tba-router-session-login 0.4.0.dev2__py3-none-any.whl

tba_router_session_login/__init__.py

@@ -0,0 +1,19 @@
+"""Interactive session-login HTTP carrier."""
+
+from .binding import (
+    CredsIn,
+    DatabaseDependency,
+    LoginRequestTarget,
+    RequiredPasswordChangeIn,
+    build_login_router,
+    include_login_endpoint,
+)
+
+__all__ = [
+    "CredsIn",
+    "DatabaseDependency",
+    "LoginRequestTarget",
+    "RequiredPasswordChangeIn",
+    "build_login_router",
+    "include_login_endpoint",
+]

tba_router_session_login/binding.py

@@ -0,0 +1,97 @@
+"""HTTP carrier binding for interactive identity session login."""
+
+from __future__ import annotations
+
+from collections.abc import Awaitable, Callable
+from typing import Any, TypeAlias
+
+from pydantic import BaseModel, constr
+from tigrbl import Depends, Request, TigrblApp, TigrblRouter
+from tba_protocol_oauth.schemas import TokenPair
+
+
+class CredsIn(BaseModel):
+    identifier: constr(strip_whitespace=True, min_length=3, max_length=120)
+    password: constr(min_length=8, max_length=256)
+
+
+class RequiredPasswordChangeIn(BaseModel):
+    current_password: constr(min_length=8, max_length=256)
+    new_password: constr(min_length=8, max_length=256)
+
+
+DatabaseDependency: TypeAlias = Callable[..., object]
+LoginRequestTarget: TypeAlias = Callable[..., Any | Awaitable[Any]]
+
+
+def build_login_router(
+    *,
+    login_request: LoginRequestTarget,
+    get_db: DatabaseDependency,
+    required_password_change_request: LoginRequestTarget | None = None,
+) -> TigrblRouter:
+    """Build the POST login carrier around injected runtime orchestration."""
+
+    router = TigrblRouter()
+
+    @router.route("/login", methods=["POST"], response_model=TokenPair)
+    async def login(
+        request: Request,
+        creds: CredsIn | None = None,
+        db: object = Depends(get_db),
+    ) -> Any:
+        if creds is None:
+            creds = CredsIn.model_validate(await request.json() or {})
+        return await login_request(
+            request=request,
+            db=db,
+            identifier=creds.identifier,
+            password=creds.password,
+        )
+
+    if required_password_change_request is not None:
+        @router.route("/login/password-change", methods=["POST"])
+        async def required_password_change(
+            request: Request,
+            payload: RequiredPasswordChangeIn | None = None,
+            db: object = Depends(get_db),
+        ) -> Any:
+            if payload is None:
+                payload = RequiredPasswordChangeIn.model_validate(
+                    await request.json() or {}
+                )
+            return await required_password_change_request(
+                request=request,
+                db=db,
+                current_password=payload.current_password,
+                new_password=payload.new_password,
+            )
+
+    return router
+
+
+def include_login_endpoint(
+    app: TigrblApp,
+    router: TigrblRouter,
+    *,
+    enabled: bool = True,
+) -> None:
+    """Mount the login carrier once when selected by composition."""
+
+    routes = getattr(getattr(app, "router", None), "routes", ())
+    if enabled and not any(
+        (getattr(route, "path", None) or getattr(route, "path_template", None))
+        == "/login"
+        for route in routes
+    ):
+        app.include_router(router)
+
+
+__all__ = [
+    "CredsIn",
+    "DatabaseDependency",
+    "LoginRequestTarget",
+    "RequiredPasswordChangeIn",
+    "build_login_router",
+    "include_login_endpoint",
+]

tba_router_session_login/py.typed

@@ -0,0 +1 @@
+# Marker file for PEP 561 typed-package discovery.

tba_router_session_login-0.4.0.dev2.dist-info/METADATA

@@ -0,0 +1,25 @@
+Metadata-Version: 2.4
+Name: tba-router-session-login
+Version: 0.4.0.dev2
+Summary: HTTP carrier binding for interactive identity session login.
+License-Expression: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: pydantic (>=2.0)
+Requires-Dist: tba-protocol-oauth (==0.4.0.dev2)
+Requires-Dist: tigrbl (==0.4.5.dev8)
+Description-Content-Type: text/markdown
+
+# tba-router-session-login
+
+HTTP carrier binding for interactive username/password session login.
+
+This package owns the credential request schema, POST route, and dependency
+materialization. Authentication, session creation, token issuance, cookies,
+audit, and durability are injected by runtime composition.
+

tba_router_session_login-0.4.0.dev2.dist-info/RECORD

@@ -0,0 +1,6 @@
+tba_router_session_login/__init__.py,sha256=fb9d3TACi7xlgGgCGLSFu8bFdqzPntHRChc1FN0bErE,385
+tba_router_session_login/binding.py,sha256=Xp1XfGZ2ZLaHCY_SoYCwK5KlY54QSfiFDDECTQAXXaw,2916
+tba_router_session_login/py.typed,sha256=RriHiC6lbKUoB0lG-HLnxVlO_73PQ5h-MiTyy6m1THA,51
+tba_router_session_login-0.4.0.dev2.dist-info/METADATA,sha256=SVUWj4ql5CwNE71ScAtRm5LfX4etveI-VhAA55LqDkc,977
+tba_router_session_login-0.4.0.dev2.dist-info/WHEEL,sha256=L-WvLdSBvJWHXv5zrQxDvNRnIgoBzLUpcbuiw19KCuQ,88
+tba_router_session_login-0.4.0.dev2.dist-info/RECORD,,

tba_router_session_login-0.4.0.dev2.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.5.0
+Root-Is-Purelib: true
+Tag: py3-none-any