xenfra 0.3.2__py3-none-any.whl → 0.3.3__py3-none-any.whl

xenfra/commands/auth.py

@@ -114,18 +114,25 @@ def whoami(token):
         return
 
     try:
-        from jose import jwt
-
-        # For display purposes only, in a CLI context where the token has just
-        # been retrieved from a secure source (keyring), we can disable
-        # signature verification.
-        #
-        # SECURITY BEST PRACTICE: In a real application, especially a server,
-        # you would fetch the public key from the SSO's JWKS endpoint and
-        # fully verify the token's signature to ensure its integrity.
-        claims = jwt.decode(
-            access_token, options={"verify_signature": False}  # OK for local display
-        )
+        import base64
+        import json
+
+        # Manually decode JWT payload without verification
+        # JWT format: header.payload.signature
+        parts = access_token.split(".")
+        if len(parts) != 3:
+            console.print("[bold red]Invalid token format[/bold red]")
+            return
+
+        # Decode payload (second part)
+        payload_b64 = parts[1]
+        # Add padding if needed
+        padding = 4 - len(payload_b64) % 4
+        if padding != 4:
+            payload_b64 += "=" * padding
+
+        payload_bytes = base64.urlsafe_b64decode(payload_b64)
+        claims = json.loads(payload_bytes)
 
         console.print("[bold green]Logged in as:[/bold green]")
         console.print(f"  Email: {claims.get('sub', 'N/A')}")

xenfra/commands/intelligence.py

@@ -34,6 +34,41 @@ def get_client() -> XenfraClient:
         console.print("[bold red]Not logged in. Run 'xenfra login' first.[/bold red]")
         raise click.Abort()
 
+    # DEBUG: Show token details
+    import base64
+    import json
+    try:
+        parts = token.split(".")
+        if len(parts) == 3:
+            # Decode payload
+            payload_b64 = parts[1]
+            padding = 4 - len(payload_b64) % 4
+            if padding != 4:
+                payload_b64 += "=" * padding
+            payload_bytes = base64.urlsafe_b64decode(payload_b64)
+            claims = json.loads(payload_bytes)
+
+            console.print("[dim]━━━ DEBUG: Token Info ━━━[/dim]")
+            console.print(f"[dim]  API URL: {API_BASE_URL}[/dim]")
+            console.print(f"[dim]  Token prefix: {token[:20]}...[/dim]")
+            console.print(f"[dim]  sub (email): {claims.get('sub', 'MISSING')}[/dim]")
+            console.print(f"[dim]  user_id: {claims.get('user_id', 'MISSING')}[/dim]")
+            console.print(f"[dim]  iss (issuer): {claims.get('iss', 'MISSING')}[/dim]")
+            console.print(f"[dim]  aud (audience): {claims.get('aud', 'MISSING')}[/dim]")
+
+            # Check if token is expired
+            exp = claims.get('exp')
+            if exp:
+                import time
+                is_expired = time.time() >= exp
+                from datetime import datetime, timezone
+                exp_time = datetime.fromtimestamp(exp, tz=timezone.utc)
+                console.print(f"[dim]  expires_at: {exp_time}[/dim]")
+                console.print(f"[dim]  expired: {is_expired}[/dim]")
+            console.print("[dim]━━━━━━━━━━━━━━━━━━━━━[/dim]\n")
+    except Exception as e:
+        console.print(f"[dim]DEBUG: Could not decode token: {e}[/dim]\n")
+
     return XenfraClient(token=token, api_url=API_BASE_URL)
 
 

xenfra/utils/auth.py

@@ -195,8 +195,9 @@ def get_auth_token() -> str | None:
     try:
         access_token = keyring.get_password(SERVICE_ID, "access_token")
         refresh_token = keyring.get_password(SERVICE_ID, "refresh_token")
+        console.print("[dim]DEBUG: Token retrieved from keyring[/dim]")
     except keyring.errors.KeyringError as e:
-        console.print(f"[dim]Keyring unavailable, using file storage: {e}[/dim]")
+        console.print(f"[dim]DEBUG: Keyring unavailable, using file storage: {e}[/dim]")
         use_file_fallback = True
         access_token = _get_token_from_file("access_token")
         refresh_token = _get_token_from_file("refresh_token")

{xenfra-0.3.2.dist-info → xenfra-0.3.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: xenfra
-Version: 0.3.2
+Version: 0.3.3
 Summary: A 'Zen Mode' infrastructure engine for Python developers.
 Author: xenfra-cloud
 Author-email: xenfra-cloud <xenfracloud@gmail.com>

{xenfra-0.3.2.dist-info → xenfra-0.3.3.dist-info}/RECORD

@@ -1,19 +1,19 @@
 xenfra/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 xenfra/commands/__init__.py,sha256=kTTwVnTvoxikyPUhQiyTAbnw4PYafktuE1----TqQoA,43
-xenfra/commands/auth.py,sha256=V6azS3ohhuEufHS1j34W2If08cCfYUUeDYApGSfGedg,4118
+xenfra/commands/auth.py,sha256=ecReVCGl7Ys2d77mv_e4mCbs4ug6FLIb3S9dl2FUhr4,4178
 xenfra/commands/auth_device.py,sha256=caD2UdveEZtAFjgjmnA-l5bjbbPONFjXJXgeJN7mhbk,6710
 xenfra/commands/deployments.py,sha256=bI6d9lVYPhCDoQE3nke7s80MUQ75ILPqiEGhcbXDExo,28609
-xenfra/commands/intelligence.py,sha256=1lw1Pw6deyC52JmpK8YAVFuydAC7cvg_2qiRnw8B8Yc,13884
+xenfra/commands/intelligence.py,sha256=leaGDzSG2rGrdNLvRHHZrWsRQXvnTj3-aX7T62xdk3Y,15572
 xenfra/commands/projects.py,sha256=SAxF_pOr95K6uz35U-zENptKndKxJNZn6bcD45PHcpI,6696
 xenfra/commands/security_cmd.py,sha256=EI5sjX2lcMxgMH-LCFmPVkc9YqadOrcoSgTiKknkVRY,7327
 xenfra/main.py,sha256=2EPPuIdxjhW-I-e-Mc0i2ayeLaSJdmzddNThkXq7B7c,2033
 xenfra/utils/__init__.py,sha256=4ZRYkrb--vzoXjBHG8zRxz2jCXNGtAoKNtkyu2WRI2A,45
-xenfra/utils/auth.py,sha256=4sjcuFwiqnSTBBiE9JAX36qLpZsrn6H-v_633Pj8ia8,11534
+xenfra/utils/auth.py,sha256=jyzwGrA7NEheUoggOgERMBl-45g0NNbNhjLDv8aK-SQ,11614
 xenfra/utils/codebase.py,sha256=57GthXOvOQnUHiDwIHqxK6hNUGWlWf6Nfs3T8647Wrc,4144
 xenfra/utils/config.py,sha256=F2zedd3JXP7TBdul0u8b4NVx-C1N6Hq4sH5szyWim6M,11947
 xenfra/utils/security.py,sha256=EA8CIPLt8Y-QP5uZ7c5NuC6ZLRV1aZS8NapS9ix_vok,11479
 xenfra/utils/validation.py,sha256=cvuL_AEFJ2oCoP0abCqoOIABOwz79Gkf-jh_dcFIQlM,6912
-xenfra-0.3.2.dist-info/WHEEL,sha256=RRVLqVugUmFOqBedBFAmA4bsgFcROUBiSUKlERi0Hcg,79
-xenfra-0.3.2.dist-info/entry_points.txt,sha256=a_2cGhYK__X6eW05Ba8uB6RIM_61c2sHtXsPY8N0mic,45
-xenfra-0.3.2.dist-info/METADATA,sha256=5u2CxbFjkXvlMqnf06WIN5cr-7iBBDDf-3aCu6zjVcU,3834
-xenfra-0.3.2.dist-info/RECORD,,
+xenfra-0.3.3.dist-info/WHEEL,sha256=RRVLqVugUmFOqBedBFAmA4bsgFcROUBiSUKlERi0Hcg,79
+xenfra-0.3.3.dist-info/entry_points.txt,sha256=a_2cGhYK__X6eW05Ba8uB6RIM_61c2sHtXsPY8N0mic,45
+xenfra-0.3.3.dist-info/METADATA,sha256=uISd9cESqrhksNFb9QS9KpSeqOCs4lbs0_uT4r-5HJk,3834
+xenfra-0.3.3.dist-info/RECORD,,