fix #291

Author: Graeme22

docs/sessions.rst

@@ -13,15 +13,6 @@ Generating an initial refresh token
 
 In order to generate an initial refresh token, you have two options. The easiest way is to simply generate one from Tastytrade's website: go to OAuth Applications > Manage > Create Grant to get a new refresh token, **which you should also save**.
 
-The other option (which is actually the only option for sandbox accounts) is to run this helper code:
-
-.. code-block:: python
-
-   from tastytrade.oauth import login
-   login(is_test=True)
-
-This will open up a web interface in your browser where you'll be prompted to paste your client ID and client secret. These credentials will then be used to connect your application to Tastytrade. After following the steps in your browser, you should see your new refresh token in the browser and in the console.
-
 At this point, OAuth is now setup correctly! Doing these steps once is sufficient for **indefinite usage** of ``Session`` for authentication to the API, since refresh tokens never expire. From now on you can simply authenticate with your client secret and refresh token.
 
 Creating a session

tastytrade/__init__.py

@@ -4,7 +4,7 @@
 API_VERSION = "20251101"
 CERT_URL = "https://api.cert.tastyworks.com"
 VAST_URL = "https://vast.tastyworks.com"
-VERSION = "11.0.3"
+VERSION = "11.0.4"
 
 __version__ = VERSION
 version_str: str = f"tastyware/tastytrade:v{VERSION}"

tastytrade/oauth.py

@@ -9,8 +9,8 @@
 
 from tastytrade import API_URL, API_VERSION, CERT_URL, logger
 from tastytrade.utils import (
-    TZ,
     TastytradeData,
+    now_in_new_york,
     validate_and_parse,
     validate_response,
 )
@@ -274,11 +274,9 @@ def __init__(
         #: Refresh token for the user
         self.refresh_token = refresh_token
         # The headers to use for API requests
-        headers = {
-            "Accept": "application/json",
-            "Accept-Version": API_VERSION,
-            "Content-Type": "application/json",
-        }
+        headers = {"Accept": "application/json", "Content-Type": "application/json"}
+        if not is_test:  # not accepted in sandbox
+            headers["Accept-Version"] = API_VERSION
         #: httpx client for sync requests
         self.sync_client = Client(
             base_url=(CERT_URL if is_test else API_URL), headers=headers, proxy=proxy
@@ -288,7 +286,7 @@ def __init__(
             base_url=self.sync_client.base_url, headers=headers, proxy=proxy
         )
         #: expiration for streamer token
-        self.streamer_expiration = datetime.now(TZ)
+        self.streamer_expiration = now_in_new_york()
         self.refresh()
 
     def _streamer_refresh(self) -> None:
@@ -325,14 +323,14 @@ def refresh(self) -> None:
         self.session_token = data["access_token"]
         token_lifetime: int = data.get("expires_in", 900)
         #: expiration for session token
-        self.session_expiration = datetime.now(TZ) + timedelta(seconds=token_lifetime)
+        self.session_expiration = now_in_new_york() + timedelta(seconds=token_lifetime)
         logger.debug(f"Refreshed token, expires in {token_lifetime}ms")
         auth_headers = {"Authorization": f"Bearer {self.session_token}"}
         # update the httpx clients with the new token
         self.sync_client.headers.update(auth_headers)
         self.async_client.headers.update(auth_headers)
         # update the streamer token if necessary
-        if self.streamer_expiration < self.session_expiration:
+        if not self.is_test and self.streamer_expiration < self.session_expiration:
             self._streamer_refresh()
 
     async def a_refresh(self) -> None:
@@ -357,14 +355,14 @@ async def a_refresh(self) -> None:
         # update the relevant tokens
         self.session_token = data["access_token"]
         token_lifetime: int = data.get("expires_in", 900)
-        self.session_expiration = datetime.now(TZ) + timedelta(token_lifetime)
+        self.session_expiration = now_in_new_york() + timedelta(token_lifetime)
         logger.debug(f"Refreshed token, expires in {token_lifetime}ms")
         auth_headers = {"Authorization": f"Bearer {self.session_token}"}
         # update the httpx clients with the new token
         self.sync_client.headers.update(auth_headers)
         self.async_client.headers.update(auth_headers)
         # update the streamer token if necessary
-        if self.streamer_expiration < self.session_expiration:
+        if not self.is_test and self.streamer_expiration < self.session_expiration:
             # Pull streamer tokens and urls
             data = await self._a_get("/api-quote-tokens")
             # Auth token for dxfeed websocket