
Product
Introducing Socket Scanning for OpenVSX Extensions
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
annotell-auth
Advanced tools
Python 3 library providing foundations for Annotell Authentication
on top of the requests or httpx libraries.
Install with pip install annotell-auth[requests] or pip install annotell-auth[httpx]
Builds on the standard OAuth 2.0 Client Credentials flow. There are a few ways to provide auth credentials to our api
clients. Annotell Python clients such as in annotell-input-api accept an auth parameter that
can be set explicitly or you can omit it and use environment variables.
There are a few ways to set your credentials in auth.
ANNOTELL_CREDENTIALS to point to your Annotell Credentials file.
The credentials will contain the Client Id and Client Secret.auth="~/.config/annotell/credentials.json"ANNOTELL_CLIENT_ID andANNOTELL_CLIENT_SECRETauth=(client_id, client_secret)API clients such as the InputApiClient accept this auth parameter.
Under the hood, they commonly use the AuthSession class which is implements a requests session with automatic token
refresh. An httpx implementation is also available.
from annotell.auth.requests.auth_session import RequestsAuthSession
sess = RequestsAuthSession()
# make call to some Annotell service with your token. Use default requests
sess.get("https://api.annotell.com")
Refactor for backend separation, with optional dependencies for either httpx or requests.
FaultTolerantAuthRequestSessionauthsession module backed by requests is untouched for now.requests.Session on FaultTolerantAuthRequestSessionFaultTolerantAuthRequestSession that handles token refresh on long running sessions.auth parameter, with path to credentials file or AnnotellCredentials objectFAQs
Annotell Authentication
We found that annotell-auth demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies