tigrbl_auth 0.3.2.dev7__tar.gz → 0.3.2.dev8__tar.gz

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tigrbl_auth
-Version: 0.3.2.dev7
+Version: 0.3.2.dev8
 Summary: A Tigrbl Multi‑tenant OpenID‑Connect / OAuth2 Identity‑Provider server by Swarmauri.
 License-Expression: Apache-2.0
 License-File: LICENSE

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "tigrbl_auth"
-version = "0.3.2.dev7"
+version = "0.3.2.dev8"
 description = "A Tigrbl Multi‑tenant OpenID‑Connect / OAuth2 Identity‑Provider server by Swarmauri."
 license = "Apache-2.0"
 readme = "README.md"

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/adapters/auth_context.py

@@ -1,6 +1,6 @@
 from __future__ import annotations
 
-from tigrbl_auth.deps import Request, TIGRBL_AUTH_CONTEXT_ATTR
+from tigrbl_auth.vendor import Request, TIGRBL_AUTH_CONTEXT_ATTR
 
 
 def set_auth_context(request: Request, principal: dict | None) -> None:

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/adapters/local_adapter.py

@@ -14,7 +14,7 @@ Usage
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import AuthNProvider, Request
+from tigrbl_auth.vendor import AuthNProvider, Request
 from ..fastapi_deps import get_principal
 from ..principal_ctx import principal_var  # noqa: F401  # ensure ContextVar is initialised
 from .auth_context import set_auth_context

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/adapters/remote_adapter.py

@@ -5,7 +5,7 @@ import time
 from typing import Final
 
 import httpx
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     HTTPException,
     Request,
     Security,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/app.py

@@ -15,7 +15,7 @@ Features
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import TigrblApp
+from tigrbl_auth.vendor import TigrblApp
 import inspect
 
 from .routers.surface import surface_api

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/backends.py

@@ -26,7 +26,7 @@ from typing import Iterable, Optional
 
 from typing import TYPE_CHECKING
 
-from tigrbl_auth.deps import Select, or_, select, AsyncSession
+from tigrbl_auth.vendor import Select, or_, select, AsyncSession
 
 from .crypto import verify_pw
 from .typing import Principal

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/crypto.py

@@ -14,7 +14,7 @@ from functools import lru_cache
 from typing import Tuple
 
 import bcrypt
-from .deps import FileKeyProvider, ExportPolicy, KeyAlg, KeyClass, KeySpec, KeyUse
+from .vendor import FileKeyProvider, ExportPolicy, KeyAlg, KeyClass, KeySpec, KeyUse
 
 # ---------------------------------------------------------------------
 # Password hashing helpers

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/db.py

@@ -1,4 +1,4 @@
-from tigrbl_auth.deps import build_engine
+from tigrbl_auth.vendor import build_engine
 from .runtime_cfg import settings
 
 if settings.pg_dsn_env or (settings.pg_host and settings.pg_db and settings.pg_user):

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/fastapi_deps.py

@@ -17,7 +17,7 @@ Both helpers are **framework-thin**: they translate `AuthError` raised by
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Depends,
     Header,
     HTTPException,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/jwtoken.py

@@ -12,7 +12,7 @@ from typing import Any, Dict, Iterable, Optional, Tuple
 
 from .errors import InvalidTokenError
 
-from .deps import (
+from .vendor import (
     ExportPolicy,
     FileKeyProvider,
     JWTTokenService,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/oidc_discovery.py

@@ -11,7 +11,7 @@ import json
 from functools import lru_cache
 from typing import Any
 
-from tigrbl_auth.deps import TigrblRouter, TigrblApp
+from tigrbl_auth.vendor import TigrblRouter, TigrblApp
 
 from .rfc.rfc8414_metadata import ISSUER, JWKS_PATH
 from .runtime_cfg import settings

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/oidc_id_token.py

@@ -17,7 +17,7 @@ from datetime import timedelta
 from functools import lru_cache
 from typing import Any, Iterable, Mapping, Tuple
 
-from .deps import (
+from .vendor import (
     ExportPolicy,
     FileKeyProvider,
     JWAAlg,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/oidc_userinfo.py

@@ -13,7 +13,7 @@ from __future__ import annotations
 
 import inspect
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     TigrblRouter,
     TigrblApp,
     HTTPException,
@@ -26,7 +26,7 @@ from .fastapi_deps import get_current_principal
 from .jwtoken import JWTCoder, InvalidTokenError, _svc
 from .orm import User
 from .rfc.rfc6750 import extract_bearer_token
-from .deps import JWAAlg
+from .vendor import JWAAlg
 
 api = TigrblRouter()
 router = api

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/__init__.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import Base
+from tigrbl_auth.vendor import Base
 
 from ..runtime_cfg import settings
 from .api_key import ApiKey

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/api_key.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Created,
     GUIDPk,
     KeyDigest,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/auth_code.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import datetime as dt
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     TenantColumn,
     Timestamped,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/auth_session.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import datetime as dt
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     TenantColumn,
     Timestamped,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/client.py

@@ -7,7 +7,7 @@ import uuid
 from typing import Final
 from urllib.parse import urlparse
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     hook_ctx,
     op_ctx,
     ClientBase,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/device_code.py

@@ -5,7 +5,7 @@ from __future__ import annotations
 import datetime as dt
 import uuid
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     Timestamped,
     S,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/pushed_authorization_request.py

@@ -6,7 +6,7 @@ import datetime as dt
 import uuid
 from datetime import datetime, timedelta, timezone
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     Timestamped,
     S,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/revoked_token.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     Timestamped,
     S,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/service.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     Base,
     GUIDPk,
     Timestamped,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/service_key.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 from uuid import UUID
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     ForeignKeySpec,
     Created,
     GUIDPk,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/tenant.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 import uuid
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     TenantBase,
     Bootstrappable,
     F,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/orm/user.py

@@ -5,7 +5,7 @@ from __future__ import annotations
 import uuid
 from typing import TYPE_CHECKING
 
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     UserBase,
     hook_ctx,
     op_ctx,
@@ -111,7 +111,7 @@ class User(UserBase):
         from ..routers.shared import _require_tls
         from .auth_session import AuthSession
         from .tenant import Tenant
-        from tigrbl_auth.deps import IntegrityError
+        from tigrbl_auth.vendor import IntegrityError
 
         request = ctx.get("request")
         _require_tls(request)

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc6749_token.py

@@ -8,7 +8,7 @@ from typing import Any
 from uuid import UUID
 
 from tigrbl.security.dependencies import Depends as TigrblDepends
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     TigrblRouter,
     AsyncSession,
     HTTPException,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc6750.py

@@ -11,7 +11,7 @@ See RFC 6750: https://www.rfc-editor.org/rfc/rfc6750
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import Request
+from tigrbl_auth.vendor import Request
 from typing import Final
 
 from ..runtime_cfg import settings

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc7009.py

@@ -13,7 +13,7 @@ from urllib.parse import parse_qs
 
 from typing import Final, Set
 
-from tigrbl_auth.deps import TigrblRouter, TigrblApp, HTTPException, Request, status
+from tigrbl_auth.vendor import TigrblRouter, TigrblApp, HTTPException, Request, status
 
 from ..runtime_cfg import settings
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc7515.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 
 from typing import Any, Final, Mapping
 
-from ..deps import JWAAlg, JwsSignerVerifier
+from ..vendor import JWAAlg, JwsSignerVerifier
 
 from ..runtime_cfg import settings
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc7516.py

@@ -5,7 +5,7 @@ from __future__ import annotations
 import base64
 from typing import Any, Final, Mapping
 
-from ..deps import JWAAlg, JweCrypto
+from ..vendor import JWAAlg, JweCrypto
 
 from ..runtime_cfg import settings
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc7662_introspection.py

@@ -2,7 +2,7 @@ from __future__ import annotations
 
 from urllib.parse import parse_qs
 
-from tigrbl_auth.deps import TigrblRouter, HTTPException, Request, status
+from tigrbl_auth.vendor import TigrblRouter, HTTPException, Request, status
 
 from ..runtime_cfg import settings
 from ..routers.schemas import IntrospectOut

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc8037.py

@@ -5,7 +5,7 @@ from __future__ import annotations
 import asyncio
 from typing import Any, Awaitable
 
-from ..deps import Ed25519EnvelopeSigner
+from ..vendor import Ed25519EnvelopeSigner
 from ..runtime_cfg import settings
 
 try:  # pragma: no cover - optional dependency

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc8414.py

@@ -12,7 +12,7 @@ from __future__ import annotations
 
 from typing import Final
 
-from tigrbl_auth.deps import TigrblRouter, TigrblApp, HTTPException, status
+from tigrbl_auth.vendor import TigrblRouter, TigrblApp, HTTPException, status
 
 from ..runtime_cfg import settings
 from ..oidc_discovery import (

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc8628.py

@@ -15,7 +15,7 @@ import secrets
 import string
 from typing import Final, Literal, TYPE_CHECKING
 
-from tigrbl_auth.deps import BaseModel, hook_ctx
+from tigrbl_auth.vendor import BaseModel, hook_ctx
 from typing import Any, Mapping
 
 from ..runtime_cfg import settings

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc8693.py

@@ -12,7 +12,7 @@ from __future__ import annotations
 from typing import Any, Dict, List, Optional, Union
 from enum import Enum
 import warnings
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     TigrblRouter,
     TigrblApp,
     Form,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc8932.py

@@ -14,7 +14,7 @@ from __future__ import annotations
 
 
 from typing import Any, Dict, List
-from tigrbl_auth.deps import TigrblRouter, HTTPException, status
+from tigrbl_auth.vendor import TigrblRouter, HTTPException, status
 
 from ..runtime_cfg import settings
 from .rfc8414_metadata import ISSUER, JWKS_PATH

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc9101.py

@@ -13,7 +13,7 @@ from typing import Any, Dict, Final, Iterable
 import json
 import warnings
 
-from ..deps import JWAAlg, JwsSignerVerifier
+from ..vendor import JWAAlg, JwsSignerVerifier
 
 from .. import runtime_cfg
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc9396.py

@@ -13,7 +13,7 @@ from __future__ import annotations
 from typing import Any, List
 import json
 
-from tigrbl_auth.deps import BaseModel, ValidationError
+from tigrbl_auth.vendor import BaseModel, ValidationError
 
 from ..runtime_cfg import settings
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/rfc/rfc9449_dpop.py

@@ -11,7 +11,7 @@ import warnings
 from cryptography.hazmat.primitives.serialization import load_pem_public_key
 from cryptography.hazmat.primitives import serialization
 from swarmauri_signing_dpop import DpopSigner
-from ..deps import JWAAlg
+from ..vendor import JWAAlg
 
 from ..runtime_cfg import settings
 
@@ -57,7 +57,7 @@ def makeProof(
     """Create a DPoP proof for *method* and *url* using *keyref*.
 
     ``keyref`` is the :class:`~swarmauri_core.crypto.types.KeyRef` returned by a
-    Swarmauri key provider such as :class:`~tigrbl_auth.deps.LocalKeyProvider` or
+    Swarmauri key provider such as :class:`~tigrbl_auth.vendor.LocalKeyProvider` or
     ``InMemoryKeyProvider``. The private key material from the provider is
     passed to :class:`~swarmauri_signing_dpop.DpopSigner` for signing, avoiding
     direct usage of ``cryptography`` within this module.

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/auth_flows.py

@@ -4,7 +4,7 @@ from __future__ import annotations
 import secrets
 
 from tigrbl.security.dependencies import Depends as TigrblDepends
-from tigrbl_auth.deps import AsyncSession, HTTPException, JSONResponse, Request
+from tigrbl_auth.vendor import AsyncSession, HTTPException, JSONResponse, Request
 from ..db import get_db
 from ..orm import AuthSession, User
 from ..routers.schemas import CredsIn, TokenPair

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/authz/__init__.py

@@ -1,4 +1,4 @@
-from tigrbl_auth.deps import TigrblRouter
+from tigrbl_auth.vendor import TigrblRouter
 from tigrbl_auth.rfc import rfc6749_token, rfc7662_introspection
 
 api = TigrblRouter()

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/authz/oidc.py

@@ -7,7 +7,7 @@ from uuid import UUID, uuid4
 from urllib.parse import urlencode
 
 from tigrbl.security.dependencies import Depends as TigrblDepends
-from tigrbl_auth.deps import (
+from tigrbl_auth.vendor import (
     HTTPException,
     Request,
     status,
@@ -61,15 +61,20 @@ async def authorize(
     prompt = prompt or request.query_params.get("prompt")
     login_hint = login_hint or request.query_params.get("login_hint")
     claims = claims or request.query_params.get("claims")
-    if max_age is None:
+    max_age_raw = max_age
+    if max_age_raw is None:
         max_age_raw = request.query_params.get("max_age")
-        if max_age_raw is not None:
-            try:
-                max_age = int(max_age_raw)
-            except ValueError as exc:
-                raise HTTPException(
-                    status.HTTP_400_BAD_REQUEST, {"error": "invalid_request"}
-                ) from exc
+    if max_age_raw is not None:
+        try:
+            max_age = int(max_age_raw)
+        except (TypeError, ValueError) as exc:
+            raise HTTPException(
+                status.HTTP_400_BAD_REQUEST, {"error": "invalid_request"}
+            ) from exc
+        if max_age < 0:
+            raise HTTPException(
+                status.HTTP_400_BAD_REQUEST, {"error": "invalid_request"}
+            )
     rts = set(response_type.split())
     allowed = {"code", "token", "id_token"}
     if not rts or not rts.issubset(allowed):

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/schemas.py

@@ -2,7 +2,7 @@ from __future__ import annotations
 
 from typing import Literal, Optional
 
-from tigrbl_auth.deps import BaseModel, EmailStr, Field, constr
+from tigrbl_auth.vendor import BaseModel, EmailStr, Field, constr
 
 from ..typing import StrUUID
 

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/shared.py

@@ -1,7 +1,7 @@
 from __future__ import annotations
 
 
-from tigrbl_auth.deps import HTTPException, Request, status
+from tigrbl_auth.vendor import HTTPException, Request, status
 
 from ..jwtoken import JWTCoder
 from ..backends import PasswordBackend

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/routers/surface.py

@@ -25,7 +25,7 @@ Notes
 
 from __future__ import annotations
 
-from tigrbl_auth.deps import TigrblRouter
+from tigrbl_auth.vendor import TigrblRouter
 from tigrbl_auth.orm import (
     Tenant,
     User,

{tigrbl_auth-0.3.2.dev7 → tigrbl_auth-0.3.2.dev8}/tigrbl_auth/runtime_cfg.py

@@ -3,7 +3,7 @@
 import os
 from dotenv import load_dotenv
 from pydantic_settings import BaseSettings, SettingsConfigDict
-from tigrbl_auth.deps import Field
+from tigrbl_auth.vendor import Field
 from typing import Optional
 
 # ─── Load environment variables from a .env file (if present) ─────────────────────

{tigrbl_auth-0.3.2.dev7/tigrbl_auth/deps → tigrbl_auth-0.3.2.dev8/tigrbl_auth/vendor}/tigrbl.py

@@ -2,7 +2,7 @@ from tigrbl import TigrblApp, TigrblRouter, op_ctx, hook_ctx, engine_ctx
 from tigrbl.engine import HybridSession as AsyncSession, engine as build_engine
 from tigrbl.config.constants import TIGRBL_AUTH_CONTEXT_ATTR
 from tigrbl.types.authn_abc import AuthNProvider
-from tigrbl.column.storage_spec import ForeignKeySpec
+from tigrbl._spec.storage_spec import ForeignKeySpec
 from tigrbl.orm.tables import (
     User as UserBase,
     Tenant as TenantBase,