youtrack-cli 0.3.6__tar.gz → 0.3.7__tar.gz

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: youtrack-cli
-Version: 0.3.6
+Version: 0.3.7
 Summary: YouTrack CLI - Command line interface for JetBrains YouTrack issue tracking system
 Project-URL: Homepage, https://github.com/ryan-murphy/yt-cli
 Project-URL: Documentation, https://yt-cli.readthedocs.io/
@@ -112,6 +112,9 @@ pip install -e . --group dev
 # Login to your YouTrack instance
 yt auth login
 
+# Login with SSL certificate verification disabled (for self-signed certificates)
+yt auth login --no-verify-ssl
+
 # Verify authentication
 yt auth token --show
 ```

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/README.md

@@ -72,6 +72,9 @@ pip install -e . --group dev
 # Login to your YouTrack instance
 yt auth login
 
+# Login with SSL certificate verification disabled (for self-signed certificates)
+yt auth login --no-verify-ssl
+
 # Verify authentication
 yt auth token --show
 ```

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/docs/commands/auth.rst

@@ -57,6 +57,9 @@ Authenticate with YouTrack and save credentials for subsequent CLI usage.
    * - ``--username, -n``
      - string
      - Username for reference (optional)
+   * - ``--no-verify-ssl``
+     - flag
+     - Disable SSL certificate verification (use with caution for self-signed certificates)
 
 **Examples:**
 
@@ -74,6 +77,9 @@ Authenticate with YouTrack and save credentials for subsequent CLI usage.
    # Completely non-interactive (not recommended for security)
    yt auth login --base-url https://company.youtrack.cloud --token YOUR_API_TOKEN
 
+   # Login with self-signed SSL certificate
+   yt auth login --base-url https://internal.youtrack.local --no-verify-ssl
+
 **Security Notes:**
 
 * API tokens are prompted securely and hidden during input
@@ -339,6 +345,21 @@ Connection Problems
    yt auth logout
    yt auth login --base-url https://correct.youtrack.cloud
 
+SSL Certificate Issues
+~~~~~~~~~~~~~~~~~~~~~
+
+.. code-block:: bash
+
+   # For self-signed certificates or internal CAs
+   yt auth login --base-url https://internal.youtrack.local --no-verify-ssl
+
+   # Test connectivity with SSL verification disabled
+   curl -k -H "Authorization: Bearer YOUR_TOKEN" \
+        "https://internal.youtrack.local/api/admin/projects"
+
+   # Note: SSL verification setting is saved with credentials
+   # All subsequent API calls will use the same SSL verification setting
+
 Error Handling
 --------------
 
@@ -364,6 +385,11 @@ Common error scenarios and solutions:
   * Verify connectivity to YouTrack instance
   * Check firewall and proxy settings
 
+**SSL Certificate Errors**
+  * For self-signed certificates: ``yt auth login --no-verify-ssl``
+  * For corporate CAs: Add CA certificate to system trust store
+  * Warning: Only disable SSL verification on trusted networks
+
 **Corrupted Credentials**
   * Clear stored credentials: ``yt auth logout``
   * Re-authenticate: ``yt auth login``
@@ -393,6 +419,7 @@ The configuration file contains encrypted authentication data:
    YOUTRACK_BASE_URL=https://company.youtrack.cloud
    YOUTRACK_TOKEN=perm:encrypted_token_data
    YOUTRACK_USERNAME=john.doe
+   YOUTRACK_VERIFY_SSL=true
 
 Custom Configuration
 ~~~~~~~~~~~~~~~~~~~

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "youtrack-cli"
-version = "0.3.6"
+version = "0.3.7"
 description = "YouTrack CLI - Command line interface for JetBrains YouTrack issue tracking system"
 readme = "README.md"
 requires-python = ">=3.9, <3.14"

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/uv.lock

@@ -1751,7 +1751,7 @@ wheels = [
 
 [[package]]
 name = "youtrack-cli"
-version = "0.3.6"
+version = "0.3.7"
 source = { editable = "." }
 dependencies = [
     { name = "click" },

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/youtrack_cli/auth.py

@@ -58,6 +58,7 @@ class AuthManager:
         username: Optional[str] = None,
         token_expiry: Optional[datetime] = None,
         use_keyring: bool = True,
+        verify_ssl: bool = True,
     ) -> None:
         """Save authentication credentials to config file or keyring.
 
@@ -67,6 +68,7 @@ class AuthManager:
             username: Username (optional)
             token_expiry: Token expiration date (optional)
             use_keyring: Whether to use keyring for secure storage
+            verify_ssl: Whether SSL verification is enabled
         """
         if use_keyring and self.security_config.enable_credential_encryption:
             # Store in keyring with encryption
@@ -76,6 +78,8 @@ class AuthManager:
                 self.credential_manager.store_credential("youtrack_username", username)
             if token_expiry:
                 self.credential_manager.store_credential("youtrack_token_expiry", token_expiry.isoformat())
+            # Store SSL verification setting
+            self.credential_manager.store_credential("youtrack_verify_ssl", str(verify_ssl))
 
             self.console.print("[green]✓[/green] Credentials stored securely in keyring")
         else:
@@ -90,6 +94,8 @@ class AuthManager:
                     f.write(f"YOUTRACK_USERNAME={username}\n")
                 if token_expiry:
                     f.write(f"YOUTRACK_TOKEN_EXPIRY={token_expiry.isoformat()}\n")
+                # Save SSL verification setting
+                f.write(f"YOUTRACK_VERIFY_SSL={str(verify_ssl).lower()}\n")
 
             self.console.print(
                 "[yellow]⚠[/yellow] Credentials stored in plain text file. Consider using keyring for better security."
@@ -181,12 +187,13 @@ class AuthManager:
         elif expiration_info["status"] == "expiring":
             self.console.print(f"[yellow]⚠ {expiration_info['message']}[/yellow]")
 
-    async def verify_credentials(self, base_url: str, token: str) -> dict[str, str]:
+    async def verify_credentials(self, base_url: str, token: str, verify_ssl: bool = True) -> dict[str, str]:
         """Verify credentials with YouTrack API.
 
         Args:
             base_url: YouTrack instance URL
             token: API token
+            verify_ssl: Whether to verify SSL certificates
 
         Returns:
             Dictionary with verification result
@@ -196,12 +203,16 @@ class AuthManager:
         """
         headers = {"Authorization": f"Bearer {token}", "Accept": "application/json"}
 
-        async with httpx.AsyncClient() as client:
+        # Configure SSL verification
+        client_kwargs = {"timeout": 10.0}
+        if not verify_ssl:
+            client_kwargs["verify"] = False
+
+        async with httpx.AsyncClient(**client_kwargs) as client:
             try:
                 response = await client.get(
                     f"{base_url.rstrip('/')}/api/users/me",
                     headers=headers,
-                    timeout=10.0,
                 )
                 response.raise_for_status()
 

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/youtrack_cli/client.py

@@ -36,6 +36,7 @@ class HTTPClientManager:
         max_connections: int = 100,
         keepalive_expiry: float = 30.0,
         default_timeout: float = 30.0,
+        verify_ssl: bool = True,
     ):
         """Initialize the HTTP client manager.
 
@@ -44,6 +45,7 @@ class HTTPClientManager:
             max_connections: Maximum number of total connections
             keepalive_expiry: How long to keep idle connections alive (seconds)
             default_timeout: Default timeout for requests (seconds)
+            verify_ssl: Whether to verify SSL certificates
         """
         self._limits = httpx.Limits(
             max_keepalive_connections=max_keepalive_connections,
@@ -51,6 +53,7 @@ class HTTPClientManager:
             keepalive_expiry=keepalive_expiry,
         )
         self._timeout = httpx.Timeout(default_timeout)
+        self._verify_ssl = verify_ssl
         self._client: Optional[httpx.AsyncClient] = None
         self._lock = asyncio.Lock()
 
@@ -63,11 +66,13 @@ class HTTPClientManager:
                         limits=self._limits,
                         timeout=self._timeout,
                         follow_redirects=True,
+                        verify=self._verify_ssl,
                     )
                     logger.debug(
                         "HTTP client initialized",
                         max_keepalive=self._limits.max_keepalive_connections,
                         max_connections=self._limits.max_connections,
+                        verify_ssl=self._verify_ssl,
                     )
         return self._client
 
@@ -374,7 +379,11 @@ def get_client_manager() -> HTTPClientManager:
     """Get the global HTTP client manager instance."""
     global _client_manager
     if _client_manager is None:
-        _client_manager = HTTPClientManager()
+        # Check for SSL verification setting from environment
+        import os
+
+        verify_ssl = os.getenv("YOUTRACK_VERIFY_SSL", "true").lower() != "false"
+        _client_manager = HTTPClientManager(verify_ssl=verify_ssl)
     # Type checker note: _client_manager is guaranteed to be non-None here
     return _client_manager  # type: ignore[return-value]
 

{youtrack_cli-0.3.6 → youtrack_cli-0.3.7}/youtrack_cli/main.py

@@ -607,21 +607,35 @@ def auth(ctx: click.Context) -> None:
 )
 @click.option("--token", "-t", prompt=True, hide_input=True, help="YouTrack API token")
 @click.option("--username", "-n", help="Username (optional)")
+@click.option(
+    "--no-verify-ssl",
+    is_flag=True,
+    help="Disable SSL certificate verification (use with caution)",
+)
 @click.pass_context
-def login(ctx: click.Context, base_url: str, token: str, username: Optional[str]) -> None:
+def login(
+    ctx: click.Context,
+    base_url: str,
+    token: str,
+    username: Optional[str],
+    no_verify_ssl: bool,
+) -> None:
     """Authenticate with YouTrack."""
     console = Console()
     auth_manager = AuthManager(ctx.obj.get("config"))
 
     console.print("🔐 Authenticating with YouTrack...", style="blue")
 
+    if no_verify_ssl:
+        console.print("⚠️  SSL certificate verification disabled. Use with caution!", style="yellow")
+
     try:
         # Verify credentials
-        result = asyncio.run(auth_manager.verify_credentials(base_url, token))
+        result = asyncio.run(auth_manager.verify_credentials(base_url, token, verify_ssl=not no_verify_ssl))
 
         if result["status"] == "success":
             # Save credentials
-            auth_manager.save_credentials(base_url, token, username)
+            auth_manager.save_credentials(base_url, token, username, verify_ssl=not no_verify_ssl)
 
             console.print("✅ Authentication successful!", style="green")
             console.print(f"Logged in as: {result['username']}", style="green")