tokentoss 0.1.0__py3-none-any.whl

tokentoss-0.1.0.dist-info/METADATA

@@ -0,0 +1,147 @@
+Metadata-Version: 2.4
+Name: tokentoss
+Version: 0.1.0
+Summary: OAuth authentication from Jupyter notebooks for IAP-protected GCP services
+Project-URL: Homepage, https://github.com/NicholasGrundl/tokentoss
+Project-URL: Repository, https://github.com/NicholasGrundl/tokentoss
+Project-URL: Issues, https://github.com/NicholasGrundl/tokentoss/issues
+Project-URL: Changelog, https://github.com/NicholasGrundl/tokentoss/releases
+Author: Nicholas Grundl
+License-Expression: MIT
+License-File: LICENSE
+Keywords: authentication,gcp,iap,jupyter,oauth
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: Jupyter
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.10
+Requires-Dist: anywidget>=0.9.0
+Requires-Dist: google-auth-oauthlib>=1.2.0
+Requires-Dist: google-auth>=2.23.0
+Requires-Dist: platformdirs>=4.0.0
+Requires-Dist: requests>=2.31.0
+Description-Content-Type: text/markdown
+
+# tokentoss
+
+[![PyPI version](https://img.shields.io/pypi/v/tokentoss)](https://pypi.org/project/tokentoss/)
+[![CI](https://github.com/NicholasGrundl/tokentoss/actions/workflows/ci.yml/badge.svg)](https://github.com/NicholasGrundl/tokentoss/actions/workflows/ci.yml)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10+-blue.svg)](https://www.python.org/downloads/)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+OAuth authentication from Jupyter notebooks for IAP-protected GCP services.
+
+## Features
+
+- **anywidget** with "Sign in with Google" button
+- **Authorization Code flow with PKCE** for security and refresh tokens
+- **Token persistence** across sessions
+- **IAPClient** for authenticated HTTP requests with auto-refresh
+
+## Installation
+
+```bash
+pip install tokentoss
+```
+
+Or with uv:
+
+```bash
+uv add tokentoss
+```
+
+## Quick Start
+
+### 1. One-Time GCP Setup
+
+1. Create a Desktop OAuth client in [GCP Console](https://console.cloud.google.com/apis/credentials)
+2. Download `client_secrets.json`
+3. Add the Desktop client ID to your IAP's programmatic access allowlist
+4. Grant yourself the "IAP-secured Web App User" role
+
+### 2. Configure Credentials
+
+Use the `ConfigureWidget` for a password-safe setup (credentials never appear in notebook source):
+
+```python
+from tokentoss import ConfigureWidget
+
+display(ConfigureWidget())
+# Enter Client ID and Client Secret, click "Configure"
+```
+
+Or configure programmatically:
+
+```python
+import tokentoss
+
+tokentoss.configure(client_id="YOUR_CLIENT_ID", client_secret="YOUR_SECRET")
+```
+
+Credentials are stored to `~/.config/tokentoss/client_secrets.json` so they stay out of version control.
+
+### 3. Authenticate in Jupyter
+
+```python
+from tokentoss import GoogleAuthWidget
+
+# Widget auto-discovers credentials from the standard config location
+widget = GoogleAuthWidget()
+display(widget)
+
+# Click "Sign in with Google" and complete the flow
+# Widget shows "Signed in as user@example.com"
+```
+
+### 4. Make Authenticated Requests
+
+```python
+from tokentoss import IAPClient
+
+# Create client (auto-discovers credentials)
+client = IAPClient(base_url="https://my-iap-service.run.app")
+
+# Make requests - ID token added automatically
+data = client.get_json("/api/data")
+response = client.post("/api/items", json={"name": "test"})
+```
+
+## How It Works
+
+1. **`configure()`** stores OAuth client credentials to a standard platform location
+2. **Widget** opens a popup for Google OAuth
+3. User authenticates and grants consent
+4. **AuthManager** exchanges auth code for tokens (with PKCE)
+5. Tokens are stored securely (file permissions 0600)
+6. **IAPClient** uses ID token for IAP authentication
+7. Tokens refresh automatically when expired
+
+## Development
+
+```bash
+# Clone and install
+git clone https://github.com/NicholasGrundl/tokentoss.git
+cd tokentoss
+uv sync --group dev
+
+# Run tests
+uv run pytest
+
+# Lint and format
+uv run ruff format src/ tests/
+uv run ruff check src/ tests/
+
+# Type check (advisory)
+uv run ty check src/
+
+# Start Jupyter for testing
+uv run jupyter lab
+```
+
+## License
+
+MIT

tokentoss-0.1.0.dist-info/RECORD

@@ -0,0 +1,14 @@
+tokentoss/__init__.py,sha256=vj0RbOdn1IZfN7_j_VAc01je2oQNytii8MAIv0HSZVQ,2234
+tokentoss/_logging.py,sha256=qal8EL6V9VZMCKpjcC1irH4PwSlJBFzz_vKIJ7VZcB0,1279
+tokentoss/_telemetry.py,sha256=jQCeoebY_wXxpGFs2jibiP-cHP7Nss94vr_K8ojxOv8,392
+tokentoss/auth_manager.py,sha256=rpzlPwWhsbBsto737sfkJMv8WNcHavHVmxWPuwpT0ic,17214
+tokentoss/client.py,sha256=8hCBvK7h_sx941k5bdYPbGag939NBD0lgsewmbZV2lo,8289
+tokentoss/configure_widget.py,sha256=upvFSpED4ZktZaoY9KnKUazJTt-DlxAmnfurUNh35wA,7363
+tokentoss/exceptions.py,sha256=j5uPbWFImoCXpfdmI1_GEzojDVwUTQsjrgRoxzmj2So,1472
+tokentoss/setup.py,sha256=JhGvQOn8_q3d5mdSAvDv_dC3ApBjmOmlWXQ6AH2Tg8o,6384
+tokentoss/storage.py,sha256=jplp52LmbLKsZJmqX8KtEGf2BpjuDqnxnoiBVaf_EOE,6064
+tokentoss/widget.py,sha256=ChTHGr4Wjap4gD0khYc9YcMmaKcCfxSZfDgKcfc-b1s,25021
+tokentoss-0.1.0.dist-info/METADATA,sha256=ssK2q8HBWp5dk_plMC8f1x9yJSOrbvF4S73166VljBs,4266
+tokentoss-0.1.0.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+tokentoss-0.1.0.dist-info/licenses/LICENSE,sha256=7qMxL-61vLTFKNUYv9VVDM5Aeussm_j0RyuPLxaS8c8,1072
+tokentoss-0.1.0.dist-info/RECORD,,

tokentoss-0.1.0.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: hatchling 1.28.0
+Root-Is-Purelib: true
+Tag: py3-none-any

tokentoss-0.1.0.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Nicholas Grundl
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.