tba-storage-certificate 0.4.0.dev2__tar.gz

tba_storage_certificate-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,22 @@
+Metadata-Version: 2.4
+Name: tba-storage-certificate
+Version: 0.4.0.dev2
+Summary: Owned certificate identity database tables and migrations.
+License: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-primitives-identity[storage] (>=0.4.0.dev2)
+Requires-Dist: tigrbl (>=0.4.4.dev1,<0.5)
+Requires-Dist: tigrbl-migrations (>=0.4.5.dev4)
+Description-Content-Type: text/markdown
+
+# tba-storage-certificate
+
+Owns the `tigrbl.identity.storage.certificate` schema component.
+

tba_storage_certificate-0.4.0.dev2/README.md

@@ -0,0 +1,3 @@
+# tba-storage-certificate
+
+Owns the `tigrbl.identity.storage.certificate` schema component.

tba_storage_certificate-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,20 @@
+[project]
+name = "tba-storage-certificate"
+version = "0.4.0.dev2"
+description = "Owned certificate identity database tables and migrations."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = { text = "Apache-2.0" }
+dependencies = [
+    "tigrbl>=0.4.4.dev1,<0.5",
+    "tigrbl-migrations>=0.4.5.dev4",
+    "tba-primitives-identity[storage]>=0.4.0.dev2",
+]
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_storage_certificate", from = "src" }]
+include = ["src/tba_storage_certificate/component.toml"]

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/__init__.py

@@ -0,0 +1,7 @@
+"""Standalone identity storage component."""
+
+from .manifest import MANIFEST, load_manifest
+from .tables import *  # noqa: F401,F403
+from .tables import TABLE_MODEL_BY_NAME, TABLE_MODEL_BY_TABLENAME, TABLE_MODELS
+
+__all__ = ["MANIFEST", "load_manifest", "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME"] + [model.__name__ for model in TABLE_MODELS]

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/component.toml

@@ -0,0 +1,29 @@
+manifest_version = "1.0.0"
+
+[component]
+id = "tigrbl.identity.storage.certificate"
+distribution = "tba-storage-certificate"
+import_root = "tba_storage_certificate"
+
+[schema]
+contract = "1.0.0"
+migration_head = "a7e704e3-722e-5a59-92a6-9825004d8817"
+migrations_package = "tba_storage_certificate.migrations.versions"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.certificate:table:certificate_records"
+kind = "table"
+physical_name = "authn.certificate_records"
+model = "tba_storage_certificate.tables:CertificateRecord"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.certificate:table:trust_anchors"
+kind = "table"
+physical_name = "authn.trust_anchors"
+model = "tba_storage_certificate.tables:TrustAnchor"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.certificate:table:certificate_status_snapshots"
+kind = "table"
+physical_name = "authn.certificate_status_snapshots"
+model = "tba_storage_certificate.tables:CertificateStatusSnapshot"

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/manifest.py

@@ -0,0 +1,9 @@
+"""Installed component manifest access."""
+from importlib.resources import as_file, files
+from tigrbl_migrations import StorageManifest
+
+def load_manifest() -> StorageManifest:
+    with as_file(files(__package__).joinpath("component.toml")) as path:
+        return StorageManifest.from_toml(path)
+
+MANIFEST = load_manifest()

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/migrations/versions/a7e704e3_722e_5a59_92a6_9825004d8817_initial_schema.py

@@ -0,0 +1,23 @@
+"""Initial owned schema for tigrbl.identity.storage.certificate."""
+from tigrbl_migrations import Migration
+from tba_storage_certificate.tables import TABLE_MODELS
+
+REVISION = "a7e704e3-722e-5a59-92a6-9825004d8817"
+
+def upgrade(connection):
+    for model in TABLE_MODELS:
+        model.__table__.create(bind=connection, checkfirst=True)
+
+def downgrade(connection):
+    for model in reversed(TABLE_MODELS):
+        model.__table__.drop(bind=connection, checkfirst=True)
+
+MIGRATION = Migration(
+    component="tigrbl.identity.storage.certificate",
+    revision=REVISION,
+    parents=(),
+    kind="standard",
+    reversible=True,
+    upgrade=upgrade,
+    downgrade=downgrade,
+)

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/tables/__init__.py

@@ -0,0 +1,14 @@
+"""Owned mapped-table inventory."""
+
+from .certificate_state import CertificateRecord, TrustAnchor, CertificateStatusSnapshot
+
+TABLE_MODELS = (
+    CertificateRecord,
+    TrustAnchor,
+    CertificateStatusSnapshot,
+)
+TABLE_MODEL_BY_NAME = {model.__name__: model for model in TABLE_MODELS}
+TABLE_MODEL_BY_TABLENAME = {model.__tablename__: model for model in TABLE_MODELS}
+__all__ = [model.__name__ for model in TABLE_MODELS] + [
+    "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME",
+]

tba_storage_certificate-0.4.0.dev2/src/tba_storage_certificate/tables/certificate_state.py

@@ -0,0 +1,82 @@
+"""Durable certificate metadata, trust anchors, and status snapshots."""
+
+from __future__ import annotations
+import datetime as dt
+from tba_primitives_identity.orm import (
+    Boolean,
+    GUIDPk,
+    JSON,
+    Mapped,
+    RestOltpTable,
+    S,
+    String,
+    TZDateTime,
+    Timestamped,
+    acol,
+)
+
+
+class CertificateRecord(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "certificate_records"
+    __table_args__ = ({"schema": "authn"},)
+    certificate_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    profile: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    subject: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    issuer: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    serial_number: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    thumbprint_sha256: Mapped[str] = acol(
+        storage=S(String(128), nullable=False, unique=True, index=True)
+    )
+    artifact_locator: Mapped[str] = acol(storage=S(String(1000), nullable=False))
+    valid_from: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    valid_until: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    key_id: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+
+
+class TrustAnchor(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "trust_anchors"
+    __table_args__ = ({"schema": "authn"},)
+    anchor_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    profile: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    subject: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    thumbprint_sha256: Mapped[str] = acol(
+        storage=S(String(128), nullable=False, index=True)
+    )
+    artifact_locator: Mapped[str] = acol(storage=S(String(1000), nullable=False))
+    constraints: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(
+        storage=S(Boolean, nullable=False, default=True, index=True)
+    )
+
+
+class CertificateStatusSnapshot(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "certificate_status_snapshots"
+    __table_args__ = ({"schema": "authn"},)
+    certificate_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    source: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    status: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    this_update: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    next_update: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    response_digest: Mapped[str] = acol(
+        storage=S(String(128), nullable=False, index=True)
+    )
+    artifact_locator: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+
+
+__all__ = ["CertificateRecord", "TrustAnchor", "CertificateStatusSnapshot"]