warmpath 0.3.0__tar.gz → 0.3.2__tar.gz

{warmpath-0.3.0 → warmpath-0.3.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: warmpath
-Version: 0.3.0
+Version: 0.3.2
 Summary: Local LinkedIn visible-connections scraper.
 Requires-Python: >=3.10
 Requires-Dist: browser-cookie3>=0.20.1

warmpath-0.3.2/README.md

@@ -0,0 +1,55 @@
+![Warmpath banner](warmpath.jpg)
+
+# Warmpath
+
+Find LinkedIn mutuals and warm paths using your logged-in browser session.
+
+## Usage
+
+Log in to LinkedIn in a regular browser window, then import that session. Replace `chrome` with your browser's name if needed.
+
+```sh
+# Import and check your browser session
+uvx warmpath auth import --browser chrome
+uvx warmpath auth status
+
+# Find people who can introduce you to a company
+uvx warmpath company HashiCorp
+uvx warmpath company https://www.linkedin.com/company/hashicorp/ --max-degree 2 --limit 5
+
+# Find reachable people with a skill
+uvx warmpath skill Flutter
+uvx warmpath skill Leadership --max-depth 2
+
+# Find mutual connections with a person
+uvx warmpath human https://www.linkedin.com/in/mitchellh/
+
+# Refresh cached results
+uvx warmpath human https://www.linkedin.com/in/mitchellh/ --refresh-cache
+
+# Show options for a command; also works with auth, skill, and human
+uvx warmpath company --help
+```
+
+## Browser sessions
+
+Supported browsers are Chrome, Chromium, Firefox, Edge, Brave, Safari, Arc, Vivaldi, Opera, Opera GX (`opera-gx`), and LibreWolf; availability depends on your operating system. Your OS may ask for keychain/keyring access. If the cookie store is locked, close the browser and retry. Private-window sessions cannot be imported.
+
+Warmpath imports only LinkedIn's `li_at` and `JSESSIONID` cookies and manages the saved session automatically. `company`, `skill`, and `human` use it on subsequent runs. Failed imports preserve the previous session.
+
+`auth status` fetches and prints the logged-in user's name from LinkedIn, along with the source browser, import time, cookie expiry, and storage location, without displaying cookie values. It requires a connection to LinkedIn and exits with an error if the user lookup fails. If the session expires or LinkedIn stops accepting it, log in again and repeat `auth import`.
+
+## Development
+
+Browser cookie import uses [browser-cookie3](https://github.com/borisbabic/browser_cookie3).
+
+[go-task](https://taskfile.dev/) runs the repository checks. Install it with Homebrew on macOS, or follow the [installation guide](https://taskfile.dev/docs/installation) for other platforms. Then verify the tool, install the Python development dependencies, and run the checks:
+
+```sh
+# macOS
+brew install go-task
+
+task --version
+uv sync
+task check
+```

{warmpath-0.3.0 → warmpath-0.3.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "warmpath"
-version = "0.3.0"
+version = "0.3.2"
 description = "Local LinkedIn visible-connections scraper."
 requires-python = ">=3.10"
 dependencies = [

{warmpath-0.3.0 → warmpath-0.3.2}/tests/test_auth.py

@@ -6,6 +6,7 @@ from unittest.mock import Mock
 import pytest
 from requests import Request
 from requests.cookies import RequestsCookieJar
+from requests.exceptions import ConnectionError, HTTPError, Timeout
 
 from warmpath import auth, cli
 
@@ -17,6 +18,17 @@ def auth_path(tmp_path, monkeypatch):
     return path
 
 
+@pytest.fixture(autouse=True)
+def profile_fetch(monkeypatch):
+    response = Mock()
+    response.json.return_value = {
+        "miniProfile": {"firstName": "Ada", "lastName": "Lovelace"},
+    }
+    fetch = Mock(return_value=response)
+    monkeypatch.setattr(cli.Linkedin, "_fetch", fetch)
+    return fetch
+
+
 @pytest.fixture
 def browser_cookies():
     jar = RequestsCookieJar()
@@ -50,6 +62,43 @@ def test_import_reads_only_the_selected_browser(browser, browser_cookies, monkey
     assert auth.load_auth().browser == browser
 
 
+@pytest.mark.parametrize("secure", [0, 1])
+def test_browser_cookie_integer_secure_flag_round_trips(secure, reader, browser_cookies, auth_path):
+    # browser-cookie3 passes Chrome's SQLite integer flags through to Cookie.
+    for cookie in list(browser_cookies):
+        browser_cookies.set_cookie(auth.browser_cookie3.create_cookie(
+            cookie.domain, cookie.path, secure, cookie.expires,
+            cookie.name, cookie.value, True,
+        ))
+
+    cli.main(["auth", "import", "--browser", "chrome"])
+    cli.main(["auth", "status"])
+
+    payload = json.loads(auth_path.read_text())
+    assert all(record["secure"] is bool(secure) for record in payload["cookies"])
+    assert auth.load_cookies().get_dict() == browser_cookies.get_dict()
+    assert all(cookie.secure is bool(secure) for cookie in auth.load_cookies())
+
+
+@pytest.mark.parametrize("secure", [0, 1])
+def test_existing_integer_secure_flags_load_without_reimport(secure, reader, auth_path):
+    auth.import_browser("chrome")
+    payload = json.loads(auth_path.read_text())
+    for record in payload["cookies"]:
+        record["secure"] = secure
+    auth_path.write_text(json.dumps(payload))
+    before = auth_path.read_bytes()
+    reader.reset_mock()
+
+    cli.main(["auth", "status"])
+    cookies = auth.load_cookies()
+
+    assert not auth.load_auth().missing_cookies()
+    assert all(cookie.secure is bool(secure) for cookie in cookies)
+    assert auth_path.read_bytes() == before
+    reader.assert_not_called()
+
+
 def test_import_filters_unrelated_expired_and_out_of_scope_cookies(reader, browser_cookies, auth_path):
     for name, domain, path, expires, value in [
         ("tracking", ".linkedin.com", "/", None, "unrelated-tracking-token"),
@@ -99,8 +148,9 @@ def test_imported_session_reaches_linkedin_with_csrf_and_cookie_attributes(reade
     assert "Cookie" not in session.prepare_request(Request("GET", "http://www.linkedin.com/")).headers
 
 
-def test_import_and_status_report_metadata_without_cookie_values(reader, capsys, auth_path):
+def test_import_and_status_report_metadata_without_cookie_values(reader, capsys, auth_path, profile_fetch):
     cli.main(["auth", "import", "--browser", "Chrome"])
+    profile_fetch.assert_not_called()
     before = auth_path.read_bytes()
     reader.reset_mock()
     cli.main(["auth", "status"])
@@ -108,6 +158,7 @@ def test_import_and_status_report_metadata_without_cookie_values(reader, capsys,
     output = capsys.readouterr()
     assert output.err == ""
     assert output.out.count("Status: ready (local expiry check)") == 2
+    assert output.out.count("User: Ada Lovelace") == 1
     assert "Browser: chrome" in output.out
     assert "Imported:" in output.out
     assert str(auth_path) in output.out
@@ -117,6 +168,84 @@ def test_import_and_status_report_metadata_without_cookie_values(reader, capsys,
     assert "private-csrf-token" not in output.out
     assert auth_path.read_bytes() == before
     reader.assert_not_called()
+    profile_fetch.assert_called_once_with("/me", timeout=15, evade=cli.no_delay)
+
+
+@pytest.mark.parametrize("profile,expected", [
+    ({"firstName": "  Ada ", "lastName": " Lovelace  "}, "Ada Lovelace"),
+    ({"firstName": "Адель", "lastName": "Низамутдинов"}, "Адель Низамутдинов"),
+    ({"firstName": "Ada"}, "Ada"),
+    ({"lastName": "Lovelace"}, "Lovelace"),
+])
+def test_status_prints_the_logged_in_users_name(profile, expected, reader, profile_fetch, capsys):
+    auth.import_browser("chrome")
+    profile_fetch.return_value.json.return_value = {"miniProfile": profile}
+
+    cli.main(["auth", "status"])
+
+    assert f"User: {expected}\n" in capsys.readouterr().out
+
+
+@pytest.mark.parametrize("payload", [
+    {}, None, [], {"miniProfile": None}, {"miniProfile": "private-linkedin-token"},
+    {"miniProfile": {"firstName": " ", "lastName": None}},
+    {"miniProfile": {"firstName": ["private-linkedin-token"], "lastName": 123}},
+])
+def test_status_rejects_a_profile_without_a_name(payload, reader, profile_fetch, capsys):
+    auth.import_browser("chrome")
+    profile_fetch.return_value.json.return_value = payload
+
+    with pytest.raises(SystemExit) as error:
+        cli.main(["auth", "status"])
+
+    assert error.value.code == 2
+    output = capsys.readouterr()
+    assert "LinkedIn did not return a name" in output.err
+    assert "User:" not in output.out
+    assert "private-linkedin-token" not in output.out + output.err
+
+
+@pytest.mark.parametrize("failure", ["connection", "timeout", "http", "json"])
+def test_status_handles_failed_user_lookup_without_exposing_secrets(failure, reader, profile_fetch, capsys, auth_path):
+    auth.import_browser("chrome")
+    before = auth_path.read_bytes()
+    reader.reset_mock()
+    if failure == "connection":
+        profile_fetch.side_effect = ConnectionError("private-linkedin-token")
+    elif failure == "timeout":
+        profile_fetch.side_effect = Timeout("private-linkedin-token")
+    elif failure == "http":
+        profile_fetch.return_value.raise_for_status.side_effect = HTTPError("private-linkedin-token")
+    else:
+        profile_fetch.return_value.json.side_effect = ValueError("private-linkedin-token")
+
+    with pytest.raises(SystemExit) as error:
+        cli.main(["auth", "status"])
+
+    assert error.value.code == 2
+    output = capsys.readouterr()
+    assert "Could not fetch the logged-in LinkedIn user" in output.err
+    assert "warmpath auth import --browser" in output.err
+    assert "User:" not in output.out
+    assert "private-linkedin-token" not in output.out + output.err
+    assert auth_path.read_bytes() == before
+    reader.assert_not_called()
+
+
+@pytest.mark.parametrize("status_code", [401, 403])
+def test_status_reports_rejected_sessions(status_code, reader, profile_fetch, capsys):
+    auth.import_browser("chrome")
+    profile_fetch.return_value.status_code = status_code
+
+    with pytest.raises(SystemExit) as error:
+        cli.main(["auth", "status"])
+
+    assert error.value.code == 2
+    output = capsys.readouterr()
+    assert "LinkedIn rejected the saved session" in output.err
+    assert "warmpath auth import --browser" in output.err
+    assert "User:" not in output.out
+    profile_fetch.return_value.json.assert_not_called()
 
 
 @pytest.mark.skipif(os.name != "posix", reason="Unix file permissions")
@@ -215,6 +344,7 @@ def test_corrupt_store_has_reimport_guidance(content, auth_path, capsys):
 
 @pytest.mark.parametrize("field,value", [
     ("domain", "example.org"), ("path", "/jobs"), ("secure", "true"),
+    ("secure", 2), ("secure", -1), ("secure", 0.0), ("secure", 1.0), ("secure", None),
     ("expires", "tomorrow"), ("expires", 10**20),
     ("domain_specified", False), ("value", "token\r\nInjected: header"),
 ])
@@ -228,7 +358,7 @@ def test_invalid_stored_cookie_is_rejected(field, value, reader, auth_path):
         auth.load_cookies()
 
 
-def test_expired_session_is_reported_and_rejected_without_reimport(reader, capsys):
+def test_expired_session_is_reported_and_rejected_without_reimport(reader, capsys, profile_fetch):
     session = auth.import_browser("chrome")
     next(cookie for cookie in session.cookies if cookie.name == "li_at").expires = 1
     auth.save_auth(session)
@@ -249,6 +379,7 @@ def test_expired_session_is_reported_and_rejected_without_reimport(reader, capsy
     assert api_error.value.code == 2
     assert "warmpath auth import --browser chrome" in capsys.readouterr().err
     reader.assert_not_called()
+    profile_fetch.assert_not_called()
 
 
 @pytest.mark.parametrize("arguments", [[], ["import"], ["import", "--browser", "unknown"], ["login"]])

{warmpath-0.3.0 → warmpath-0.3.2}/uv.lock

@@ -616,7 +616,7 @@ wheels = [
 
 [[package]]
 name = "warmpath"
-version = "0.3.0"
+version = "0.3.2"
 source = { editable = "." }
 dependencies = [
     { name = "browser-cookie3" },

{warmpath-0.3.0 → warmpath-0.3.2}/warmpath/auth.py

@@ -93,7 +93,7 @@ def save_auth(session: AuthSession) -> None:
                 "domain": cookie.domain,
                 "domain_specified": cookie.domain_specified,
                 "path": cookie.path,
-                "secure": cookie.secure,
+                "secure": bool(cookie.secure),
                 "expires": cookie.expires,
             }
             for cookie in session.cookies
@@ -173,7 +173,9 @@ def load_auth() -> AuthSession:
                     not isinstance(record.get(key), str)
                     for key in ("name", "value", "domain", "path")
                 )
-                or type(record.get("secure")) is not bool
+                # Older imports saved browser-cookie3's integer 0/1 Secure flag.
+                or type(record.get("secure")) not in (bool, int)
+                or record["secure"] not in (0, 1)
                 or type(record.get("domain_specified")) is not bool
                 or (
                     record.get("expires") is not None
@@ -186,7 +188,7 @@ def load_auth() -> AuthSession:
                 value=record["value"],
                 domain=record["domain"],
                 path=record["path"],
-                secure=record["secure"],
+                secure=bool(record["secure"]),
                 expires=record.get("expires"),
             )
             cookie.domain_specified = record["domain_specified"]

{warmpath-0.3.0 → warmpath-0.3.2}/warmpath/cli.py

@@ -9,6 +9,7 @@ from typing import Any, Callable, NoReturn
 from urllib.parse import unquote, urlparse
 
 from open_linkedin_api import Linkedin
+from requests.exceptions import RequestException
 
 from warmpath import auth
 
@@ -109,6 +110,35 @@ def build_api() -> Any:
     return api
 
 
+def logged_in_user_name(api: Any) -> str:
+    try:
+        response = api._fetch("/me", timeout=15)
+        if response.status_code in (401, 403):
+            raise auth.AuthError(
+                "LinkedIn rejected the saved session. Sign in to LinkedIn, "
+                f"then reimport your session. {auth.IMPORT_HINT}"
+            )
+        response.raise_for_status()
+        data = response.json()
+    except (RequestException, ValueError) as exc:
+        raise auth.AuthError(
+            "Could not fetch the logged-in LinkedIn user. Check your connection "
+            f"and try again, or reimport your session. {auth.IMPORT_HINT}"
+        ) from exc
+
+    profile = data.get("miniProfile") if isinstance(data, dict) else None
+    name = ""
+    if isinstance(profile, dict):
+        name = " ".join(
+            value.strip()
+            for key in ("firstName", "lastName")
+            if isinstance(value := profile.get(key), str) and value.strip()
+        )
+    if not name:
+        raise auth.AuthError("LinkedIn did not return a name for the logged-in user.")
+    return name
+
+
 def profile_urn_id(api: Any, public_id: str) -> str:
     urn_id = profile_urn_id_from_html(api, public_id)
     if urn_id:
@@ -1743,7 +1773,7 @@ def parse_auth_args(argv: list[str]) -> argparse.Namespace:
         choices=auth.BROWSERS,
         help="Browser where you are logged in to LinkedIn.",
     )
-    commands.add_parser("status", help="Check the saved session and cookie expiry locally.")
+    commands.add_parser("status", help="Show the logged-in user and saved session details.")
     return parser.parse_args(argv)
 
 
@@ -1757,6 +1787,8 @@ def run_auth_command(args: argparse.Namespace) -> None:
         print(auth.render_status(session))
         if session.missing_cookies():
             raise SystemExit(1)
+        if args.auth_command == "status":
+            print(f"User: {logged_in_user_name(build_api())}")
     except auth.AuthError as exc:
         fail(str(exc), 2)
 
@@ -1771,7 +1803,7 @@ def parse_main_args(argv: list[str]) -> argparse.Namespace:
     Import your LinkedIn session from a browser.
 
   auth status
-    Check the saved session and cookie expiry locally.
+    Show the logged-in user and saved session details.
 
   human PROFILE_URL
     Print mutual LinkedIn connections for a profile URL.

warmpath-0.3.0/README.md

@@ -1,80 +0,0 @@
-![Warmpath banner](warmpath.jpg)
-
-# Warmpath
-
-Find LinkedIn mutuals and warm paths using your logged-in browser session.
-
-## Setup
-
-Log in to LinkedIn in a regular browser window, then import that session:
-
-```sh
-uvx warmpath auth import --browser chrome
-uvx warmpath auth status
-```
-
-Import uses [browser-cookie3](https://github.com/borisbabic/browser_cookie3) to read your browser's local cookie store. Supported browsers are Chrome, Chromium, Firefox, Edge, Brave, Safari, Arc, Vivaldi, Opera, Opera GX (`opera-gx`), and LibreWolf; availability depends on your operating system. Your OS may ask for keychain/keyring access. If the cookie store is locked, close the browser and retry. Private-window sessions cannot be imported.
-
-Warmpath imports only LinkedIn's `li_at` and `JSESSIONID` cookies and manages the saved session automatically. `company`, `skill`, and `human` use it on subsequent runs. Failed imports preserve the previous session.
-
-`auth status` shows the source browser, import time, cookie expiry, and storage location without displaying cookie values. It checks the saved session locally; LinkedIn may revoke a session before its cookies expire. If the session expires or LinkedIn stops accepting it, log in again and repeat `auth import`.
-
-## Development
-
-[go-task](https://taskfile.dev/) is required to run the repository checks. Install it with Homebrew on macOS:
-
-```sh
-brew install go-task
-```
-
-For other platforms, follow the [go-task installation guide](https://taskfile.dev/docs/installation). Verify that the `task` command is available before running any checks:
-
-```sh
-task --version
-```
-
-Then install the Python development dependencies and run the full check suite:
-
-```sh
-uv sync
-task check
-```
-
-## Usage
-
-### Company
-
-Who can introduce me into this company?
-
-```sh
-uvx warmpath company HashiCorp
-```
-
-### Skill
-
-Which reachable people match this recruiting need?
-
-```sh
-uvx warmpath skill Flutter
-```
-
-### Human
-
-Can I reach this exact person, and through whom?
-
-```sh
-uvx warmpath human https://www.linkedin.com/in/mitchellh/
-```
-
-## More Examples
-
-```sh
-uvx warmpath company "HashiCorp" --max-degree 2 --limit 5
-uvx warmpath auth import --browser firefox
-uvx warmpath company https://www.linkedin.com/company/hashicorp/
-uvx warmpath skill Leadership --max-depth 2
-uvx warmpath human https://www.linkedin.com/in/mitchellh/ --refresh-cache
-uvx warmpath company --help
-uvx warmpath skill --help
-uvx warmpath human --help
-```