aeat.domain.auth.apoderamientos package

AEAT apoderamiento scope catalogue and token parser.

This package loads the shipped registry/aeat/apoderamientos/scopes.toml catalogue as an ApoderamientosCatalogue of ApoderadoScope records and exposes parse_scope_tokens() for operator-supplied --scope values. The parser is a domain validation boundary: scope codes must be uppercase catalogue tokens, ALL expands to every catalogue code, comma-separated values are rejected, duplicate scopes are deduplicated, and unknown codes raise UnknownScopeError.

The package only defines the scope vocabulary and validation rules. Persisted represented-party configuration, active-bucket routing, and the permanent refusal of live AEAT-side apoderamiento mutation are application concerns owned by application.auth.ApoderadoService.

See also

• domain.auth for the parent re-export facade.

• application.auth.ApoderadoService for the encrypted bucket-scoped configuration service that consumes these parsed scope codes.

• entrypoints.cli._config._apoderado for CLI commands that collect repeated --scope options before calling the application service.

Submodules

• aeat.domain.auth.apoderamientos._catalogue module
  • UnknownScopeError
    • UnknownScopeError.code
  • ApoderadoScope
    • ApoderadoScope.code
    • ApoderadoScope.name_es
    • ApoderadoScope.name_en
    • ApoderadoScope.modelo_codes
  • ApoderamientosCatalogue
    • ApoderamientosCatalogue.catalogue_version
    • ApoderamientosCatalogue.scopes
    • ApoderamientosCatalogue.code_set()
    • ApoderamientosCatalogue.get()
  • load_default_catalogue()
  • expand_all_token()
  • parse_scope_tokens()