primus.auth package

Cognito-backed application authentication for the Primus CLI.

Submodules

• primus.auth.cognito module
  • ApplicationAuthenticationRequired
  • AuthorizationRequest
    • AuthorizationRequest.__init__()
    • AuthorizationRequest.code_verifier
    • AuthorizationRequest.state
    • AuthorizationRequest.url
  • CognitoAuthConfig
    • CognitoAuthConfig.__init__()
    • CognitoAuthConfig.client_id
    • CognitoAuthConfig.domain
    • CognitoAuthConfig.from_environment()
    • CognitoAuthConfig.redirect_uri
    • CognitoAuthConfig.region
    • CognitoAuthConfig.scopes
  • CognitoAuthService
    • CognitoAuthService.__init__()
    • CognitoAuthService.complete_authorization()
    • CognitoAuthService.create_authorization_request()
    • CognitoAuthService.get_access_token()
    • CognitoAuthService.login()
    • CognitoAuthService.logout()
    • CognitoAuthService.validate_callback()
    • CognitoAuthService.whoami()
  • KeyringRefreshTokenStore
    • KeyringRefreshTokenStore.__init__()
    • KeyringRefreshTokenStore.delete()
    • KeyringRefreshTokenStore.get()
    • KeyringRefreshTokenStore.set()
  • LoopbackCallbackError
  • MissingApplicationSession
  • RefreshCredentialRejected
  • RefreshTokenStore
    • RefreshTokenStore.__init__()
    • RefreshTokenStore.delete()
    • RefreshTokenStore.get()
    • RefreshTokenStore.set()
  • RefreshTransportFailure
  • TokenSet
    • TokenSet.__init__()
    • TokenSet.access_token
    • TokenSet.expires_at
    • TokenSet.id_token
• primus.auth.test_cognito module
  • config()
  • test_access_token_is_cached_in_memory_until_near_expiry()
  • test_access_token_is_refreshed_from_keychain()
  • test_access_token_is_refreshed_when_it_is_within_the_pre_expiry_window()
  • test_configuration_discovers_hosted_authorization_from_amplify_output()
  • test_configuration_discovery_uses_the_hosted_domain_client_and_region()
  • test_configuration_explains_when_amplify_has_no_hosted_authorization_output()
  • test_configuration_rejects_any_unregistered_loopback_callback()
  • test_confirmed_invalid_grant_removes_refresh_credential_and_requires_login()
  • test_environment_configuration_overrides_amplify_output()
  • test_exchange_stores_only_refresh_token()
  • test_invalid_grant_raised_directly_by_post_removes_refresh_credential()
  • test_keyring_store_only_suppresses_the_keyring_not_found_error()
  • test_keyring_store_reports_a_real_delete_failure()
  • test_keyring_store_uses_the_os_keychain()
  • test_login_binds_loopback_listener_before_opening_browser()
  • test_login_keeps_listener_open_when_browser_does_not_launch()
  • test_login_url_uses_state_and_s256_pkce()
  • test_loopback_callback_does_not_wait_for_reverse_dns()
  • test_loopback_callback_rejects_missing_or_mismatched_state()
  • test_loopback_callback_rejects_provider_errors()
  • test_loopback_callback_reports_an_occupied_registered_port()
  • test_missing_refresh_credential_requires_login_without_a_network_refresh()
  • test_repeated_transient_refresh_failures_stop_after_the_bounded_retry()
  • test_token_exchange_failure_returns_actionable_login_guidance()
  • test_transient_refresh_failure_is_retried_before_the_command_fails()
  • test_typed_refresh_failures_remain_compatible_with_authentication_callers()
  • test_unproven_refresh_rejections_preserve_credential()
  • test_whoami_uses_non_sensitive_identity_from_current_token()