use uv instead pip

Author: slashburygin

.github/workflows/tests.yaml

@@ -16,28 +16,30 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-      - name: Install tox
-        run: pip install tox
-      - name: Black
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install tox-uv
+        run: uv tool install tox --with tox-uv
+      - name: ruff
         run: |
-          tox -e black-check
+          tox -e ruff-check
   tests:
     runs-on: ubuntu-24.04
     strategy:
       fail-fast: true
       matrix:
-        python-version: ["3.8", "3.10", "3.12", "3.13"]
+        python-version: ["3.8", "3.10", "3.11", "3.12", "3.13", "3.14"]
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
-      - name: Install required packages
-        run: |
-          sudo apt update
-          sudo apt install libev-dev -y
-      - name: Install tox
-        run: pip install tox
+      - name: Install dependencies
+        run: sudo apt update && sudo apt install --yes libev-dev
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install tox-uv
+        run: uv tool install tox --with tox-uv
       - name: Unit tests
         run: |
           tox -e ${{ matrix.python-version }}

gcl_iam/algorithms.py

@@ -67,9 +67,7 @@ def encrypt_hs256_jwks_secret(
     )
 
     nonce_b64 = base64.urlsafe_b64encode(nonce).rstrip(b"=").decode("ascii")
-    ciphertext_b64 = (
-        base64.urlsafe_b64encode(ciphertext).rstrip(b"=").decode("ascii")
-    )
+    ciphertext_b64 = base64.urlsafe_b64encode(ciphertext).rstrip(b"=").decode("ascii")
     return f"aesgcm:{nonce_b64}.{ciphertext_b64}"
 
 
@@ -124,9 +122,7 @@ def generate_rsa_private_key_pem(
 ) -> str:
     allowed_bitness = {2048, 3072, 4096}
     if bitness not in allowed_bitness:
-        raise ValueError(
-            "Invalid RSA bitness. Allowed values: 2048, 3072, 4096."
-        )
+        raise ValueError("Invalid RSA bitness. Allowed values: 2048, 3072, 4096.")
 
     private_key = crypto_rsa.generate_private_key(
         public_exponent=public_exponent,
@@ -168,7 +164,6 @@ def get_rsa_bitness_from_private_key_pem(private_key_pem: str) -> int:
 
 
 class AbstractAlgorithm(metaclass=abc.ABCMeta):
-
     @abc.abstractmethod
     def decode(self, data: str) -> tp.Dict[str, tp.Any]:
         raise NotImplementedError("Not implemented")
@@ -179,7 +174,6 @@ def encode(self, data: tp.Dict[str, tp.Any]) -> str:
 
 
 class BaseJwtAlgorithm(AbstractAlgorithm):
-
     @property
     @abc.abstractmethod
     def algorithm(self) -> str:
@@ -249,7 +243,6 @@ def decode(
 
 
 class HS256(BaseJwtAlgorithm):
-
     def __init__(self, key: str, previous_key: tp.Optional[str] = None):
         super().__init__()
         self._key = key
@@ -268,7 +261,6 @@ def encode(self, data: tp.Dict[str, tp.Any]) -> str:
 
 
 class RS256VerifyOnly(BaseJwtAlgorithm):
-
     def __init__(
         self,
         public_key: str,
@@ -291,7 +283,6 @@ def encode(self, data):
 
 
 class RS256(RS256VerifyOnly):
-
     def __init__(
         self,
         private_key: str,

gcl_iam/contexts.py

@@ -28,7 +28,6 @@
 
 
 class GenesisCoreAuthContext(contexts.ContextWithStorage):
-
     def __init__(
         self,
         req,
@@ -58,9 +57,7 @@ def get_real_url_with_prefix(self):
         port = forwarded_port or parsed.port
 
         new_uri = (
-            f"{scheme}://{host}:{port}"
-            if port is not None
-            else f"{scheme}://{host}"
+            f"{scheme}://{host}:{port}" if port is not None else f"{scheme}://{host}"
         )
 
         if forwarded_prefix:

gcl_iam/controllers.py

@@ -27,16 +27,13 @@
 
 
 class PolicyBasedControllerMixin(object):
-
     __policy_service_name__ = ""
     __policy_name__ = None
     _otp_mandatory = set()
 
     def __init__(self, *args, **kwargs):
         super().__init__(*args, **kwargs)
-        self._introspection = (
-            contexts.get_context().iam_context.introspection_info()
-        )
+        self._introspection = contexts.get_context().iam_context.introspection_info()
 
         self._ctx_project_id = self._introspection.get("project_id", None)
         if isinstance(self._ctx_project_id, str):
@@ -74,23 +71,17 @@ def _enforce_and_override_project_id_in_kwargs(self, method, kwargs):
         if "project_id" in kwargs:
             self._force_project_id(kwargs["project_id"])
         else:
-            kwargs["project_id"] = types.UUID().from_simple_type(
-                self._ctx_project_id
-            )
+            kwargs["project_id"] = types.UUID().from_simple_type(self._ctx_project_id)
 
     def _check_otp(self, method):
-        if (
-            self._introspection.get("otp_enabled")
-            or method in self._otp_mandatory
-        ):
+        if self._introspection.get("otp_enabled") or method in self._otp_mandatory:
             if not self._introspection.get("otp_verified"):
                 raise exceptions.OTPInvalidCodeError()
 
 
 class PolicyBasedController(
     PolicyBasedControllerMixin, controllers.BaseResourceController
 ):
-
     def create(self, **kwargs):
         self._enforce_and_override_project_id_in_kwargs("create", kwargs)
 
@@ -103,9 +94,7 @@ def get(self, **kwargs):
 
     def filter(self, filters, order_by=None):
         self._enforce_and_override_project_id_in_kwargs("read", filters)
-        return super(PolicyBasedController, self).filter(
-            filters, order_by=order_by
-        )
+        return super(PolicyBasedController, self).filter(filters, order_by=order_by)
 
     def delete(self, uuid):
         filters = {}
@@ -127,7 +116,6 @@ def update(self, uuid, **kwargs):
 class NestedPolicyBasedController(
     PolicyBasedControllerMixin, controllers.BaseNestedResourceController
 ):
-
     # Nested resources may not have projects, so it will be checked via parent
     def create(self, parent_resource, **kwargs):
         if "project_id" in self.model.properties:
@@ -165,7 +153,6 @@ def update(self, parent_resource, uuid, **kwargs):
 class PolicyBasedWithoutProjectController(
     PolicyBasedControllerMixin, controllers.BaseResourceController
 ):
-
     def create(self, **kwargs):
         self._enforce("create")
         return super().create(**kwargs)

gcl_iam/drivers.py

@@ -36,7 +36,6 @@
 
 
 class AbstractAuthDriver(metaclass=abc.ABCMeta):
-
     @abc.abstractmethod
     def get_introspection_info(self, token_info, otp_code=None):
         raise NotImplementedError("Not implemented")
@@ -143,7 +142,6 @@ def get_algorithm(
 
 
 class HttpDriver(AbstractAuthDriver):
-
     def __init__(
         self,
         iam_endpoint: str,
@@ -160,9 +158,7 @@ def __init__(
         self._cache_ttl_seconds = cache_ttl_seconds
         self._hs256_jwks_decryption_key = hs256_jwks_decryption_key
 
-        self._get_algorithm_cached = functools.lru_cache(
-            maxsize=cache_maxsize
-        )(
+        self._get_algorithm_cached = functools.lru_cache(maxsize=cache_maxsize)(
             self._get_algorithm_uncached,
         )
 

gcl_iam/enforcers.py

@@ -25,7 +25,6 @@
 
 
 class OrderedEnum(Enum):
-
     def __ge__(self, other):
         if self.__class__ is other.__class__:
             return self.value >= other.value
@@ -55,7 +54,6 @@ def __bool__(self):
 
 
 class Grant(BasicOrderedGrant):
-
     DENY = 0
     # VIEWER = 1
     # REGULAR = 10

gcl_iam/engines.py

@@ -69,10 +69,7 @@ def permissions(self):
 
 
 class IamEngine:
-
-    def __init__(
-        self, auth_token, algorithm, driver, enforcer=None, otp_code=None
-    ):
+    def __init__(self, auth_token, algorithm, driver, enforcer=None, otp_code=None):
         super().__init__()
         self._token_info = tokens.AuthToken(
             auth_token,

gcl_iam/middlewares.py

@@ -33,7 +33,6 @@
 
 
 class AbstactEndpointComparator(metaclass=abc.ABCMeta):
-
     def _build_full_path(self, path):
         return re.compile(path)
 
@@ -53,7 +52,6 @@ def compare(self, req):
 
 
 class GenesisCoreAuthMiddleware(contexts_mw.ContextMiddleware):
-
     def __init__(
         self,
         application,
@@ -90,9 +88,7 @@ def _get_otp_code(self, req):
             return None
         return int(req.headers["X-OTP"])
 
-    def _get_unverified_token_info(
-        self, auth_token: str
-    ) -> tokens.UnverifiedToken:
+    def _get_unverified_token_info(self, auth_token: str) -> tokens.UnverifiedToken:
         return tokens.UnverifiedToken(auth_token)
 
     def _get_response(self, ctx, req):
@@ -105,9 +101,7 @@ def _get_response(self, ctx, req):
                     auth_token = self._get_auth_token(req)
                     token_info = self._get_unverified_token_info(auth_token)
 
-                    algorithm = self._iam_engine_driver.get_algorithm(
-                        token_info
-                    )
+                    algorithm = self._iam_engine_driver.get_algorithm(token_info)
                     iam_context = engines.IamEngine(
                         auth_token=auth_token,
                         algorithm=algorithm,
@@ -126,7 +120,6 @@ def _get_response(self, ctx, req):
 
 
 class ErrorsHandlerMiddleware(errors_mw.ErrorsHandlerMiddleware):
-
     forbidden_exc = (exc.CommonForbiddenError,)
 
     def _construct_error_response(self, req, e):