usso 0.12.0__py3-none-any.whl → 0.14.0__py3-none-any.whl

usso/__init__.py

@@ -1 +1 @@
-from .core import UserData
+from .core import UserData, user_data_from_token

usso/core.py

@@ -1,3 +1,5 @@
+import os
+import logging
 import uuid
 from functools import lru_cache
 from typing import Optional, Tuple
@@ -6,6 +8,9 @@ import jwt
 from pydantic import BaseModel
 
 from . import b64tools
+from .exceptions import USSOException
+
+logger = logging.getLogger("usso")
 
 
 class UserData(BaseModel):
@@ -43,6 +48,50 @@ def get_authorization_scheme_param(
     return scheme, param
 
 
+def user_data_from_token(token: str, **kwargs) -> UserData | None:
+    """Return the user associated with a token value."""
+    try:
+        header = jwt.get_unverified_header(token)
+        jwks_url = header["jwk_url"]
+        assert os.getenv("USSO_JWKS_URL") == jwks_url
+        jwks_client = get_jwks_keys(jwks_url)
+        # , headers=optional_custom_headers)
+        signing_key = jwks_client.get_signing_key_from_jwt(token)
+        decoded = jwt.decode(
+            token,
+            signing_key.key,
+            algorithms=["RS256"],
+        )
+        decoded["token"] = token
+
+    except jwt.exceptions.ExpiredSignatureError:
+        if kwargs.get("raise_exception"):
+            raise USSOException(status_code=401, error="expired_signature")
+        return None
+    except jwt.exceptions.InvalidSignatureError:
+        if kwargs.get("raise_exception"):
+            raise USSOException(status_code=401, error="invalid_signature")
+        return None
+    except jwt.exceptions.InvalidTokenError:
+        if kwargs.get("raise_exception"):
+            raise USSOException(
+                status_code=401,
+                error="invalid_token",
+            )
+        return None
+    except Exception as e:
+        if kwargs.get("raise_exception"):
+            raise USSOException(
+                status_code=401,
+                error="error",
+                message=str(e),
+            )
+        logger.error(e)
+        return None
+
+    return UserData(**decoded)
+
+
 @lru_cache
 def get_jwks_keys(jwks_url):
     return jwt.PyJWKClient(jwks_url)

usso/fastapi/__init__.py

@@ -1 +1 @@
-from .integration import jwt_access_security, user_data_from_token
+from .integration import jwt_access_security

usso/fastapi/integration.py

@@ -1,62 +1,14 @@
 import logging
 
-import jwt
 from fastapi import Request, WebSocket
 from starlette.status import HTTP_401_UNAUTHORIZED
 
-from usso.core import UserData, get_authorization_scheme_param, get_jwks_keys
+from usso.core import UserData, get_authorization_scheme_param, user_data_from_token
 from usso.exceptions import USSOException
 
 logger = logging.getLogger("usso")
 
 
-async def user_data_from_token(token: str, **kwargs) -> UserData | None:
-    """Return the user associated with a token value."""
-    try:
-        header = jwt.get_unverified_header(token)
-        jwks_url = header["jwk_url"]
-        jwks_client = get_jwks_keys(jwks_url)
-        # , headers=optional_custom_headers)
-        signing_key = jwks_client.get_signing_key_from_jwt(token)
-        decoded = jwt.decode(
-            token,
-            signing_key.key,
-            algorithms=["RS256"],
-        )
-        decoded["token"] = token
-
-    except jwt.exceptions.ExpiredSignatureError:
-        if kwargs.get("raise_exception"):
-            raise USSOException(
-                status_code=HTTP_401_UNAUTHORIZED, error="expired_signature"
-            )
-        return None
-    except jwt.exceptions.InvalidSignatureError:
-        if kwargs.get("raise_exception"):
-            raise USSOException(
-                status_code=HTTP_401_UNAUTHORIZED, error="invalid_signature"
-            )
-        return None
-    except jwt.exceptions.InvalidTokenError:
-        if kwargs.get("raise_exception"):
-            raise USSOException(
-                status_code=HTTP_401_UNAUTHORIZED,
-                error="invalid_token",
-            )
-        return None
-    except Exception as e:
-        if kwargs.get("raise_exception"):
-            raise USSOException(
-                status_code=HTTP_401_UNAUTHORIZED,
-                error="error",
-                message=str(e),
-            )
-        logger.error(e)
-        return None
-
-    return UserData(**decoded)
-
-
 async def jwt_access_security(request: Request) -> UserData | None:
     """Return the user associated with a token value."""
     kwargs = {}
@@ -65,11 +17,11 @@ async def jwt_access_security(request: Request) -> UserData | None:
         scheme, _, credentials = get_authorization_scheme_param(authorization)
         if scheme.lower() == "bearer":
             token = credentials
-            return await user_data_from_token(token, **kwargs)
+            return user_data_from_token(token, **kwargs)
 
-    cookie_token = request.cookies.get("access_token")
+    cookie_token = request.cookies.get("usso_access_token")
     if cookie_token:
-        return await user_data_from_token(cookie_token, **kwargs)
+        return user_data_from_token(cookie_token, **kwargs)
 
     if kwargs.get("raise_exception", True):
         raise USSOException(
@@ -87,11 +39,11 @@ async def jwt_access_security_ws(websocket: WebSocket) -> UserData | None:
         scheme, _, credentials = get_authorization_scheme_param(authorization)
         if scheme.lower() == "bearer":
             token = credentials
-            return await user_data_from_token(token, **kwargs)
+            return user_data_from_token(token, **kwargs)
 
-    cookie_token = websocket.cookies.get("access_token")
+    cookie_token = websocket.cookies.get("usso_access_token")
     if cookie_token:
-        return await user_data_from_token(cookie_token, **kwargs)
+        return user_data_from_token(cookie_token, **kwargs)
 
     if kwargs.get("raise_exception", True):
         raise USSOException(

{usso-0.12.0.dist-info → usso-0.14.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: usso
-Version: 0.12.0
+Version: 0.14.0
 Summary: A plug-and-play client for integrating universal single sign-on (SSO) with Python frameworks, enabling secure and seamless authentication across microservices.
 Author-email: Mahdi Kiani <mahdikiany@gmail.com>
 Maintainer-email: Mahdi Kiani <mahdikiany@gmail.com>

usso-0.14.0.dist-info/RECORD

@@ -0,0 +1,13 @@
+usso/__init__.py,sha256=fluJnb9X2ECUnUA0lNNR2xHdn3uSI2RVErQiFlqbOiU,49
+usso/b64tools.py,sha256=6YCBx2lLaYFdk36f064VNZ1RejJTHtmgxqq0eT1sCwQ,518
+usso/core.py,sha256=eTzztT0Daxwl3b9VzPZSk1A-QQoGaCQdW2duK8FEWoo,2690
+usso/exceptions.py,sha256=hawOAuVbvQtjgRfwp1KFZ4SmV7fh720y5Gom9JVA8W8,504
+usso/package_data.dat,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+usso/fastapi/__init__.py,sha256=3hB0_Hq4LxfIL5NTI7SdC0jsFEICcBSTv6b9RuBWdxw,45
+usso/fastapi/integration.py,sha256=DwQxLnj74tnOVyzHhmM380Gi-PX4EjWKt4Q-Le9wLXw,1785
+usso-0.14.0.dist-info/LICENSE.txt,sha256=ceC9ZJOV9H6CtQDcYmHOS46NA3dHJ_WD4J9blH513pc,1081
+usso-0.14.0.dist-info/METADATA,sha256=R9H7c6B39Zs3QLyu23i5i4yuQGc-VND7VYJIuCBrhL0,4306
+usso-0.14.0.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+usso-0.14.0.dist-info/entry_points.txt,sha256=4Zgpm5ELaAWPf0jPGJFz1_X69H7un8ycT3WdGoJ0Vvk,35
+usso-0.14.0.dist-info/top_level.txt,sha256=g9Jf6h1Oyidh0vPiFni7UHInTJjSvu6cUalpLTIvthg,5
+usso-0.14.0.dist-info/RECORD,,

usso-0.12.0.dist-info/RECORD

@@ -1,13 +0,0 @@
-usso/__init__.py,sha256=bHjlWFkwxHTNsC0g-aUqynQ8IrtXp1apELqCqsrynns,27
-usso/b64tools.py,sha256=6YCBx2lLaYFdk36f064VNZ1RejJTHtmgxqq0eT1sCwQ,518
-usso/core.py,sha256=dYV6Oq7IFpSHKRIhKpCvvWF_a1r7cTHL_p35uxQi2ec,1114
-usso/exceptions.py,sha256=hawOAuVbvQtjgRfwp1KFZ4SmV7fh720y5Gom9JVA8W8,504
-usso/package_data.dat,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-usso/fastapi/__init__.py,sha256=lp2o47nCG-vIobgEOKdEnnPBGizv5om7oPXjqe0R9qU,67
-usso/fastapi/integration.py,sha256=qJhJDprAxB0kEWqqIYZgNuNFZr9tFWTavhP0Mu39D5M,3364
-usso-0.12.0.dist-info/LICENSE.txt,sha256=ceC9ZJOV9H6CtQDcYmHOS46NA3dHJ_WD4J9blH513pc,1081
-usso-0.12.0.dist-info/METADATA,sha256=22uKL_AMKi9buPK83amShqq4oBrMsJ-Wakf_kcXP7m8,4306
-usso-0.12.0.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-usso-0.12.0.dist-info/entry_points.txt,sha256=4Zgpm5ELaAWPf0jPGJFz1_X69H7un8ycT3WdGoJ0Vvk,35
-usso-0.12.0.dist-info/top_level.txt,sha256=g9Jf6h1Oyidh0vPiFni7UHInTJjSvu6cUalpLTIvthg,5
-usso-0.12.0.dist-info/RECORD,,