vpndetection-fastapi 2.0.4__tar.gz → 2.0.6__tar.gz

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/.github/workflows/release.yml

@@ -34,3 +34,30 @@ jobs:
       - run: pytest
       - run: python -m build
       - uses: pypa/gh-action-pypi-publish@release/v1
+
+  # This version's section of CHANGELOG.md, as the tag's GitHub Release. It
+  # waits for the publish, so no release page names a version the registry
+  # cannot serve, and a re-run edits the release rather than failing on it.
+  github-release:
+    needs: publish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+      - name: GitHub Release from CHANGELOG.md
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+        run: |
+          version="${GITHUB_REF_NAME#v}"
+          awk -v v="$version" '/^## /{ if (found) exit; found = ($2 == v); next } found' CHANGELOG.md > notes.md
+          if ! grep -q '^### ' notes.md ; then
+            echo "CHANGELOG.md has no section for ${version}" >&2
+            exit 1
+          fi
+          if gh release view "$GITHUB_REF_NAME" > /dev/null 2>&1 ; then
+            gh release edit "$GITHUB_REF_NAME" --notes-file notes.md
+          else
+            gh release create "$GITHUB_REF_NAME" --title "$GITHUB_REF_NAME" --notes-file notes.md --verify-tag
+          fi

vpndetection_fastapi-2.0.6/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+What each release changed for you, newest first. Each line is a commit's summary, linked to its full description and diff. Releases before 2.0.5 are described by their release commits.
+
+## 2.0.6 - 2026-09-27
+
+### Features
+
+- Require vpndetection 5.5.0: OauthMetadata carries client_id_metadata_document_supported ([`21a3979`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/21a3979ec7ed49fb55e88e0a16a32ccefc0bf61f))
+
+## 2.0.5 - 2026-09-25
+
+### Fixes
+
+- Raise the base floor to vpndetection 5.4.2 ([`fb4525a`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/fb4525a2d8ab530939a3a157675c937fd22cf71a))

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vpndetection-fastapi
-Version: 2.0.4
+Version: 2.0.6
 Summary: Official FastAPI and Starlette middleware for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN visitors on every request.
 Project-URL: Homepage, https://vpndetection.io
 Project-URL: Source, https://github.com/vpndetection-io/sdk-python-fastapi
@@ -20,14 +20,14 @@ Classifier: Topic :: Security
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: starlette>=0.37
-Requires-Dist: vpndetection<6,>=5.4.1
+Requires-Dist: vpndetection<6,>=5.5.0
 Provides-Extra: dev
 Requires-Dist: mypy>=1.11; extra == 'dev'
 Requires-Dist: pytest>=8; extra == 'dev'
 Requires-Dist: ruff>=0.6; extra == 'dev'
 Description-Content-Type: text/markdown
 
-# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="24"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
+# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="28"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
 
 [![PyPI](https://img.shields.io/pypi/v/vpndetection-fastapi.svg)](https://pypi.org/project/vpndetection-fastapi/)
 [![license](https://img.shields.io/pypi/l/vpndetection-fastapi.svg)](LICENSE)
@@ -99,7 +99,7 @@ By default the middleware uses `request.client.host`, which is the socket peer u
 For an edge that writes the address into its own header, name the header:
 
 ```python
-from python_fastapi import header_ip_selector
+from vpndetection_fastapi import header_ip_selector
 
 ip_selector = header_ip_selector("CF-Connecting-IP")  # or True-Client-IP, or your own
 ```
@@ -144,7 +144,7 @@ There are official VPNDetection client libraries available for many languages in
 
 VPN Detection API: Accurate anonymity detection identifying VPNs, residential proxies, hosting servers, Tor nodes, CDNs, relays and more.
 
-[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="96"/>](https://vpndetection.io/)
+[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="64"/>](https://vpndetection.io/)
 
 ## License
 

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/README.md

@@ -1,4 +1,4 @@
-# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="24"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
+# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="28"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
 
 [![PyPI](https://img.shields.io/pypi/v/vpndetection-fastapi.svg)](https://pypi.org/project/vpndetection-fastapi/)
 [![license](https://img.shields.io/pypi/l/vpndetection-fastapi.svg)](LICENSE)
@@ -70,7 +70,7 @@ By default the middleware uses `request.client.host`, which is the socket peer u
 For an edge that writes the address into its own header, name the header:
 
 ```python
-from python_fastapi import header_ip_selector
+from vpndetection_fastapi import header_ip_selector
 
 ip_selector = header_ip_selector("CF-Connecting-IP")  # or True-Client-IP, or your own
 ```
@@ -115,7 +115,7 @@ There are official VPNDetection client libraries available for many languages in
 
 VPN Detection API: Accurate anonymity detection identifying VPNs, residential proxies, hosting servers, Tor nodes, CDNs, relays and more.
 
-[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="96"/>](https://vpndetection.io/)
+[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="64"/>](https://vpndetection.io/)
 
 ## License
 

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Security",
     "Typing :: Typed",
 ]
-dependencies = ["vpndetection>=5.4.1,<6", "starlette>=0.37"]
+dependencies = ["vpndetection>=5.5.0,<6", "starlette>=0.37"]
 
 [project.urls]
 Homepage = "https://vpndetection.io"

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/src/vpndetection_fastapi/__init__.py

@@ -39,7 +39,7 @@ __all__ = [
     "xff_ip_selector",
 ]
 
-__version__ = "2.0.4"
+__version__ = "2.0.6"
 
 _SELECTORS: Selectors[Request] = bind_selectors(
     lambda request: RequestView(

{vpndetection_fastapi-2.0.4 → vpndetection_fastapi-2.0.6}/testdata/testdata.json

@@ -5385,7 +5385,7 @@
     ]
   },
   "oauth": {
-    "why": "The public OAuth accessor (docs/sdk/oauth.md). Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
+    "why": "The public OAuth accessor. Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
     "endpoints": {
       "metadata": {
         "method": "GET",
@@ -6445,11 +6445,77 @@
               5
             ]
           }
+        },
+        {
+          "name": "interval-past-the-deadline-sleeps-only-to-it",
+          "clientId": "vpndetection-cli",
+          "device": {
+            "device_code": "mo_dc_poll",
+            "user_code": "BCDF-GHJK",
+            "verification_uri": "https://app.vpndetection.io/device",
+            "verification_uri_complete": "https://app.vpndetection.io/device?user_code=BCDF-GHJK",
+            "expires_in": 2,
+            "interval": 2147483647
+          },
+          "why": "A sleep that would end past the local deadline ends at it, and the local expiry follows with no request sent: the outcome the full sleep reaches anyway, without asking the runtime for a sleep it may not hold (.NET's Task.Delay throws past ~49.7 days). 2147483647 is the largest interval every SDK's type holds.",
+          "responses": [
+            {
+              "status": 400,
+              "body": {
+                "error": "authorization_pending"
+              }
+            }
+          ],
+          "expect": {
+            "outcome": "expiredToken",
+            "requests": 0,
+            "waits": [
+              2
+            ],
+            "status": null
+          }
+        },
+        {
+          "name": "slow-down-past-the-deadline-sleeps-only-to-it",
+          "clientId": "vpndetection-cli",
+          "device": {
+            "device_code": "mo_dc_poll",
+            "user_code": "BCDF-GHJK",
+            "verification_uri": "https://app.vpndetection.io/device",
+            "verification_uri_complete": "https://app.vpndetection.io/device?user_code=BCDF-GHJK",
+            "expires_in": 8,
+            "interval": 1
+          },
+          "why": "The cut applies to every sleep, a widened one included: 1, then 6 after the first slow_down, then only the 1 s left of the 8 rather than 11.",
+          "responses": [
+            {
+              "status": 400,
+              "body": {
+                "error": "slow_down"
+              }
+            },
+            {
+              "status": 400,
+              "body": {
+                "error": "slow_down"
+              }
+            }
+          ],
+          "expect": {
+            "outcome": "expiredToken",
+            "requests": 2,
+            "waits": [
+              1,
+              6,
+              1
+            ],
+            "status": null
+          }
         }
       ]
     },
     "deferred": {
-      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow (docs/sdk/oauth.md, Deferred). A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
+      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow. A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
       "pkce": {
         "why": "RFC 7636 Appendix B. A generated verifier is 32 CSPRNG bytes as unpadded base64url.",
         "verifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk",