xn-auth 0.2.68.dev2__tar.gz → 0.2.69__tar.gz

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/.pre-commit-config.yaml

@@ -4,7 +4,7 @@ repos:
   - id: tag
     name: tag
     ### make tag with next ver only if "fix" in commit_msg or starts with "feat"
-    entry: bash -c 'grep -e "^feat:" -e "^fix:" .git/COMMIT_EDITMSG && make patch || exit 0'
+    entry: bash -c 'if grep -qE "^(feat|fix):" .git/COMMIT_EDITMSG; then make patch; fi'
     language: system
     verbose: true
     pass_filenames: false
@@ -23,7 +23,7 @@ repos:
 
 - repo: https://github.com/astral-sh/ruff-pre-commit
   ### Ruff version.
-  rev: v0.12.7
+  rev: v0.16.4
   hooks:
     ### Run the linter.
     - id: ruff

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/CLAUDE.md

@@ -26,7 +26,7 @@ twine upload dist/*
 1. **Entry point**: `Auth` class in `controller.py` - initializes `JWTCookieAuth` from Litestar with custom middleware
 2. **Endpoints**: `/auth/tma` (Mini App initData) and `/auth/twa` (Login Widget) - both validate Telegram signatures and issue JWT tokens
 3. **Token handling**: Custom `Tok` class in `middleware.py` extends `Token` to catch `ExpiredSignatureError` and re-encode with fresh timestamps
-4. **Auto-refresh**: `JWTAuthMiddleware` intercepts expired tokens, checks if user is blocked via `User.permissions()`, updates role if changed, and sets new cookie
+4. **Auto-refresh**: `JWTAuthMiddleware` intercepts expired tokens (signature still verified), refreshes `role`/`blocked` from `User.permissions()` and sets new cookie. the refresh is never refused — gating on `blocked` is up to the app (e.g. a guard)
 
 ### Key Components
 

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: xn-auth
-Version: 0.2.68.dev2
+Version: 0.2.69
 Summary: Auth adapter for XN-Api framework
 Author-email: Artemiev <mixartemev@gmail.com>
 License: MIT
@@ -21,6 +21,7 @@ Requires-Dist: pre-commit; extra == "dev"
 Requires-Dist: python-dotenv; extra == "dev"
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: pytest-asyncio; extra == "dev"
+Requires-Dist: setuptools-scm>=8; extra == "dev"
 Requires-Dist: twine; extra == "dev"
 
 # X-Auth

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/pyproject.toml

@@ -26,6 +26,7 @@ dev = [
     "python-dotenv",
     "pytest",
     "pytest-asyncio",
+    "setuptools-scm>=8",
     "twine"
 ]
 

xn_auth-0.2.69/x_auth/exceptions.py

@@ -0,0 +1,2 @@
+class ExpiredSignature(Exception):
+    def __init__(self, payload: dict): ...

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/x_auth/middleware.py

@@ -32,15 +32,7 @@ class Tok(Token):
             logging.warning("JWToken expired")
             options["verify_exp"] = False
             payload = super().decode_payload(encoded_token, secret, algorithms, issuer, audience, options)
-            payload.update(
-                {
-                    "exp": (now := int(datetime.now(timezone.utc).timestamp())) + (payload["exp"] - payload["iat"]),
-                    "iat": now,
-                }
-            )
-            tok = convert(payload, cls, strict=False)
-            encoded_token = tok.encode(secret, algorithms[0])
-            raise ExpiredSignature(int(payload["sub"]), encoded_token, secret, e)
+            raise ExpiredSignature(payload) from e  # подпись проверена, просрочен только exp
 
 
 class JWTAuthMiddleware(JWTCookieAuthenticationMiddleware):
@@ -48,17 +40,13 @@ class JWTAuthMiddleware(JWTCookieAuthenticationMiddleware):
         try:
             await super().__call__(scope, receive, send)
         except ExpiredSignature as e:
-            uid, uet, secret, _e = e.args  # uid, updated encoded token
-            blocked, role = await scope["app"].state.get("user_model").permissions(uid)
-            if blocked:
-                logging.error(f"User#{uid} can't refresh. Blocked!")
-                raise _e
-            payload = Tok.decode_payload(uet, secret, ["HS256"])
-            if role.value != payload["extras"]["role"]:
-                # update user role in jwtoken
-                payload["extras"]["role"] = role.value
-                tok = convert(payload, Tok, strict=False)
-                uet = tok.encode(secret, "HS256")
+            (payload,) = e.args
+            # продлеваем всем, extras — свежие из БД; что делать с blocked (бот не пишет в ЛС), решает приложение
+            blocked, role = await scope["app"].state.get("user_model").permissions(int(payload["sub"]))
+            now = int(datetime.now(timezone.utc).timestamp())
+            payload.update(exp=now + payload["exp"] - payload["iat"], iat=now)
+            payload["extras"].update(role=role.value, blocked=blocked)
+            uet = convert(payload, Tok, strict=False).encode(self.token_secret, self.algorithm)
 
             async def send_wrapper(msg: Message) -> None:
                 if msg["type"] == "http.response.start":

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/xn_auth.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: xn-auth
-Version: 0.2.68.dev2
+Version: 0.2.69
 Summary: Auth adapter for XN-Api framework
 Author-email: Artemiev <mixartemev@gmail.com>
 License: MIT
@@ -21,6 +21,7 @@ Requires-Dist: pre-commit; extra == "dev"
 Requires-Dist: python-dotenv; extra == "dev"
 Requires-Dist: pytest; extra == "dev"
 Requires-Dist: pytest-asyncio; extra == "dev"
+Requires-Dist: setuptools-scm>=8; extra == "dev"
 Requires-Dist: twine; extra == "dev"
 
 # X-Auth

{xn_auth-0.2.68.dev2 → xn_auth-0.2.69}/xn_auth.egg-info/requires.txt

@@ -11,4 +11,5 @@ pre-commit
 python-dotenv
 pytest
 pytest-asyncio
+setuptools-scm>=8
 twine

xn_auth-0.2.69/xn_auth.egg-info/scm_version.json

@@ -0,0 +1,8 @@
+{
+  "tag": "0.2.69",
+  "distance": 0,
+  "node": "g81f29cc3107eb762cbf50176f5f5ee211168fe99",
+  "dirty": false,
+  "branch": "main",
+  "node_date": "2026-10-30"
+}

xn_auth-0.2.68.dev2/x_auth/exceptions.py

@@ -1,5 +0,0 @@
-from jwt import ExpiredSignatureError
-
-
-class ExpiredSignature(Exception):
-    def __init__(self, uid: int, encoded_token: str, secret: str, _e: ExpiredSignatureError): ...

xn_auth-0.2.68.dev2/xn_auth.egg-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "0.2.67",
-  "distance": 2,
-  "node": "g04ae72ce55eeb456f913a8433078411503e587cd",
-  "dirty": false,
-  "branch": "main",
-  "node_date": "2026-08-25"
-}