Merge branch 'master' into thedebugger/azp-param

.codecov.yml

@@ -19,4 +19,4 @@ coverage:
       default:
         enabled: true
         if_no_uploads: error
-comment: false
+comment: false

.flake8

@@ -1,3 +1,3 @@
 [flake8]
 ignore = E501 F401
-max-line-length = 88
+max-line-length = 88

.github/PULL_REQUEST_TEMPLATE.md

@@ -19,7 +19,7 @@ Please include relevant links supporting this change such as a:
 
 ### Testing
 
-Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors. 
+Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.
 
 - [ ] This change adds unit test coverage
 - [ ] This change adds integration test coverage

.github/dependabot.yml

@@ -1,7 +1,7 @@
 version: 2
 updates:
-  - package-ecosystem: "pip" 
-    directory: "/" 
+  - package-ecosystem: "pip"
+    directory: "/"
     schedule:
       interval: "daily"
     ignore:

.github/stale.yml

@@ -17,4 +17,4 @@ staleLabel: closed:stale
 
 # Comment to post when marking as stale. Set to `false` to disable
 markComment: >
-  This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you have not received a response for our team (apologies for the delay) and this is still a blocker, please reply with additional information or just a ping. Thank you for your contribution! 🙇‍♂️
+  This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. If you have not received a response for our team (apologies for the delay) and this is still a blocker, please reply with additional information or just a ping. Thank you for your contribution! 🙇‍♂️

.github/workflows/build.yml

@@ -0,0 +1,86 @@
+name: Build and Test
+
+on:
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
+  push:
+    branches:
+      - master
+
+permissions:
+  contents: read
+
+jobs:
+  authorize:
+    name: Authorize
+    environment: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
+    runs-on: ubuntu-latest
+    steps:
+      - run: true
+
+  run:
+    needs: authorize # Require approval before running on forked pull requests
+
+    name: Run
+    runs-on: ubuntu-latest
+
+    env:
+      BUBBLEWRAP_ARGUMENTS: |
+        --unshare-all \
+        --clearenv \
+        --ro-bind / / \
+        --bind ${{ github.workspace }} ${{ github.workspace }} \
+        --tmpfs $HOME \
+        --tmpfs /tmp \
+        --tmpfs /var \
+        --dev /dev \
+        --proc /proc \
+        --die-with-parent \
+        --new-session \
+
+    strategy:
+      matrix:
+        python-version: ["3.7", "3.8", "3.9", "3.10", "3.11"]
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Configure Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v4
+        with:
+          python-version: "${{ matrix.python-version }}"
+
+      - name: Configure dependencies
+        run: |
+          sudo apt install bubblewrap
+          pip install --user --upgrade pip
+          pip install --user pipx
+          pipx ensurepath
+          pipx install poetry==1.4.2
+          pipx install poethepoet==0.19.0
+          poetry config virtualenvs.in-project true
+          poetry install --with dev
+
+      - name: Run tests
+        run: |
+          poetry run poe test
+        # bwrap ${{ env.BUBBLEWRAP_ARGUMENTS }} bash
+
+      - name: Run lint
+        run: |
+          poetry run poe lint:install
+          poetry run poe lint
+        # bwrap ${{ env.BUBBLEWRAP_ARGUMENTS }} bash
+
+      - if: ${{ matrix.python-version == '3.10' }}
+        name: Upload coverage
+        uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # pin@3.1.4
+
+
+      # - if: ${{ matrix.python-version == '3.10' }}
+      #   name: Build documentation
+      #   run: |
+      #     pipx install sphinx && pipx inject sphinx pyjwt cryptography sphinx-mdinclude sphinx-rtd-theme sphinx-autodoc-typehints && sphinx-build ./docs/source ./docs/build --keep-going -n -a -b html

.github/workflows/release.yml

@@ -0,0 +1,39 @@
+name: Publish Release
+
+on:
+  release:
+    types:
+      - published
+
+permissions:
+  contents: read
+  id-token: write # Required for trusted publishing to PyPI
+
+jobs:
+  publish-pypi:
+    name: "PyPI"
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Configure Python 3.10
+        uses: actions/setup-python@v4
+        with:
+          python-version: "3.10"
+          cache: "pip"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+
+      - name: Remove artifacts
+        run: rm -rf build/ dist/ auth0_python.egg-info
+
+      - name: Package release
+        run: python setup.py sdist bdist_wheel --universal
+
+      - name: Publish release
+        uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/semgrep.yml

@@ -1,24 +1,41 @@
 name: Semgrep
 
 on:
-  pull_request: {}
-
+  pull_request_target:
+    types:
+      - opened
+      - synchronize
   push:
-    branches: ["master", "main"]
-
+    branches:
+      - master
   schedule:
-    - cron: '30 0 1,15 * *'
+    - cron: "30 0 1,15 * *"
+
+permissions:
+  contents: read
 
 jobs:
-  semgrep:
-    name: Scan
+  authorize:
+    name: Authorize
+    environment: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.repo.full_name != github.repository && 'external' || 'internal' }}
     runs-on: ubuntu-latest
+    steps:
+      - run: true
+
+  run:
+    if: (github.actor != 'dependabot[bot]')
+    needs: authorize # Require approval before running on forked pull requests
+
+    name: Run
+    runs-on: ubuntu-latest
+
     container:
       image: returntocorp/semgrep
-    # Skip any PR created by dependabot to avoid permission issues
-    if: (github.actor != 'dependabot[bot]')
+
     steps:
       - uses: actions/checkout@v3
+        with:
+          ref: ${{ github.event.pull_request.head.sha || github.ref }}
 
       - run: semgrep ci
         env:

.gitignore

@@ -53,7 +53,7 @@ docs/build/
 
 # IDEA
 .idea/
-*.iml 
+*.iml
 
 # VSCode
 .vscode/

.pre-commit-config.yaml

@@ -1,19 +1,37 @@
 repos:
-  - repo: https://github.com/PyCQA/flake8
-    rev: 6.0.0
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v4.1.0
+    hooks:
+    -   id: check-yaml
+    -   id: end-of-file-fixer
+    -   id: trailing-whitespace
+
+  - repo: https://github.com/pycqa/flake8
+    rev: 5.0.4
     hooks:
     - id: flake8
+
   - repo: https://github.com/asottile/pyupgrade
-    rev: v3.3.1
+    rev: v3.3.2
     hooks:
       - id: pyupgrade
-  - repo: https://github.com/PyCQA/isort
-    rev: 5.12.0
+        args: [--keep-runtime-typing]
+
+  - repo: https://github.com/pycqa/isort
+    rev: 5.11.5
     hooks:
     - id: isort
       args: ["--profile", "black"]
+
   - repo: https://github.com/psf/black
-    rev: 23.1.0
+    rev: 23.3.0
     hooks:
       - id: black
-        additional_dependencies: ['click<8.1.0']
+
+  - repo: https://github.com/python-poetry/poetry
+    rev: 1.4.2
+    hooks:
+      - id: poetry-check
+      - id: poetry-lock
+      - id: poetry-export
+        args: ["--with", "dev", "--without-hashes", "--format", "requirements.txt", "--output", "requirements.txt"]

.readthedocs.yaml

@@ -6,4 +6,4 @@ sphinx:
 python:
   version: "3.7"
   install:
-    - requirements: docs/requirements.txt
+    - requirements: requirements.txt

.shiprc

@@ -3,4 +3,4 @@
     "auth0/__init__.py": []
   },
   "prefixVersion": false
-}
+}

CHANGELOG.md

@@ -1,5 +1,27 @@
 # Change Log
 
+## [4.4.0](https://github.com/auth0/auth0-python/tree/4.4.0) (2023-07-25)
+[Full Changelog](https://github.com/auth0/auth0-python/compare/4.3.0...4.4.0)
+
+**Added**
+- [SDK-4394] Add organization name validation [\#507](https://github.com/auth0/auth0-python/pull/507) ([adamjmcgrath](https://github.com/adamjmcgrath))
+- Add type hints to `management` [\#497](https://github.com/auth0/auth0-python/pull/497) ([Viicos](https://github.com/Viicos))
+
+**Fixed**
+- Fix asyncify for users client where token is not required [\#506](https://github.com/auth0/auth0-python/pull/506) ([cgearing](https://github.com/cgearing))
+
+## [4.3.0](https://github.com/auth0/auth0-python/tree/4.3.0) (2023-06-26)
+[Full Changelog](https://github.com/auth0/auth0-python/compare/4.2.0...4.3.0)
+
+**Added**
+- Add forwardedFor option to password grant login [\#501](https://github.com/auth0/auth0-python/pull/501) ([adamjmcgrath](https://github.com/adamjmcgrath))
+- Add connections.all name parameter [\#500](https://github.com/auth0/auth0-python/pull/500) ([adamjmcgrath](https://github.com/adamjmcgrath))
+- Add type hints to base and `authentication` [\#472](https://github.com/auth0/auth0-python/pull/472) ([Viicos](https://github.com/Viicos))
+
+**Fixed**
+- Fix async auth client [\#499](https://github.com/auth0/auth0-python/pull/499) ([adamjmcgrath](https://github.com/adamjmcgrath))
+- Fix update_template_universal_login [\#495](https://github.com/auth0/auth0-python/pull/495) ([adamjmcgrath](https://github.com/adamjmcgrath))
+
 ## [4.2.0](https://github.com/auth0/auth0-python/tree/4.2.0) (2023-05-02)
 [Full Changelog](https://github.com/auth0/auth0-python/compare/4.1.1...4.2.0)
 
@@ -221,7 +243,7 @@ See the [V4_MIGRATION_GUIDE](https://github.com/auth0/auth0-python/blob/master/V
 3.8.1
 ------------------
 
-July 18, 2019: This release included an unintentionally breaking change affecting those users that were manually parsing the response from GET requests. e.g. /userinfo or /authorize. The `AuthenticationBase#get` method was incorrectly parsing the request result into a String. 
+July 18, 2019: This release included an unintentionally breaking change affecting those users that were manually parsing the response from GET requests. e.g. /userinfo or /authorize. The `AuthenticationBase#get` method was incorrectly parsing the request result into a String.
 
 From this release on, making a GET request returns a Dictionary instead.
 
@@ -353,7 +375,7 @@ Authentication API
 Authentication API
 - Added Logout Functionality
 
-3.0.0 
+3.0.0
 ------------------
 
 Authentication API
@@ -366,8 +388,8 @@ Authentication API
   - Authorization Code Grant
 
 Management API v2
-- Added Support for Guardian   
+- Added Support for Guardian
 - Added Support to retrieve Logs
 - Added Support to manage Resource Servers
 - Added Support to manage Client Grants
-- Added Support to manage User blocks 
+- Added Support to manage User blocks