cznic/public/: fred-inquisitor-1.3.0 metadata and description

Simple index

inquisitor

author Jan Musílek
author_email jan.musilek@nic.cz
classifiers
  • Programming Language :: Python :: 3.10
  • Programming Language :: Python :: 3.11
  • Programming Language :: Python :: 3.12
  • Typing :: Typed
license GPLv3+
provides_extras test
requires_dist
  • fastapi~=0.90
  • fred-frgal~=3.15
  • fred-grill~=2.2
  • fred-regal~=2.0
  • fred-setapp~=0.1
  • fred-types~=2.0
  • fred-verifier~=1.0
  • oic~=1.7
  • pydantic~=2.0
  • python-jose[cryptography]~=3.3
  • python-multipart
  • PyYAML>=6.0.1
  • types-redis~=4.2
  • doc8; extra == "quality"
  • mypy; extra == "quality"
  • ruff; extra == "quality"
  • types-protobuf; extra == "types"
  • types-pytz; extra == "types"
  • types-PyYAML; extra == "types"
  • types-redis; extra == "types"
  • fakeredis; extra == "test"
  • httpx; extra == "test"
  • freezegun; extra == "test"
  • testfixtures; extra == "test"
requires_python ~=3.10

Because this project isn't in the mirror_whitelist, no releases from root/pypi are included.

File Tox results History
fred_inquisitor-1.3.0-py3-none-any.whl
Size
51 KB
Type
Python Wheel
Python
3
fred_inquisitor-1.3.0.tar.gz
Size
41 KB
Type
Source

FastAPI backend for verification portal.

Configuration

Inquisitor searches for configuration files in following order:

  1. Configuration file set by --config option of a command.
  2. Configuration file set by INQUISITOR_CONFIG environment variable.
  3. ~/.fred/inquisitor.conf
  4. /etc/fred/inquisitor.conf

The configuration file is in YAML format with following options:

secret_key

Secret key used for cryptographic purposes. Do not disclose this to anyone! This setting is required.

access_token_expires

Number of seconds of expiry period of inquisitor access token. Default is 3600, i.e. one hour.

allowed_origins

Allowed origins of cross-site requests. See https://fastapi.tiangolo.com/tutorial/cors/#use-corsmiddleware Default is [].

registry_netloc

Network location, i.e. host and port, of server with the registry services. This setting is required.

registry_ssl_cert

Path to file with SSL root certificate. Default value is None, i.e. no SSL encryption.

logger_netloc

Network location, i.e. host and port, of the logger server. This setting is required.

logger_ssl_cert

Path to file with SSL root certificate. Default value is None, i.e. no SSL encryption.

verification_netloc

Network location, i.e. host and port, of the verification server. This setting is required.

verification_ssl_cert

Path to file with SSL root certificate. Default value is None, i.e. no SSL encryption.

redis_cache_cls

Dotted path to redis cache class. This should be either redis.asyncio.Redis, redis.asyncio.cluster.RedisCluster or any other cache class that implements compatible API. This setting is required.

redis_cache_options

Dictionary with keyword arguments passed to redis_cache_cls when creating the cache instance. Default is {}.

oidc

Dictionary with OIDC configuration. This setting is required. It has following items:

  • issuer: URL of OIDC identity provider, e.g. https://mojeid.cz/oidc/. This setting is required.
  • client_id: OIDC client ID. This setting is required.
  • client_secret: OIDC client secret. This setting is required.

max_letters

Maximum number of letters allowed to be sent for each verification. Default is 2.

logging

Logging configuration, see https://docs.python.org/library/logging.config.html for possible values. Default is None, i.e. use logging defaults.

sentry

Sentry settings in a nested structure. May contain following keys:

ChangeLog

Unreleased

1.3.0 (2024-10-31)

  • Upgrade to pydantic 2 (#56)
  • Replace frgal with fred-frgal
  • Fix tests with new version of FastAPI

1.2.0 (2023-08-07)

  • Add set_contact_representative endpoint (#48)
  • Add representative to VerificationMethod enum (#51)
  • Add representative auth token endpoint (#50)
  • Upgrade to verifier 0.7 (#49)
  • Add new verification states (#52)
  • Add verify_token_by_representative endpoint (#53, #54)
  • Add resend_representative_letter endpoint (#55)

Bug fixes: * Fix PyYAML installation

1.1.0 (2023-06-14)

  • Split login view to /auth/token/ and /private/auth/token/ (#45)
  • Return HTTP status 403 instead of 401 if user has insufficient permissions (#46)
  • Add mojeid username to /oidc/last/ (#47)

1.0.0 (2023-05-23)

  • Initial version