e744336385
C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
42 lines
1,001 B
Python
42 lines
1,001 B
Python
# For backwards compatibility, provide imports that used to be here.
|
|
from __future__ import annotations
|
|
|
|
from .connection import is_connection_dropped
|
|
from .request import SKIP_HEADER, SKIPPABLE_HEADERS, make_headers
|
|
from .response import is_fp_closed
|
|
from .retry import Retry
|
|
from .ssl_ import (
|
|
ALPN_PROTOCOLS,
|
|
IS_PYOPENSSL,
|
|
SSLContext,
|
|
assert_fingerprint,
|
|
create_urllib3_context,
|
|
resolve_cert_reqs,
|
|
resolve_ssl_version,
|
|
ssl_wrap_socket,
|
|
)
|
|
from .timeout import Timeout
|
|
from .url import Url, parse_url
|
|
from .wait import wait_for_read, wait_for_write
|
|
|
|
__all__ = (
|
|
"IS_PYOPENSSL",
|
|
"SSLContext",
|
|
"ALPN_PROTOCOLS",
|
|
"Retry",
|
|
"Timeout",
|
|
"Url",
|
|
"assert_fingerprint",
|
|
"create_urllib3_context",
|
|
"is_connection_dropped",
|
|
"is_fp_closed",
|
|
"parse_url",
|
|
"make_headers",
|
|
"resolve_cert_reqs",
|
|
"resolve_ssl_version",
|
|
"ssl_wrap_socket",
|
|
"wait_for_read",
|
|
"wait_for_write",
|
|
"SKIP_HEADER",
|
|
"SKIPPABLE_HEADERS",
|
|
)
|