the37lab-authlib 0.1.1750952955__py3-none-any.whl → 0.1.1751369506__py3-none-any.whl

the37lab_authlib/auth.py

@@ -16,7 +16,29 @@ logging.basicConfig(level=logging.DEBUG)
 logger = logging.getLogger(__name__)
 
 class AuthManager:
-    def __init__(self, app=None, db_dsn=None, jwt_secret=None, oauth_config=None, id_type='integer'):
+    def __init__(self, app=None, db_dsn=None, jwt_secret=None, oauth_config=None, id_type='integer', environment_prefix=None, api_tokens=None):
+        if environment_prefix:
+            prefix = environment_prefix.upper() + '_'
+            db_dsn = os.getenv(f'{prefix}DATABASE_URL')
+            jwt_secret = os.getenv(f'{prefix}JWT_SECRET')
+            google_client_id = os.getenv(f'{prefix}GOOGLE_CLIENT_ID')
+            google_client_secret = os.getenv(f'{prefix}GOOGLE_CLIENT_SECRET')
+            oauth_config = {}
+            if google_client_id and google_client_secret:
+                oauth_config['google'] = {
+                    'client_id': google_client_id,
+                    'client_secret': google_client_secret
+                }
+            api_tokens_env = os.getenv(f'{prefix}API_TOKENS')
+            if api_tokens_env:
+                api_tokens = {}
+                for entry in api_tokens_env.split(','):
+                    if ':' in entry:
+                        key, user = entry.split(':', 1)
+                        api_tokens[key.strip()] = user.strip()
+        if api_tokens and db_dsn:
+            raise ValueError('Cannot set both api_tokens and db_dsn')
+        self.api_tokens = api_tokens or None
         self.db = Database(db_dsn, id_type=id_type) if db_dsn else None
         self.jwt_secret = jwt_secret
         self.oauth_config = oauth_config or {}
@@ -49,6 +71,18 @@ class AuthManager:
         return redirect_uri
 
     def _validate_api_token(self, api_token):
+        if self.api_tokens is not None:
+            username = self.api_tokens.get(api_token)
+            if not username:
+                raise AuthError('Invalid API token')
+            # Return a minimal user dict
+            return {
+                'id': username,
+                'username': username,
+                'email': '',
+                'real_name': username,
+                'roles': []
+            }
         try:
             parsed = ApiToken.parse_token(api_token)
             with self.db.get_cursor() as cur:

{the37lab_authlib-0.1.1750952955.dist-info → the37lab_authlib-0.1.1751369506.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: the37lab_authlib
-Version: 0.1.1750952955
+Version: 0.1.1751369506
 Summary: Python SDK for the Authlib
 Author-email: the37lab <info@the37lab.com>
 Classifier: Programming Language :: Python :: 3
@@ -39,6 +39,9 @@ A Python authentication library that provides JWT, OAuth2, and API token authent
     - [Setup](#setup)
     - [Database Setup](#database-setup)
     - [Running Tests](#running-tests)
+  - [API Token Override for Testing](#api-token-override-for-testing)
+    - [Usage](#usage)
+    - [Warning](#warning)
 
 ## Installation
 
@@ -54,6 +57,7 @@ from authlib import AuthManager
 
 app = Flask(__name__)
 
+# Option 1: Explicit configuration
 auth = AuthManager(
     app=app,
     db_dsn="postgresql://user:pass@localhost/dbname",
@@ -66,6 +70,11 @@ auth = AuthManager(
     }
 )
 
+# Option 2: Use environment variables with a prefix (e.g., AMPA_)
+# This will load:
+#   AMPA_DATABASE_URL, AMPA_JWT_SECRET, AMPA_GOOGLE_CLIENT_ID, AMPA_GOOGLE_CLIENT_SECRET
+# auth = AuthManager(app=app, environment_prefix="AMPA")
+
 @app.route("/protected")
 @auth.require_auth(roles=["admin"])
 def protected_route():
@@ -96,6 +105,7 @@ public using the `@auth.public_endpoint` decorator or
 - `oauth_config`: Dictionary of OAuth provider configurations (see below)
 - `token_expiry`: JWT token expiry time in seconds (default: 3600)
 - `refresh_token_expiry`: Refresh token expiry time in seconds (default: 2592000)
+- `environment_prefix`: If set, loads all configuration from environment variables with this prefix (e.g., `AMPA_DATABASE_URL`, `AMPA_JWT_SECRET`, `AMPA_GOOGLE_CLIENT_ID`, `AMPA_GOOGLE_CLIENT_SECRET`). Overrides other config if set.
 
 #### Example `oauth_config`:
 ```python
@@ -204,3 +214,22 @@ python -m authlib.cli db init
 ```bash
 pytest
 ```
+
+## API Token Override for Testing
+
+For testing purposes, you can bypass the database and provide a static mapping of API tokens to usernames using the `api_tokens` argument to `AuthManager` or the `{PREFIX}API_TOKENS` environment variable.
+
+### Usage
+
+- **Constructor argument:**
+  ```python
+  AuthManager(api_tokens={"token1": "user1", "token2": "user2"})
+  ```
+- **Environment variable:**
+  Set `{PREFIX}API_TOKENS` to a comma-separated list of `token:username` pairs, e.g.:
+  ```
+  export MYAPP_API_TOKENS="token1:user1,token2:user2"
+  ```
+  Replace `MYAPP` with your environment prefix.
+
+**Warning:** This method is intended only for testing and development. Do not use this approach in production environments.

{the37lab_authlib-0.1.1750952955.dist-info → the37lab_authlib-0.1.1751369506.dist-info}/RECORD

@@ -1,10 +1,10 @@
 the37lab_authlib/__init__.py,sha256=cFVTWL-0YIMqwOMVy1P8mOt_bQODJp-L9bfp2QQ8CTo,132
-the37lab_authlib/auth.py,sha256=VXyq539H2KlnbB4l1HZXKNVdagBXSFi1PS8TomU2Zt4,21204
+the37lab_authlib/auth.py,sha256=1BDYWaxDFA_ND8hHg4V2r6mPkaG0c4TRcA9bJjL_A2o,22755
 the37lab_authlib/db.py,sha256=fTXxnfju0lmbFGPVbXpTMeDmJMeBgURVZTndyxyRyCc,2734
 the37lab_authlib/decorators.py,sha256=L-gJUUwDUT2JXTptQ6XEey1LkI5RprbqzEfArWI7F8Y,1305
 the37lab_authlib/exceptions.py,sha256=mdplK5sKNtagPAzSGq5NGsrQ4r-k03DKJBKx6myWwZc,317
 the37lab_authlib/models.py,sha256=-PlvQlHGIsSdrH0H9Cdh_vTPlltGV8G1Z1mmGQvAg9Y,3422
-the37lab_authlib-0.1.1750952955.dist-info/METADATA,sha256=caproUvYgW08eZbp5k1gixqNwCRp-YogYUFhyItuGHc,6352
-the37lab_authlib-0.1.1750952955.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-the37lab_authlib-0.1.1750952955.dist-info/top_level.txt,sha256=6Jmxw4UeLrhfJXgRKbXWY4OhxRSaMs0dKKhNCGWWSwc,17
-the37lab_authlib-0.1.1750952955.dist-info/RECORD,,
+the37lab_authlib-0.1.1751369506.dist-info/METADATA,sha256=F0RyaxHbxv3FIwm_OP3EjykaJVIlwgllcRxnWOqNITo,7686
+the37lab_authlib-0.1.1751369506.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+the37lab_authlib-0.1.1751369506.dist-info/top_level.txt,sha256=6Jmxw4UeLrhfJXgRKbXWY4OhxRSaMs0dKKhNCGWWSwc,17
+the37lab_authlib-0.1.1751369506.dist-info/RECORD,,