vpndetection-fastapi 2.0.5__tar.gz → 2.0.7__tar.gz

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/.github/workflows/release.yml

@@ -34,3 +34,30 @@ jobs:
       - run: pytest
       - run: python -m build
       - uses: pypa/gh-action-pypi-publish@release/v1
+
+  # This version's section of CHANGELOG.md, as the tag's GitHub Release. It
+  # waits for the publish, so no release page names a version the registry
+  # cannot serve, and a re-run edits the release rather than failing on it.
+  github-release:
+    needs: publish
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+      - name: GitHub Release from CHANGELOG.md
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+        run: |
+          version="${GITHUB_REF_NAME#v}"
+          awk -v v="$version" '/^## /{ if (found) exit; found = ($2 == v); next } found' CHANGELOG.md > notes.md
+          if ! grep -q '^### ' notes.md ; then
+            echo "CHANGELOG.md has no section for ${version}" >&2
+            exit 1
+          fi
+          if gh release view "$GITHUB_REF_NAME" > /dev/null 2>&1 ; then
+            gh release edit "$GITHUB_REF_NAME" --notes-file notes.md
+          else
+            gh release create "$GITHUB_REF_NAME" --title "$GITHUB_REF_NAME" --notes-file notes.md --verify-tag
+          fi

vpndetection_fastapi-2.0.7/CHANGELOG.md

@@ -0,0 +1,21 @@
+# Changelog
+
+What each release changed for you, newest first. Each line is a commit's summary, linked to its full description and diff. Releases before 2.0.5 are described by their release commits.
+
+## 2.0.7 - 2026-09-28
+
+### Fixes
+
+- Require vpndetection 5.5.1: IPv4-mapped visitors are looked up, not waved through ([`976dc44`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/976dc44ca5a65d2a13d6ce1d366a4582de24db89))
+
+## 2.0.6 - 2026-09-27
+
+### Features
+
+- Require vpndetection 5.5.0: OauthMetadata carries client_id_metadata_document_supported ([`21a3979`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/21a3979ec7ed49fb55e88e0a16a32ccefc0bf61f))
+
+## 2.0.5 - 2026-09-25
+
+### Fixes
+
+- Raise the base floor to vpndetection 5.4.2 ([`fb4525a`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/fb4525a2d8ab530939a3a157675c937fd22cf71a))

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vpndetection-fastapi
-Version: 2.0.5
+Version: 2.0.7
 Summary: Official FastAPI and Starlette middleware for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN visitors on every request.
 Project-URL: Homepage, https://vpndetection.io
 Project-URL: Source, https://github.com/vpndetection-io/sdk-python-fastapi
@@ -20,14 +20,14 @@ Classifier: Topic :: Security
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: starlette>=0.37
-Requires-Dist: vpndetection<6,>=5.4.2
+Requires-Dist: vpndetection<6,>=5.5.1
 Provides-Extra: dev
 Requires-Dist: mypy>=1.11; extra == 'dev'
 Requires-Dist: pytest>=8; extra == 'dev'
 Requires-Dist: ruff>=0.6; extra == 'dev'
 Description-Content-Type: text/markdown
 
-# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="24"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
+# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="28"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
 
 [![PyPI](https://img.shields.io/pypi/v/vpndetection-fastapi.svg)](https://pypi.org/project/vpndetection-fastapi/)
 [![license](https://img.shields.io/pypi/l/vpndetection-fastapi.svg)](LICENSE)
@@ -99,7 +99,7 @@ By default the middleware uses `request.client.host`, which is the socket peer u
 For an edge that writes the address into its own header, name the header:
 
 ```python
-from python_fastapi import header_ip_selector
+from vpndetection_fastapi import header_ip_selector
 
 ip_selector = header_ip_selector("CF-Connecting-IP")  # or True-Client-IP, or your own
 ```
@@ -144,7 +144,7 @@ There are official VPNDetection client libraries available for many languages in
 
 VPN Detection API: Accurate anonymity detection identifying VPNs, residential proxies, hosting servers, Tor nodes, CDNs, relays and more.
 
-[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="96"/>](https://vpndetection.io/)
+[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="64"/>](https://vpndetection.io/)
 
 ## License
 

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/README.md

@@ -1,4 +1,4 @@
-# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="24"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
+# [<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="28"/>](https://vpndetection.io/) VPNDetection FastAPI Middleware
 
 [![PyPI](https://img.shields.io/pypi/v/vpndetection-fastapi.svg)](https://pypi.org/project/vpndetection-fastapi/)
 [![license](https://img.shields.io/pypi/l/vpndetection-fastapi.svg)](LICENSE)
@@ -70,7 +70,7 @@ By default the middleware uses `request.client.host`, which is the socket peer u
 For an edge that writes the address into its own header, name the header:
 
 ```python
-from python_fastapi import header_ip_selector
+from vpndetection_fastapi import header_ip_selector
 
 ip_selector = header_ip_selector("CF-Connecting-IP")  # or True-Client-IP, or your own
 ```
@@ -115,7 +115,7 @@ There are official VPNDetection client libraries available for many languages in
 
 VPN Detection API: Accurate anonymity detection identifying VPNs, residential proxies, hosting servers, Tor nodes, CDNs, relays and more.
 
-[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" width="96"/>](https://vpndetection.io/)
+[<img src="https://s3.vpndetection.io/vpndetection-public/brand/mark.svg" alt="VPNDetection" height="64"/>](https://vpndetection.io/)
 
 ## License
 

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Security",
     "Typing :: Typed",
 ]
-dependencies = ["vpndetection>=5.4.2,<6", "starlette>=0.37"]
+dependencies = ["vpndetection>=5.5.1,<6", "starlette>=0.37"]
 
 [project.urls]
 Homepage = "https://vpndetection.io"

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/src/vpndetection_fastapi/__init__.py

@@ -39,7 +39,7 @@ __all__ = [
     "xff_ip_selector",
 ]
 
-__version__ = "2.0.5"
+__version__ = "2.0.7"
 
 _SELECTORS: Selectors[Request] = bind_selectors(
     lambda request: RequestView(

{vpndetection_fastapi-2.0.5 → vpndetection_fastapi-2.0.7}/testdata/testdata.json

@@ -231,6 +231,50 @@
       "why": "first address past 192.0.2.0/24; a mask one bit too wide claims it"
     }
   ],
+  "ipv4Mapped": [
+    {
+      "ip": "::ffff:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "a public IPv4 visitor, as a server listening on :: sees every one: judged, sent and cached as 8.8.8.8, never as a bogon in ::ffff:0:0/96"
+    },
+    {
+      "ip": "::ffff:10.0.0.1",
+      "carries": "10.0.0.1",
+      "expect": true,
+      "why": "RFC 1918, mapped: a bogon for the same reason 10.0.0.1 is"
+    },
+    {
+      "ip": "::ffff:127.0.0.1",
+      "carries": "127.0.0.1",
+      "expect": true,
+      "why": "loopback, mapped: a local client of a server listening on ::"
+    },
+    {
+      "ip": "::ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address with its IPv4 half in hex"
+    },
+    {
+      "ip": "0:0:0:0:0:ffff:808:808",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "the same address written in full"
+    },
+    {
+      "ip": "::FFFF:8.8.8.8",
+      "carries": "8.8.8.8",
+      "expect": false,
+      "why": "upper-case hex digits"
+    },
+    {
+      "ip": "::8.8.8.8",
+      "carries": "::8.8.8.8",
+      "expect": true,
+      "why": "IPv4-compatible, not mapped: stays IPv6 and inside ::/96"
+    }
+  ],
   "bogonResponse": {
     "why": "A bogon is answered locally in the full max shape. Every flag is present and false, every detail object is present and empty, and is_bogon marks it as computed rather than served.",
     "flagsFalse": [
@@ -5385,7 +5429,7 @@
     ]
   },
   "oauth": {
-    "why": "The public OAuth accessor (docs/sdk/oauth.md). Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
+    "why": "The public OAuth accessor. Arguments use the canonical parameter names; form fields and response members are WIRE names, mapped by each SDK exactly as it maps any other response. mslm:apikey_id and mslm:apikey surface as apikey_id and apikey.",
     "endpoints": {
       "metadata": {
         "method": "GET",
@@ -6515,7 +6559,7 @@
       ]
     },
     "deferred": {
-      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow (docs/sdk/oauth.md, Deferred). A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
+      "why": "Vectors for authorizationUrl, exchangeAuthorizationCode, createPkce and pkceChallenge, which ship only once the server can complete the authorization-code flow. A device-flow runner never reads this key; nothing outside it names a deferred operation. emit.mjs still verifies these vectors so they are right when the methods ship.",
       "pkce": {
         "why": "RFC 7636 Appendix B. A generated verifier is 32 CSPRNG bytes as unpadded base64url.",
         "verifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk",