vpndetection-fastapi 2.1.7__tar.gz → 2.1.9__tar.gz

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 What each release changed for you, newest first. Each line is a commit's summary, linked to its full description and diff. Releases before 2.0.5 are described by their release commits.
 
+## 2.1.9 - 2026-10-20
+
+### Features
+
+- Require vpndetection 5.11.0: lookup results carry location and asn ([`ada4345`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/ada4345bde920539b2f279f03d790ae42a74998d))
+
+## 2.1.8 - 2026-10-19
+
+### Fixes
+
+- Require vpndetection 5.10.0: num_ports and num_proxies in the pubproxy detail ([`c5fa5cb`](https://github.com/vpndetection-io/sdk-python-fastapi/commit/c5fa5cb80237225ebb3d7aee077094549fbf9451))
+
 ## 2.1.7 - 2026-10-18
 
 ### Fixes

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vpndetection-fastapi
-Version: 2.1.7
+Version: 2.1.9
 Summary: Official FastAPI and Starlette middleware for the VPNDetection API. Detect VPNs, proxies, Tor, hosting and CDN visitors on every request.
 Project-URL: Homepage, https://vpndetection.io
 Project-URL: Source, https://github.com/vpndetection-io/sdk-python-fastapi
@@ -20,7 +20,7 @@ Classifier: Topic :: Security
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Requires-Dist: starlette>=0.37
-Requires-Dist: vpndetection<6,>=5.9.0
+Requires-Dist: vpndetection<6,>=5.11.0
 Provides-Extra: dev
 Requires-Dist: fastapi>=0.115; extra == 'dev'
 Requires-Dist: mypy>=1.11; extra == 'dev'
@@ -45,7 +45,7 @@ pip install vpndetection-fastapi
 
 Requires Python 3.11 or newer.
 
-You need an API key. Create one in the [console](https://app.vpndetection.io); the free tier's allowance is counted per source address, and a server is a single source address, so a key is what makes this usable in production rather than optional.
+You need an API key. Create one in the [console](https://app.vpndetection.io); without one the allowance is counted per source address, and a server is a single source address, so a key is what makes this usable in production rather than optional.
 
 ```python
 from fastapi import FastAPI
@@ -146,7 +146,7 @@ Beyond a few million distinct visitors a day, stop calling the API per request:
 
 ## Absent is not false
 
-Only `ip` and `is_vpn` come back on every plan. A field your plan does not include is `None`, which means "not in your plan" rather than "checked, and no".
+Without a key only `ip` and `is_vpn` come back, and a free key adds Tor, relay, `location` and `asn`. A field your plan does not include is `None`, which means "not in your plan" rather than "checked, and no".
 
 ```python
 lookup(request).result.is_hosting  # None when your plan does not include it

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/README.md

@@ -15,7 +15,7 @@ pip install vpndetection-fastapi
 
 Requires Python 3.11 or newer.
 
-You need an API key. Create one in the [console](https://app.vpndetection.io); the free tier's allowance is counted per source address, and a server is a single source address, so a key is what makes this usable in production rather than optional.
+You need an API key. Create one in the [console](https://app.vpndetection.io); without one the allowance is counted per source address, and a server is a single source address, so a key is what makes this usable in production rather than optional.
 
 ```python
 from fastapi import FastAPI
@@ -116,7 +116,7 @@ Beyond a few million distinct visitors a day, stop calling the API per request:
 
 ## Absent is not false
 
-Only `ip` and `is_vpn` come back on every plan. A field your plan does not include is `None`, which means "not in your plan" rather than "checked, and no".
+Without a key only `ip` and `is_vpn` come back, and a free key adds Tor, relay, `location` and `asn`. A field your plan does not include is `None`, which means "not in your plan" rather than "checked, and no".
 
 ```python
 lookup(request).result.is_hosting  # None when your plan does not include it

vpndetection_fastapi-2.1.9/SECURITY.md

@@ -0,0 +1,5 @@
+# Security policy
+
+Please report a security issue in this repository by email to security@vpndetection.io, not in a public issue, pull request or discussion. Include what you found and the steps that reproduce it.
+
+Keep any testing against the VPNDetection API to your own account and API key, and give us a reasonable chance to fix the issue before you publish it.

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/pyproject.toml

@@ -24,7 +24,7 @@ classifiers = [
     "Topic :: Security",
     "Typing :: Typed",
 ]
-dependencies = ["vpndetection>=5.9.0,<6", "starlette>=0.37"]
+dependencies = ["vpndetection>=5.11.0,<6", "starlette>=0.37"]
 
 [project.urls]
 Homepage = "https://vpndetection.io"

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/src/vpndetection_fastapi/__init__.py

@@ -45,7 +45,7 @@ __all__ = [
     "xff_ip_selector",
 ]
 
-__version__ = "2.1.7"
+__version__ = "2.1.9"
 
 # Set on a request ``skip`` claimed, so block_if can tell it from one the middleware
 # never saw.

{vpndetection_fastapi-2.1.7 → vpndetection_fastapi-2.1.9}/testdata/testdata.json

@@ -296,7 +296,7 @@
     }
   ],
   "bogonResponse": {
-    "why": "A bogon is answered locally in the full max shape. Every flag is present and false, every detail object is present and empty, and is_bogon marks it as computed rather than served.",
+    "why": "A bogon is answered locally in the full shape. Every flag is present and false, every detail object is present and empty, location and asn carry every key empty as the API answers a bogon (asn 0, strings empty), and is_bogon marks it as computed rather than served.",
     "flagsFalse": [
       "is_vpn",
       "is_hosting",
@@ -318,7 +318,26 @@
       "dcproxy",
       "mobproxy",
       "pubproxy"
-    ]
+    ],
+    "location": {
+      "continent": "",
+      "continent_name": "",
+      "country": "",
+      "country_name": "",
+      "timezone": "",
+      "currency_code": "",
+      "currency_name": "",
+      "currency_symbol": "",
+      "flag_emoji": "",
+      "flag_unicode": ""
+    },
+    "asn": {
+      "asn": 0,
+      "name": "",
+      "domain": "",
+      "type": "",
+      "prefix": ""
+    }
   },
   "lookup": [
     {
@@ -493,11 +512,13 @@
         "mobproxy": {},
         "pubproxy": {
           "entry": true,
-          "exit": false,
+          "exit": true,
           "protocols": [
             "http",
             "https"
           ],
+          "num_ports": 3,
+          "num_proxies": 2,
           "last_seen": "2026-10-17",
           "last_usable": ""
         }
@@ -528,11 +549,13 @@
         },
         "pubproxy": {
           "entry": true,
-          "exit": false,
+          "exit": true,
           "protocols": [
             "http",
             "https"
           ],
+          "num_ports": 3,
+          "num_proxies": 2,
           "last_seen": "2026-10-17",
           "last_usable": ""
         }
@@ -614,6 +637,85 @@
           "pubproxy"
         ]
       }
+    },
+    {
+      "name": "free-location-asn",
+      "why": "A free key's shape since 2026-10-20: Tor and relay beside the VPN flag, and where the address is and which AS announces it. location and asn carry every key whenever present, so each maps whole.",
+      "status": 200,
+      "body": {
+        "ip": "146.70.116.130",
+        "is_vpn": true,
+        "is_relay": false,
+        "is_tor": false,
+        "relay": {},
+        "tor": {},
+        "location": {
+          "continent": "EU",
+          "continent_name": "Europe",
+          "country": "AT",
+          "country_name": "Austria",
+          "timezone": "Europe/Vienna",
+          "currency_code": "EUR",
+          "currency_name": "Euro",
+          "currency_symbol": "€",
+          "flag_emoji": "🇦🇹",
+          "flag_unicode": "U+1F1E6 U+1F1F9"
+        },
+        "asn": {
+          "asn": 9009,
+          "name": "M247 Europe SRL",
+          "domain": "m247global.com",
+          "type": "hosting",
+          "prefix": "146.70.116.0/24"
+        }
+      },
+      "expect": {
+        "ip": "146.70.116.130",
+        "isBogon": false,
+        "present": {
+          "is_vpn": true,
+          "is_relay": false,
+          "is_tor": false
+        },
+        "absent": [
+          "is_hosting",
+          "is_cdn",
+          "is_resproxy",
+          "is_dcproxy",
+          "is_mobproxy",
+          "is_pubproxy",
+          "vpn",
+          "hosting",
+          "cdn",
+          "resproxy",
+          "dcproxy",
+          "mobproxy",
+          "pubproxy"
+        ],
+        "emptyPresent": [
+          "relay",
+          "tor"
+        ],
+        "location": {
+          "continent": "EU",
+          "continent_name": "Europe",
+          "country": "AT",
+          "country_name": "Austria",
+          "timezone": "Europe/Vienna",
+          "currency_code": "EUR",
+          "currency_name": "Euro",
+          "currency_symbol": "€",
+          "flag_emoji": "🇦🇹",
+          "flag_unicode": "U+1F1E6 U+1F1F9"
+        },
+        "asn": {
+          "asn": 9009,
+          "name": "M247 Europe SRL",
+          "domain": "m247global.com",
+          "type": "hosting",
+          "prefix": "146.70.116.0/24"
+        }
+      }
     }
   ],
   "errors": [
@@ -5503,6 +5605,8 @@
             "protocols": [
               "socks5"
             ],
+            "num_ports": 1,
+            "num_proxies": 0,
             "last_seen": "2026-10-17",
             "last_usable": "2026-10-16"
           }
@@ -5562,6 +5666,8 @@
             "protocols": [
               "socks5"
             ],
+            "num_ports": 1,
+            "num_proxies": 0,
             "last_seen": "2026-10-17",
             "last_usable": "2026-10-16"
           }
@@ -6807,6 +6913,497 @@
           }
         }
       ]
+    },
+    "register": {
+      "why": "Vectors for register, RFC 7591 dynamic client registration: the client_id a client gets when it cannot serve a Client ID Metadata Document. The one OAuth request whose body is JSON. Nothing is stored until a person approves the client, so registering again consumes nothing and the operation takes the client's retries. noCredential holds for it as for every OAuth operation. A runner that has not shipped register never reads this key; nothing outside it names the operation.",
+      "endpoint": {
+        "method": "POST",
+        "path": "/oauth/register"
+      },
+      "contentType": "application/json",
+      "bodies": {
+        "why": "Decode the received body as JSON and compare it EXACTLY: same members, no extras, same values, redirect_uris in the order given. An optional argument given empty is left out, never sent empty. Values carrying a quote, a backslash, + & = % / space and non-ASCII catch an encoder that builds JSON by hand.",
+        "cases": [
+          {
+            "name": "redirect-uris-only",
+            "args": {
+              "redirectUris": [
+                "http://127.0.0.1:8765/callback"
+              ]
+            },
+            "body": {
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ]
+            }
+          },
+          {
+            "name": "several-uris-and-a-name",
+            "args": {
+              "redirectUris": [
+                "https://app.example.com/oauth/callback",
+                "http://localhost/cb?a=1&b=two words%2B"
+              ],
+              "clientName": "Exämple \"CLI\" + tools/\\ 中"
+            },
+            "body": {
+              "redirect_uris": [
+                "https://app.example.com/oauth/callback",
+                "http://localhost/cb?a=1&b=two words%2B"
+              ],
+              "client_name": "Exämple \"CLI\" + tools/\\ 中"
+            }
+          },
+          {
+            "name": "an-empty-client-name-is-left-out",
+            "args": {
+              "redirectUris": [
+                "http://[::1]/cb"
+              ],
+              "clientName": ""
+            },
+            "body": {
+              "redirect_uris": [
+                "http://[::1]/cb"
+              ]
+            }
+          }
+        ]
+      },
+      "refusals": {
+        "why": "Refused before anything is sent, the way the SDK refuses a required value given empty in the code flow's methods: no request reaches the server. Only emptiness is checked here; which URIs are acceptable is the server's to say (invalid_redirect_uri).",
+        "cases": [
+          {
+            "name": "no-redirect-uris",
+            "args": {
+              "redirectUris": []
+            }
+          },
+          {
+            "name": "an-empty-redirect-uri",
+            "args": {
+              "redirectUris": [
+                "http://127.0.0.1:8765/callback",
+                ""
+              ]
+            }
+          }
+        ]
+      },
+      "responses": {
+        "why": "Decoding a 2xx, as the other responses sections do: every listed member present with that value, every absent one the language's absence. client_id_issued_at is Unix seconds, so a 32-bit integer holds it only until 2038.",
+        "cases": [
+          {
+            "name": "as-served",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "grant_types": [
+                "authorization_code",
+                "refresh_token"
+              ],
+              "response_types": [
+                "code"
+              ],
+              "token_endpoint_auth_method": "none",
+              "scope": "apikeys.use"
+            },
+            "expect": {
+              "present": {
+                "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+                "client_id_issued_at": 1792304178,
+                "client_name": "Example CLI",
+                "redirect_uris": [
+                  "http://127.0.0.1:8765/callback"
+                ],
+                "grant_types": [
+                  "authorization_code",
+                  "refresh_token"
+                ],
+                "response_types": [
+                  "code"
+                ],
+                "token_endpoint_auth_method": "none",
+                "scope": "apikeys.use"
+              },
+              "absent": []
+            }
+          },
+          {
+            "name": "rfc-minimum",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            },
+            "expect": {
+              "present": {
+                "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+                "client_id_issued_at": 1792304178,
+                "client_name": "Example CLI",
+                "redirect_uris": [
+                  "http://127.0.0.1:8765/callback"
+                ],
+                "token_endpoint_auth_method": "none"
+              },
+              "absent": [
+                "grant_types",
+                "response_types",
+                "scope"
+              ]
+            }
+          },
+          {
+            "name": "issued-after-2038",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 4102444800,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            },
+            "expect": {
+              "present": {
+                "client_id_issued_at": 4102444800
+              },
+              "absent": [
+                "scope"
+              ]
+            }
+          },
+          {
+            "name": "unknown-members-ignored",
+            "status": 200,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "grant_types": [
+                "authorization_code",
+                "refresh_token"
+              ],
+              "response_types": [
+                "code"
+              ],
+              "token_endpoint_auth_method": "none",
+              "scope": "apikeys.use",
+              "client_secret_expires_at": 0,
+              "software_id": "example"
+            },
+            "expect": {
+              "present": {
+                "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+                "scope": "apikeys.use"
+              },
+              "absent": []
+            }
+          }
+        ]
+      },
+      "unreadable": {
+        "why": "A 2xx register cannot read as its answer, with the client's retries at 0: the SDK's ordinary error (type client), kind server_error, carrying the status, after one request. Never a raw parser error, and never an empty registration. A member of the wrong type is unreadable at any depth, inside redirect_uris included, and an optional one too.",
+        "cases": [
+          {
+            "name": "html-page",
+            "status": 200,
+            "rawBody": "<html><body>Sign in</body></html>"
+          },
+          {
+            "name": "empty-body",
+            "status": 201,
+            "rawBody": ""
+          },
+          {
+            "name": "cut-off",
+            "status": 201,
+            "rawBody": "{\"client_id\":\"dcr_x\",\"client_id_is"
+          },
+          {
+            "name": "an-array",
+            "status": 201,
+            "body": []
+          },
+          {
+            "name": "empty-object",
+            "status": 201,
+            "body": {}
+          },
+          {
+            "name": "no-client-id",
+            "status": 201,
+            "body": {
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "no-client-id-issued-at",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "no-client-name",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "no-redirect-uris",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "no-token-endpoint-auth-method",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ]
+            }
+          },
+          {
+            "name": "issued-at-as-a-string",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": "1792304178",
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "redirect-uris-not-a-list",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": "http://127.0.0.1:8765/callback",
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "a-redirect-uri-not-a-string",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                1
+              ],
+              "token_endpoint_auth_method": "none"
+            }
+          },
+          {
+            "name": "scope-not-a-string",
+            "status": 201,
+            "body": {
+              "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+              "client_id_issued_at": 1792304178,
+              "client_name": "Example CLI",
+              "redirect_uris": [
+                "http://127.0.0.1:8765/callback"
+              ],
+              "token_endpoint_auth_method": "none",
+              "scope": [
+                "apikeys.use"
+              ]
+            }
+          }
+        ]
+      },
+      "retries": [
+        {
+          "name": "register-retries-a-5xx",
+          "args": {
+            "redirectUris": [
+              "http://127.0.0.1:8765/callback"
+            ]
+          },
+          "responses": [
+            {
+              "status": 503,
+              "rawBody": ""
+            },
+            {
+              "status": 201,
+              "body": {
+                "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+                "client_id_issued_at": 1792304178,
+                "client_name": "Example CLI",
+                "redirect_uris": [
+                  "http://127.0.0.1:8765/callback"
+                ],
+                "grant_types": [
+                  "authorization_code",
+                  "refresh_token"
+                ],
+                "response_types": [
+                  "code"
+                ],
+                "token_endpoint_auth_method": "none",
+                "scope": "apikeys.use"
+              }
+            }
+          ],
+          "expect": {
+            "requests": 2,
+            "outcome": "ok"
+          }
+        },
+        {
+          "name": "register-retries-an-unreadable-2xx",
+          "args": {
+            "redirectUris": [
+              "http://127.0.0.1:8765/callback"
+            ]
+          },
+          "responses": [
+            {
+              "status": 200,
+              "rawBody": "<html><body>Sign in</body></html>"
+            },
+            {
+              "status": 201,
+              "body": {
+                "client_id": "dcr_eyJ2IjoxLCJhIjoiaW50ZXJuZXRkYXRhIiwibiI6IkV4YW1wbGUgQ0xJIn0.bm90LWEtcmVhbC1tYWMtZXhhbXBsZS1vbmx5LTAxMjM",
+                "client_id_issued_at": 1792304178,
+                "client_name": "Example CLI",
+                "redirect_uris": [
+                  "http://127.0.0.1:8765/callback"
+                ],
+                "grant_types": [
+                  "authorization_code",
+                  "refresh_token"
+                ],
+                "response_types": [
+                  "code"
+                ],
+                "token_endpoint_auth_method": "none",
+                "scope": "apikeys.use"
+              }
+            }
+          ],
+          "expect": {
+            "requests": 2,
+            "outcome": "ok"
+          }
+        },
+        {
+          "name": "register-oauth-error-is-never-retried",
+          "args": {
+            "redirectUris": [
+              "http://127.0.0.1:8765/callback"
+            ]
+          },
+          "responses": [
+            {
+              "status": 400,
+              "body": {
+                "error": "slow_down",
+                "error_description": "too many requests; slow down and try again"
+              }
+            }
+          ],
+          "expect": {
+            "requests": 1,
+            "outcome": "oauth",
+            "errorCode": "slow_down"
+          }
+        }
+      ],
+      "errors": [
+        {
+          "name": "a-refused-redirect-uri",
+          "status": 400,
+          "body": {
+            "error": "invalid_redirect_uri",
+            "error_description": "redirect_uris[0] must be https, or http on a loopback address"
+          },
+          "expect": {
+            "type": "oauth",
+            "errorCode": "invalid_redirect_uri",
+            "errorDescription": "redirect_uris[0] must be https, or http on a loopback address",
+            "status": 400,
+            "kind": "bad_request",
+            "retryable": false,
+            "message": "invalid_redirect_uri: redirect_uris[0] must be https, or http on a loopback address"
+          }
+        },
+        {
+          "name": "refused-metadata",
+          "status": 400,
+          "body": {
+            "error": "invalid_client_metadata",
+            "error_description": "grant_types must include authorization_code"
+          },
+          "expect": {
+            "type": "oauth",
+            "errorCode": "invalid_client_metadata",
+            "errorDescription": "grant_types must include authorization_code",
+            "status": 400,
+            "kind": "bad_request",
+            "retryable": false,
+            "message": "invalid_client_metadata: grant_types must include authorization_code"
+          }
+        },
+        {
+          "name": "a-server-without-registration",
+          "status": 404,
+          "rawBody": "Not Found",
+          "expect": {
+            "type": "client",
+            "status": 404,
+            "kind": "bad_request",
+            "retryable": false
+          }
+        }
+      ]
     }
   },
   "bogons": {