volcano-sdk-python 0.6.7__py3-none-any.whl → 0.7.0__py3-none-any.whl

volcano_sdk/auth.py

@@ -262,7 +262,7 @@ def _email_change_result_from_payload(payload: object) -> EmailChangeResult:
     )
 
 
-def _user_from_payload(payload: object) -> User:
+def _user_from_payload(payload: object) -> tuple[User, Mapping[str, JSONValue]]:
     if not isinstance(
         payload,
         (
@@ -277,7 +277,7 @@ def _user_from_payload(payload: object) -> User:
     project_id = _none_if_unset(user.project_id)
     user_metadata = _none_if_unset(user.user_metadata)
     app_metadata = _none_if_unset(user.app_metadata)
-    return User(
+    profile = User(
         id=str(user.id),
         email=user.email,
         status=user.status,
@@ -299,6 +299,7 @@ def _user_from_payload(payload: object) -> User:
         created_at=_none_if_unset(user.created_at),
         updated_at=_none_if_unset(user.updated_at),
     )
+    return profile, cast("Mapping[str, JSONValue]", user.to_dict())
 
 
 def _none_if_unset(value: _T | Unset) -> _T | None:
@@ -468,6 +469,10 @@ class AuthContext(Protocol):
 
     def _capture_session_binding(self) -> tuple[int, int, Session | None]: ...
 
+    def _update_session_user_if_current(
+        self, user: Mapping[str, JSONValue], generation: int
+    ) -> bool: ...
+
     def _set_session_if_current(
         self,
         session: Session,
@@ -580,10 +585,7 @@ class Auth:
             password=password,
             metadata=dict(metadata or {}),
         )
-        user = _user_from_payload(response_payload(response, 200))
-        if self._client._capture_session()[0] != generation:
-            raise SessionChangedError
-        return user
+        return self._update_current_user(response_payload(response, 200), generation)
 
     def reset_password_for_email(self, *, email: str) -> None:
         """Request a reset email without revealing whether the account exists."""
@@ -636,10 +638,7 @@ class Auth:
             authorization=current.access_token,
             token=token,
         )
-        user = _user_from_payload(response_payload(response, 200))
-        if self._client._capture_session()[0] != generation:
-            raise SessionChangedError
-        return user
+        return self._update_current_user(response_payload(response, 200), generation)
 
     def delete_all_other_sessions(self) -> None:
         """Delete every other session while preserving the current session."""
@@ -945,6 +944,12 @@ class Auth:
         )
         response_payload(response, 200)
 
+    def _update_current_user(self, payload: object, generation: int) -> User:
+        user, snapshot = _user_from_payload(payload)
+        if not self._client._update_session_user_if_current(snapshot, generation):
+            raise SessionChangedError
+        return user
+
     def get_user(self) -> User:
         """Load a server-validated profile for the current session."""
         generation, current = self._client._capture_session()
@@ -952,10 +957,7 @@ class Auth:
             raise AuthenticationError(_NO_ACTIVE_SESSION)
         transport = cast("AuthGetUserTransport", self._client._transport)
         response = invoke(transport.auth_get_user, authorization=current.access_token)
-        user = _user_from_payload(response_payload(response, 200))
-        if self._client._capture_session()[0] != generation:
-            raise SessionChangedError
-        return user
+        return self._update_current_user(response_payload(response, 200), generation)
 
     def update_user(
         self,
@@ -974,10 +976,7 @@ class Auth:
             password=password,
             metadata=None if metadata is None else dict(metadata),
         )
-        user = _user_from_payload(response_payload(response, 200))
-        if self._client._capture_session()[0] != generation:
-            raise SessionChangedError
-        return user
+        return self._update_current_user(response_payload(response, 200), generation)
 
     def sign_in(self, *, email: str, password: str) -> Session:
         """Sign in a user and store the returned session."""

volcano_sdk/client.py

@@ -4,11 +4,14 @@ from __future__ import annotations
 
 import threading
 from collections import deque
+from dataclasses import replace
 from typing import TYPE_CHECKING
+from uuid import UUID
 
 from ._transport import GeneratedTransport, Transport
 from .auth import Auth
 from .database import Database
+from .errors import AuthenticationError
 from .functions import Functions
 from .locks import Locks
 from .logs import Logs
@@ -16,17 +19,19 @@ from .models import (
     AuthChangeEvent,
     AuthStateCallback,
     AuthSubscription,
+    JSONValue,
     Session,
 )
 from .realtime import CentrifugeFactory, Realtime
 from .storage import Storage
 
 if TYPE_CHECKING:
-    from collections.abc import Callable
+    from collections.abc import Callable, Mapping
     from types import TracebackType
 
 _NO_ACTIVE_SESSION = "No active session"
 _NO_SERVICE_KEY = "No service key configured"
+_PROFILE_USER_MISMATCH = "Profile user does not match the active session"
 
 
 class _CallbackOutcome:
@@ -161,6 +166,25 @@ class VolcanoClient:
                 self._current_session,
             )
 
+    def _update_session_user_if_current(
+        self, user: Mapping[str, JSONValue], generation: int
+    ) -> bool:
+        with self._session_lock:
+            current = self._current_session
+            if generation != self._session_generation or current is None:
+                return False
+            try:
+                same_user = UUID(str(user["id"])) == UUID(current.user_id)
+            except ValueError:
+                same_user = False
+            if not same_user:
+                raise AuthenticationError(_PROFILE_USER_MISMATCH)
+            # Profile updates do not replace credentials or invalidate other requests.
+            self._current_session = replace(
+                current, user={**user, "id": current.user_id}
+            )
+        return True
+
     def _set_session_if_current(
         self,
         session: Session,

{volcano_sdk_python-0.6.7.dist-info → volcano_sdk_python-0.7.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.6.7
+Version: 0.7.0
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python
@@ -315,18 +315,24 @@ including metadata. The snapshot is deeply immutable and available without a
 request. It is cached data, not proof of authentication; use `auth.get_user()`
 to fetch the server-validated profile. Existing three-field `Session` construction
 still works, with `user=None`. An adopted snapshot must have the same user ID.
+Successful `get_user()`, `update_user()`, `convert_anonymous()`, and
+`confirm_email_change()` calls update that local snapshot without changing tokens
+or emitting an auth-state event. Previously returned sessions remain immutable.
+Profile identity checks compare UUID values; the session retains its original
+user ID spelling, including in the cached snapshot.
 
 `get_user()` sends the active access token to Volcano and returns an immutable, server-validated
 profile with the complete public AuthUser fields. Profile timestamps are timezone-aware `datetime`
-values, and nested user and application metadata are immutable. The request does not replace the
-session or cache the profile. If another authentication operation replaces the session while the
-request is in flight, `get_user()` raises `SessionChangedError` instead of returning a profile for
-stale credentials.
+values, and nested user and application metadata are immutable. The request updates the cached
+profile without changing credentials. If another authentication operation replaces the session
+while the request is in flight, `get_user()` raises `SessionChangedError` instead of returning a
+profile for stale credentials.
 
 `update_user()` updates the current user's password, metadata, or both. Metadata is a shallow patch:
 omitted keys remain unchanged, and setting a key to `None` removes it. The method returns the same
-immutable profile type as `get_user()` and does not replace the active session. It also rejects a
-response if another authentication operation replaces the session while the update is in flight.
+immutable profile type as `get_user()` and updates the cached profile without changing credentials.
+It also rejects a response if another authentication operation replaces the session while the
+update is in flight.
 
 Request a password reset email without creating or changing a session:
 

{volcano_sdk_python-0.6.7.dist-info → volcano_sdk_python-0.7.0.dist-info}/RECORD

@@ -5,8 +5,8 @@ volcano_sdk/_lock_renewer.py,sha256=tFo1ZeRiPKB5VSbW61uoMpNR67ZDYyMEe-dCjpAM3As,
 volcano_sdk/_lock_worker.py,sha256=QhSmwR0WcwgT-7ueJMlbCogLqOakQ5eRAtyWV74fgV0,3057
 volcano_sdk/_realtime_fetch_worker.py,sha256=zQTgFF4cIUBeAL4J2OpWAlz_sIynv2BLfu588EogAdo,9269
 volcano_sdk/_transport.py,sha256=apXZLuT9W17vO-7Ag2E289o2B-uL-Rndv_wRPm69x0I,55481
-volcano_sdk/auth.py,sha256=8CkF7nrZJ1jFPW3DllYs8v096DezGdpxFE8jHwMx3e4,42164
-volcano_sdk/client.py,sha256=MFNhfh4o_M4GuVE7wQOTjdwprDgRisnCWxyM-Los5nQ,9395
+volcano_sdk/auth.py,sha256=6TXpCZ0mPqluPh-nJSYUbjcryJTwZBz03zDSHuP1eZA,42262
+volcano_sdk/client.py,sha256=KutjBUOEJyK73OibKilrcWazpWeXKEZYUehSAH8qxUE,10366
 volcano_sdk/connection_string.py,sha256=LlTZigsrCF4IfAqQ8SDTWJv35hnnzNu1MfeVv5JW-Kk,2331
 volcano_sdk/database.py,sha256=p_5OaqlBjKAtIUfKQCflXM_CGqokrVmpOMsp6KHiJ8A,9493
 volcano_sdk/errors.py,sha256=ffs66FIN_jhyh5SMj7KdXb-zVV3DSgVK6xJEPNA5h9Y,1613
@@ -772,7 +772,7 @@ volcano_sdk/_generated/models/usage_data_point.py,sha256=d4U08JbVTiIMM_l2BmRILL1
 volcano_sdk/_generated/models/variable.py,sha256=tvGDOMv77gW6j5skufnfrlNAhzCzA1F7nuPCQWx79yY,5926
 volcano_sdk/_generated/models/variable_deploy_source.py,sha256=G_aCiFHzQx8WhJFs0GvYZEFclfTrfkDvd3kT1e3vty8,463
 volcano_sdk/_generated/models/variable_status.py,sha256=THSsKBSiAYG4kAtBzGA4TZqxjgx8hdL0Q4qCdZfOj00,391
-volcano_sdk_python-0.6.7.dist-info/METADATA,sha256=LXWuhSliyw_ftVThjDPwI_OyXwZufBa9oFfUWt30yzI,32886
-volcano_sdk_python-0.6.7.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-volcano_sdk_python-0.6.7.dist-info/licenses/LICENSE,sha256=AIHJy-5MFqM8fHfuGFTTb9a8rvJGypcVgN4aZ-7XTWw,11387
-volcano_sdk_python-0.6.7.dist-info/RECORD,,
+volcano_sdk_python-0.7.0.dist-info/METADATA,sha256=UvxuStKj4B3uX6BtRlrXlfjXNQw4GaOe6vDVN6nKF9c,33273
+volcano_sdk_python-0.7.0.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+volcano_sdk_python-0.7.0.dist-info/licenses/LICENSE,sha256=AIHJy-5MFqM8fHfuGFTTb9a8rvJGypcVgN4aZ-7XTWw,11387
+volcano_sdk_python-0.7.0.dist-info/RECORD,,