update from source

.github/workflows/bump.yaml

@@ -0,0 +1,32 @@
+name: Bump version
+
+on:
+  workflow_run:
+    workflows: ["Lint"]
+    branches: [master]
+    types:
+      - completed
+
+jobs:
+  tag-version:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PAT_TOKEN }}
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - name: determine-version
+        run: |
+          VERSION=$(npx semantic-release --branches master --dry-run | { grep -i 'the next release version is' || test $? = 1; } | sed -E 's/.* ([[:digit:].]+)$/\1/')
+          echo "VERSION=$VERSION" >> $GITHUB_ENV
+        id: version
+      - uses: rickstaa/action-create-tag@v1
+        continue-on-error: true
+        env:
+          GITHUB_TOKEN: ${{ secrets.PAT_TOKEN }}
+        with:
+          tag: v${{ env.VERSION }}
+          message: "Releasing v${{ env.VERSION }}"
+          github_token: ${{ secrets.PAT_TOKEN }}

.github/workflows/daily.yaml

@@ -0,0 +1,31 @@
+name: Daily check
+
+on:
+  schedule:
+    - cron: "0 4 * * *"
+
+jobs:
+  test:
+    runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+        keycloak-version: ["22.0", "23.0", "24.0", "25.0", "26.0", "latest"]
+    env:
+      KEYCLOAK_DOCKER_IMAGE_TAG: ${{ matrix.keycloak-version }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - uses: docker/setup-docker-action@v4
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Run tests
+        run: |
+          poetry run tox -e tests

.github/workflows/lint.yaml

@@ -0,0 +1,102 @@
+name: Lint
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  check-commits:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: webiny/action-conventional-commits@v1.3.0
+
+  check-linting:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Check linting, formatting
+        run: |
+          poetry run tox -e check
+
+  check-docs:
+    runs-on: ubuntu-22.04
+    needs:
+      - check-commits
+      - check-linting
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Check documentation build
+        run: |
+          poetry run tox -e docs
+
+  test:
+    runs-on: ubuntu-22.04
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
+        keycloak-version: ["22.0", "23.0", "24.0", "25.0", "26.0", "latest"]
+    needs:
+      - check-commits
+      - check-linting
+    env:
+      KEYCLOAK_DOCKER_IMAGE_TAG: ${{ matrix.keycloak-version }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+      - uses: docker/setup-docker-action@v4
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Run tests
+        run: |
+          poetry run tox -e tests
+      - name: Keycloak logs
+        run: |
+          cat keycloak_test_logs.txt
+
+  build:
+    runs-on: ubuntu-22.04
+    needs:
+      - test
+      - check-docs
+    steps:
+      - uses: actions/checkout@v4
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Run build
+        run: |
+          poetry run tox -e build

.github/workflows/publish.yaml

@@ -0,0 +1,44 @@
+name: Publish
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  publish:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: "0"
+      - name: Set up Python 3.13
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.14"
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install poetry
+          poetry install
+      - name: Apply the tag version
+        run: |
+          version=${{ github.ref_name }}
+          sed -Ei '/^version = /s|= "[0-9.]+"$|= "'${version:-1}'"|' pyproject.toml
+      - name: Run build
+        run: |
+          poetry run tox -e build
+      - name: Publish to PyPi
+        env:
+          TWINE_USERNAME: ${{ secrets.TWINE_USERNAME }}
+          TWINE_PASSWORD: ${{ secrets.TWINE_PASSWORD }}
+        run: |
+          poetry run twine upload -u $TWINE_USERNAME -p $TWINE_PASSWORD dist/*
+      - name: Run changelog
+        run: |
+          poetry run tox -e changelog
+      - uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: "docs: changelog update"
+          branch: master
+          file_pattern: CHANGELOG.md

.gitignore

@@ -45,6 +45,7 @@ nosetests.xml
 coverage.xml
 *.cover
 .hypothesis/
+keycloak_test_logs.txt
 
 # Translations
 *.mo
@@ -81,6 +82,7 @@ celerybeat-schedule
 
 # dotenv
 .env
+.envrc
 
 # virtualenv
 .venv
@@ -103,4 +105,8 @@ ENV/
 .idea/
 main.py
 main2.py
-s3air-authz-config.json
+s3air-authz-config.json
+.vscode
+_build
+.ruff_cache
+.DS_Store

.pre-commit-config.yaml

@@ -0,0 +1,17 @@
+# See https://pre-commit.com for more information
+# See https://pre-commit.com/hooks.html for more hooks
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v3.2.0
+    hooks:
+      - id: trailing-whitespace
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-added-large-files
+        args: ["--maxkb=10000"]
+  - repo: https://github.com/compilerla/conventional-pre-commit
+    rev: v1.2.0
+    hooks:
+      - id: conventional-pre-commit
+        stages: [commit-msg]
+        args: [] # optional: list of Conventional Commits types to allow

.readthedocs.yaml

@@ -0,0 +1,14 @@
+version: 2
+
+sphinx:
+  configuration: docs/source/conf.py
+
+build:
+  os: "ubuntu-24.04"
+  tools:
+    python: "3.14"
+  jobs:
+    post_create_environment:
+      - python -m pip install poetry
+    post_install:
+      - VIRTUAL_ENV=$READTHEDOCS_VIRTUALENV_PATH poetry install

.releaserc.json

@@ -0,0 +1,8 @@
+{
+  "plugins": ["@semantic-release/commit-analyzer"],
+  "verifyConditions": false,
+  "npmPublish": false,
+  "publish": false,
+  "fail": false,
+  "success": false
+}