tba-concrete-claim-authorization-context 0.4.0.dev2__tar.gz

tba_concrete_claim_authorization_context-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,13 @@
+Metadata-Version: 2.4
+Name: tba-concrete-claim-authorization-context
+Version: 0.4.0.dev2
+Summary: Standalone draft authorization context (actx) claim implementation.
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-bases-claim (==0.4.0.dev2)
+Requires-Dist: tba-primitives-identity (==0.4.0.dev2)

tba_concrete_claim_authorization_context-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,16 @@
+[project]
+name = "tba-concrete-claim-authorization-context"
+version = "0.4.0.dev2"
+description = "Standalone draft authorization context (actx) claim implementation."
+requires-python = ">=3.10,<3.15"
+dependencies = [
+    "tba-primitives-identity==0.4.0.dev2",
+    "tba-bases-claim==0.4.0.dev2",
+]
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_concrete_claim_authorization_context", from = "src" }]

tba_concrete_claim_authorization_context-0.4.0.dev2/src/tba_concrete_claim_authorization_context/__init__.py

@@ -0,0 +1,37 @@
+"""Draft generic DPoP authorization context; no assigned numeric CWT label."""
+
+from collections.abc import Mapping
+
+from tba_bases_claim import ClaimBase
+from tba_primitives_identity import ClaimType, ClaimValueType
+
+
+class AuthorizationContextClaim(ClaimBase):
+    claim_name = "actx"
+    default_claim_type = ClaimType.AUTHORIZATION
+    default_value_type = ClaimValueType.JSON_OBJECT
+    default_standards = ("draft-nandakumar-moq-generic-dpop-proof-00",)
+
+    @classmethod
+    def validate_value(cls, value):
+        if not isinstance(value, Mapping) or not all(isinstance(key, str) for key in value):
+            raise ValueError("actx must be an object with string keys")
+        if not isinstance(value.get("type"), str) or not value["type"]:
+            raise ValueError("actx type must be a non-empty string")
+
+    def to_cwt_value(self, *, field_labels=None):
+        """Encode context fields using an explicit protocol-specific label map."""
+        labels = dict(field_labels or {})
+        if "type" in labels or 0 in labels.values():
+            raise ValueError("actx key 0 is reserved for type")
+        if any(not isinstance(k, str) or isinstance(v, bool) or not isinstance(v, int)
+               for k, v in labels.items()) or len(set(labels.values())) != len(labels):
+            raise ValueError("actx field labels must be unique integers")
+        missing = set(self.value) - {"type"} - labels.keys()
+        if missing:
+            raise ValueError("actx protocol fields require explicit integer labels")
+        return {0 if key == "type" else labels[key]: value
+                for key, value in self.value.items()}
+
+
+__all__ = ["AuthorizationContextClaim"]