-            # Check if query path contains case insensitive "code="
-            code_match = re.search(r"code=(.+)", self.path, re.I)
-            if code_match and client_id and client_secret:
-                user_auth_code = code_match[1]
-                post_data = {
-                    "grant_type": "authorization_code",
-                    "client_id": client_id,
-                    "client_secret": client_secret,
-                    "redirect_uri": REDIRECT_URI,
-                    "code": user_auth_code,
-                }
-                response = httpx.post(token_url, data=post_data)
-                token_access = response.json()
-                refresh_token: str = token_access["refresh_token"]
-                print(refresh_token)
-
-                self.send_response(200)
-                self.send_header("Content-type", "text/html; charset=utf-8")
-                self.end_headers()
-                self.wfile.write(refresh_token.encode())
-
-
-def login(is_test: bool = False) -> None:
-    """
-    Starts a local HTTP server and opens the browser to OAuth login.
-    Designed for one-time use to get a refresh token.
-    """
-    global authorize_url, token_url
-    if is_test:
-        authorize_url = "https://cert-my.staging-tasty.works/auth.html"
-        token_url = "https://api.cert.tastyworks.com/oauth/token"
-    httpd = HTTPServer(("", PORT), RequestHandler)
-    print(f"Opening url: {REDIRECT_URI}")
-    webbrowser.open(REDIRECT_URI)
-    httpd.serve_forever()