cadrumo.application.auth.models module

Canonical persisted authentication contracts.

class CertificateSourceRecord(**data)

Bases: BaseModel

One named, registered PKCS#12 certificate source.

Parameters:

data (Any)

name: CertificateSourceName

certificate_path: str

friendly_name: str | None

registered_at: datetime

class AuthCleanupOperationKind(*values)

Bases: StrEnum

Durable auth cleanup operation kinds.

LOGOUT

RESET

class AuthCleanupCertificateSource(**data)

Bases: BaseModel

Version witness for one certificate source captured by auth cleanup.

Parameters:

data (Any)

name: CertificateSourceName

registered_at: datetime

class AuthCleanupIntent(**data)

Bases: BaseModel

Secret-free durable plan for one resumable operator auth cleanup.

Parameters:

data (Any)

operation_id: _AuthOperationId

operation_kind: AuthCleanupOperationKind

bucket_id: BucketId

provider_ids: tuple[str, ...]

all_providers: bool

started_at: datetime

provider_at_start: str | None

configured_at_at_start: datetime | None

authenticated_at_at_start: datetime | None

had_session_state: bool

certificate_path_at_start: str | None

active_certificate_source_at_start: CertificateSourceName | None

certificate_sources: tuple[AuthCleanupCertificateSource, ...]

provider_configuration_ids: tuple[str, ...]

session_provider_ids: tuple[str, ...]

lock_provider_ids: tuple[str, ...]

secret_source_names: tuple[CertificateSourceName, ...]

class CertificateSecretMutationEventKind(*values)

Bases: StrEnum

Stable event classifications for certificate-secret mutations.

SET

ROTATED

REMOVED

class CertificateSecretMutationIntent(**data)

Bases: BaseModel

Secret-free durable plan for one resumable certificate-secret mutation.

Parameters:

data (Any)

operation_id: _AuthOperationId

bucket_id: BucketId

source_name: CertificateSourceName

event_kind: CertificateSecretMutationEventKind

started_at: datetime

prior_present: bool

request_witness: Hex64Str | None

completion_witness: str | None

class AuthState(**data)

Bases: BaseModel

Persisted local AEAT access readiness embedded in workflow state.

Parameters:

data (Any)

provider: str | None

certificate_path: str | None

configured_at: datetime | None

authenticated_at: datetime | None

subject: str | None

certificate_sources: dict[CertificateSourceName, CertificateSourceRecord]

active_certificate_source: CertificateSourceName | None

cleanup_intent: AuthCleanupIntent | None

certificate_secret_mutation_intent: CertificateSecretMutationIntent | None