authing / authing-py-sdk Goto Github PK

View Code? Open in Web Editor NEW

17.0 17.0 6.0 450 KB

Authing SDK for Python

Home Page: https://docs.authing.cn/v3/reference/sdk/python/install.html

License: MIT License

Python 100.00%

authing python sdk

authing-py-sdk's Issues

Bug: incorrect `use_unverified_ssl` variable usage

Description

https://github.com/Authing/authing-py-sdk/blob/0e0e0aa82e500f5667aa8b26e1a00e11720b7c2b/authing/http/ManagementHttpClient.py#L12C62-L12C62

https://github.com/Authing/authing-py-sdk/blob/0e0e0aa82e500f5667aa8b26e1a00e11720b7c2b/authing/http/ManagementHttpClient.py#L35C14-L35C14

Minimal code-snippet showcasing the problem

        self.use_unverified_ssl = use_unverified_ssl or FALSE
        ...
        verify = not self.use_unverified_ssl
        r = requests.request(..., verify=verify, ...)

not FALSE is False

Expected behavior

respect the https verification requirement

Actual behavior

/usr/local/lib/python3.10/site-packages/urllib3/connectionpool.py:1099: InsecureRequestWarning: Unverified HTTPS request is being made to host 'api.authing.cn'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#tls-warnings

更新用户资料出现语法错误（生成的Graphql语法有问题）

Feature: id_token verification in server-side <your-title-goes-here>

Description

服务端获取到code之后换取access_token和id_token，但是AuthenticationClient Class有验证access_token的合法性的函数，没有验证id_token的合法性的函数。然而官方文档描述是有个 validate_token方法验证id_token的合法性的。是否可以加上这个函数？

Proposed solution

希望添加validate_token方法验证id_token的合法性

Bug: 调用authentication_client.get_user_info_by_access_token方法报错

Description

Minimal code-snippet showcasing the problem

authentication_client = AuthenticationClient(
    app_id='x',
    app_host="x",
    app_secret='x',
)
token = "x"
authentication_client.get_user_info_by_access_token(token)

Expected behavior

返回用户资料

Actual behavior

return session.request(method=method, url=url, **kwargs)
E           TypeError: request() got an unexpected keyword argument 'token'

我看了下代码，应该在ProtocolHttpClient的request方法内添加如下内容：

if "token" in kwargs:
    headers["authorization"] = "Bearer %s" % kwargs.pop("token")

添加后可以正常调用该方法。

GraphQL client should not be initialized for every request

authing-py-sdk/authing/v2/common/graphql.py

Lines 41 to 42 in 4f0dece

 transport = RequestsHTTPTransport(self.endpoint, headers=headers, verify=not self.options.use_unverified_ssl) 

 client = Client(transport=transport, fetch_schema_from_transport=True)

The fetch_schema_from_transport has been enabled by default and thus each client initialization would preflight with a redundant schema introspection request. The GraphQL client should be cached if a token has not expired for performance improvement.

What is the `./pub.pem` file?

In [9]: client = Authing(clientId, secret) 
   ...:                                                                                                                       
---------------------------------------------------------------------------
FileNotFoundError                         Traceback (most recent call last)
<ipython-input-9-4ad802168686> in <module>
----> 1 client = Authing(clientId, secret)

~/pro/trade-server/env/lib/python3.7/site-packages/authing/authing.py in __init__(self, clientId, secret, userToken)
    132         }
    133 
--> 134         with open('./pub.pem', mode='rb') as pubFile:
    135             keyData = pubFile.read()
    136             self.pubKey = rsa.PublicKey.load_pkcs1_openssl_pem(keyData)

FileNotFoundError: [Errno 2] No such file or directory: './pub.pem'

Any related document?

authing / authing-py-sdk Goto Github PK

authing-py-sdk's Issues

Bug: incorrect `use_unverified_ssl` variable usage

Description

Expected behavior

Actual behavior

更新用户资料出现语法错误（生成的Graphql语法有问题）

Feature: id_token verification in server-side <your-title-goes-here>

Description

Proposed solution

Bug: 调用authentication_client.get_user_info_by_access_token方法报错

Description

Expected behavior

Actual behavior

GraphQL client should not be initialized for every request

What is the `./pub.pem` file?

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent

	transport = RequestsHTTPTransport(self.endpoint, headers=headers, verify=not self.options.use_unverified_ssl)
	client = Client(transport=transport, fetch_schema_from_transport=True)