timber-common 0.2.0__tar.gz → 0.2.2__tar.gz

{timber_common-0.2.0 → timber_common-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: timber-common
-Version: 0.2.0
+Version: 0.2.2
 Summary: Configuration-driven persistence library with automatic encryption, caching, vector search, and GDPR compliance for Python applications
 License: MIT
 License-File: LICENSE

{timber_common-0.2.0 → timber_common-0.2.2}/common/services/security/oauth_service.py

@@ -62,12 +62,16 @@ def _patch_oauth2_client_methods():
             bool: True if method is supported for this endpoint
         """
         if endpoint == 'token':
-            # If client has a configured method, use it
+            # If client has a configured method, use it strictly
             if hasattr(self, 'token_endpoint_auth_method') and self.token_endpoint_auth_method:
-                return method == self.token_endpoint_auth_method
+                result = method == self.token_endpoint_auth_method
+                logger.debug(f"Client {self.client_id}: checking {method} against configured {self.token_endpoint_auth_method} = {result}")
+                return result
             
             # Otherwise allow common methods
-            return method in ['client_secret_post', 'client_secret_basic', 'none']
+            result = method in ['client_secret_post', 'client_secret_basic', 'none']
+            logger.debug(f"Client {self.client_id}: {method} allowed by default = {result}")
+            return result
         
         return False
     
@@ -565,6 +569,8 @@ class MyPasswordGrant(grants.ResourceOwnerPasswordCredentialsGrant):
         Returns:
             User object if authentication succeeds, None otherwise
         """
+        logger.info(f"authenticate_user called with username: {username}")
+        
         User = _get_model('User')
         if not User:
             logger.error("User model not found in registry")
@@ -573,25 +579,45 @@ class MyPasswordGrant(grants.ResourceOwnerPasswordCredentialsGrant):
         try:
             with db_service.session_scope() as session:
                 # Find user by email
+                logger.debug(f"Querying for user with email: {username}")
                 user = session.query(User).filter_by(email=username).first()
                 
                 if not user:
                     logger.warning(f"Password grant: User not found: {username}")
+                    # List available users for debugging
+                    all_users = session.query(User).all()
+                    logger.debug(f"Available users in database: {[u.email for u in all_users[:5]]}")
                     return None
                 
+                logger.debug(f"User found: {user.email}, ID: {user.id}")
+                
                 # Check if user is active
-                if not user.is_active:
+                is_active = getattr(user, 'is_active', True)
+                logger.debug(f"User is_active: {is_active}")
+                
+                if not is_active:
                     logger.warning(f"Password grant: User not active: {username}")
                     return None
                 
                 # Verify password
-                if not user.check_password(password):
+                logger.debug(f"Checking password for user: {username}")
+                
+                if not hasattr(user, 'check_password'):
+                    logger.error(f"User model has no check_password method!")
+                    return None
+                
+                password_valid = user.check_password(password)
+                logger.debug(f"Password validation result: {password_valid}")
+                
+                if not password_valid:
                     logger.warning(f"Password grant: Invalid password for user: {username}")
                     return None
                 
                 # Update last login
-                user.update_last_login()
-                session.flush()
+                if hasattr(user, 'update_last_login'):
+                    logger.debug(f"Updating last login for user: {username}")
+                    user.update_last_login()
+                    session.flush()
                 
                 # Expunge to avoid detached instance issues
                 session.expunge(user)

{timber_common-0.2.0 → timber_common-0.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "timber-common"
-version = "0.2.0"
+version = "0.2.2"
 description = "Configuration-driven persistence library with automatic encryption, caching, vector search, and GDPR compliance for Python applications"
 authors = ["Pumulo Sikaneta <pumulo@gmail.com>"]
 maintainers = ["Pumulo Sikaneta <pumulo@gmail.com>"]