usso 0.28.27__tar.gz → 0.28.29__tar.gz

{usso-0.28.27/src/usso.egg-info → usso-0.28.29}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: usso
-Version: 0.28.27
+Version: 0.28.29
 Summary: A plug-and-play client for integrating universal single sign-on (SSO) with Python frameworks, enabling secure and seamless authentication across microservices.
 Author-email: Mahdi Kiani <mahdikiany@gmail.com>
 Maintainer-email: Mahdi Kiani <mahdikiany@gmail.com>
@@ -28,7 +28,7 @@ Requires-Dist: cachetools
 Requires-Dist: singleton_package
 Requires-Dist: json-advanced
 Requires-Dist: httpx
-Requires-Dist: usso-jwt>=0.2.0
+Requires-Dist: usso-jwt>=0.2.6
 Provides-Extra: fastapi
 Requires-Dist: fastapi>=0.65.0; extra == "fastapi"
 Requires-Dist: uvicorn[standard]>=0.13.0; extra == "fastapi"

{usso-0.28.27 → usso-0.28.29}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "usso"
-version = "0.28.27"
+version = "0.28.29"
 description = "A plug-and-play client for integrating universal single sign-on (SSO) with Python frameworks, enabling secure and seamless authentication across microservices."
 readme = "README.md"
 requires-python = ">=3.9"
@@ -30,7 +30,7 @@ dependencies = [
   "singleton_package",
   "json-advanced",
   "httpx",
-  "usso-jwt>=0.2.0",
+  "usso-jwt>=0.2.6",
 ]
 
 [project.optional-dependencies]

{usso-0.28.27 → usso-0.28.29}/src/usso/client.py

@@ -1,4 +1,5 @@
 import logging
+from urllib.parse import urlparse
 
 import usso_jwt.exceptions
 import usso_jwt.schemas
@@ -22,6 +23,8 @@ class UssoAuth:
         self,
         *,
         jwt_config: AvailableJwtConfigs | None = None,
+        from_base_usso_url: str | None = None,
+        **kwargs: object,
     ) -> None:
         """Initialize the USSO authentication client.
 
@@ -31,6 +34,7 @@ class UssoAuth:
         if jwt_config is None:
             jwt_config = AuthConfig()
         self.jwt_configs = AuthConfig.validate_jwt_configs(jwt_config)
+        self.from_base_usso_url = from_base_usso_url
 
     def user_data_from_token(
         self,
@@ -55,6 +59,28 @@ class UssoAuth:
             USSOException: If token is invalid and raise_exception is True
         """
         exp = None
+
+        if self.from_base_usso_url:
+            try:
+                jwt_obj = usso_jwt.schemas.JWT(
+                    token=token,
+                    config=self.jwt_configs[0],
+                    payload_class=UserData,
+                )
+                iss = jwt_obj.unverified_payload.iss
+                iss_domain = urlparse(iss).netloc
+                jwt_obj.config.jwks_url = (
+                    f"{self.from_base_usso_url}/.well-known/jwks.json?"
+                    f"domain={iss_domain}"
+                )
+                if jwt_obj.verify(
+                    expected_token_type=expected_token_type,
+                    **kwargs,
+                ):
+                    return jwt_obj.payload
+            except usso_jwt.exceptions.JWTError as e:
+                exp = e
+
         for jwk_config in self.jwt_configs:
             try:
                 jwt_obj = usso_jwt.schemas.JWT(

{usso-0.28.27 → usso-0.28.29}/src/usso/config.py

@@ -1,4 +1,5 @@
 import json
+import os
 from typing import Any, Literal, Union
 
 import usso_jwt.config
@@ -7,6 +8,8 @@ from pydantic import BaseModel, model_validator
 from .user import UserData
 from .utils.string_utils import get_authorization_scheme_param
 
+BASE_USSO_URL = os.getenv("BASE_USSO_URL") or "https://sso.usso.io"
+
 
 class HeaderConfig(BaseModel):
     type: Literal["Authorization", "Cookie", "CustomHeader"] = "Cookie"
@@ -42,7 +45,7 @@ class HeaderConfig(BaseModel):
 
 
 class APIHeaderConfig(HeaderConfig):
-    verify_endpoint: str = "https://sso.usso.io/api/sso/v1/apikeys/verify"
+    verify_endpoint: str = f"{BASE_USSO_URL}/api/sso/v1/apikeys/verify"
 
 
 class AuthConfig(usso_jwt.config.JWTConfig):

{usso-0.28.27 → usso-0.28.29}/src/usso/integrations/fastapi/dependency.py

@@ -14,15 +14,20 @@ class USSOAuthentication(UssoAuth):
     def __init__(
         self,
         jwt_config: AvailableJwtConfigs | None = None,
+        *,
         raise_exception: bool = True,
         expected_token_type: str = "access",
+        from_base_usso_url: str | None = None,
     ) -> None:
         if jwt_config is None:
             jwt_config = AuthConfig()
 
-        super().__init__(jwt_config=jwt_config)
+        super().__init__(
+            jwt_config=jwt_config, from_base_usso_url=from_base_usso_url
+        )
         self.raise_exception = raise_exception
         self.expected_token_type = expected_token_type
+        self.from_base_usso_url = from_base_usso_url
 
     def __call__(self, request: Request) -> UserData:
         return self.usso_access_security(request)
@@ -41,7 +46,6 @@ class USSOAuthentication(UssoAuth):
                 return token
         return None
 
-    # @instance_method
     def usso_access_security(self, request: Request) -> UserData | None:
         """Return the user associated with a token value."""
         api_key = self.get_request_api_key(request)
@@ -62,7 +66,6 @@ class USSOAuthentication(UssoAuth):
             raise_exception=self.raise_exception,
         )
 
-    # @instance_method
     def jwt_access_security_ws(self, websocket: WebSocket) -> UserData | None:
         """Return the user associated with a token value."""
         api_key = self.get_request_api_key(websocket)

{usso-0.28.27 → usso-0.28.29/src/usso.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: usso
-Version: 0.28.27
+Version: 0.28.29
 Summary: A plug-and-play client for integrating universal single sign-on (SSO) with Python frameworks, enabling secure and seamless authentication across microservices.
 Author-email: Mahdi Kiani <mahdikiany@gmail.com>
 Maintainer-email: Mahdi Kiani <mahdikiany@gmail.com>
@@ -28,7 +28,7 @@ Requires-Dist: cachetools
 Requires-Dist: singleton_package
 Requires-Dist: json-advanced
 Requires-Dist: httpx
-Requires-Dist: usso-jwt>=0.2.0
+Requires-Dist: usso-jwt>=0.2.6
 Provides-Extra: fastapi
 Requires-Dist: fastapi>=0.65.0; extra == "fastapi"
 Requires-Dist: uvicorn[standard]>=0.13.0; extra == "fastapi"

{usso-0.28.27 → usso-0.28.29}/src/usso.egg-info/requires.txt

@@ -4,7 +4,7 @@ cachetools
 singleton_package
 json-advanced
 httpx
-usso-jwt>=0.2.0
+usso-jwt>=0.2.6
 
 [all]
 fastapi>=0.65.0