woggioni/kaya
1
0
Fork 0
Code Actions Packages Releases Activity
37 Commits 2 Branches 9 Tags
opencode
Commit Graph
10 Commits
Author SHA1 Message Date
woggioni c79f268471 Add OIDC back-channel logout with session indexes 2026-10-28 07:50:14 +00:00
woggioni 88024c49ca Migrate dependency management from pip to uv 
- Add a uv workspace at the repository root covering all packages/kaya-* members
- Replace pip-compile requirements files with a committed uv.lock
- Remove redundant per-package dev extras
- Build and publish artifacts with uv build and uv publish in CI
- Update the README with uv sync/run/build commands
 2026-10-21 01:02:08 +00:00
woggioni 01a54e3fb5 Rename kaya.session_memcache → kaya.session.memcache 
- Move src/kaya/session_memcache/ → src/kaya/session/memcache/
- Add pkgutil.extend_path to kaya.session for subpackage namespace support
- Update pyproject.toml version_file path
- Update all import references (tests, READMEs, root README)
 2026-07-23 15:51:42 +00:00
woggioni ca023580e4 Fix Daphne ASGI compatibility and document WS handshake cookie limitation 
- AsgiContext and AsgiWebSocket now default missing  scope key
  to 'http' / 'ws' respectively (Daphne omits it for websocket scopes)
- Add regression test for websocket scope without scheme
- Update example/session.py WS handler to read the session; cookie must
  be set via HTTP first because common ASGI servers ignore the headers
  field on websocket.accept
- Update README with the same caveat about Granian/Daphne/curl
 2026-07-23 22:11:06 +08:00
woggioni e4e00762bb Add websocket session support to kaya-session 
- kaya-core: WebSocket ABC gains session attribute and accept(headers=...)
- kaya-core: AsgiWebSocket injects headers into websocket.accept message
- kaya-rsgi: RsgiWebSocket accepts headers param (ignored — Granian's
  accept() takes no args)
- kaya-session: SessionWebSocket wrapper exposes ws.session and injects
  Set-Cookie on accept()
- kaya-session: SessionMixin registers before/after websocket hooks;
  session loaded at connect, persisted on close if modified
- 10 new WV session tests covering read, persist, handshake cookie,
  regenerate, invalidate, isolation
- Example and README updated
 2026-07-23 22:11:04 +08:00
woggioni 65f1b79ce8 Fix SessionHttpContext to delegate attributes via __getattr__ 
The previous implementation eagerly copied ASGI-specific attributes
(pathsend, receive, send) from the wrapped context, which crashed under
RSGI because RsgiContext does not have those attributes. Now
SessionHttpContext delegates all non-overridden attributes to the wrapped
context via __getattr__, making it protocol-agnostic.
 2026-07-23 22:09:59 +08:00
woggioni 3ebf079533 Refactor to composable KayaMixin architecture 
Replace wrapper-based SessionMiddleware/OIDCApp with KayaMixin subclasses
applied via KayaApp(mixins=[...]). Mixins hook into handle_request and
handle_websocket via before/after hooks, so both ASGI and RSGI keep working.
Mixin dependencies are applied automatically and deduplicated.
 2026-07-23 22:09:59 +08:00
woggioni 24a797e3d2 Add kaya-oidc package for OpenID Connect authentication 2026-07-23 22:09:59 +08:00
woggioni 77d1134569 Enforce server-side session idle expiry with sliding TTL 2026-07-23 22:09:59 +08:00
woggioni 97a81a9e41 Add kaya-session package for server-side HTTP session management 2026-07-23 22:09:55 +08:00