Author: momento-github-actions-machine-user

Makefile

@@ -25,6 +25,7 @@ lint:
 
 .PHONY: do-gen-sync
 do-gen-sync:
+# cache client
 	@poetry run python src/momento/internal/codegen.py src/momento/internal/aio/_scs_control_client.py src/momento/internal/synchronous/_scs_control_client.py
 	@poetry run python src/momento/internal/codegen.py src/momento/internal/aio/_scs_data_client.py src/momento/internal/synchronous/_scs_data_client.py
 	@poetry run python src/momento/internal/codegen.py src/momento/cache_client_async.py src/momento/cache_client.py
@@ -37,6 +38,10 @@ do-gen-sync:
 	@poetry run python src/momento/internal/codegen.py tests/momento/cache_client/test_set_async.py tests/momento/cache_client/test_set.py
 	@poetry run python src/momento/internal/codegen.py tests/momento/cache_client/test_sorted_set_async.py tests/momento/cache_client/test_sorted_set.py
 	@poetry run python src/momento/internal/codegen.py tests/momento/cache_client/test_sorted_set_simple_async.py tests/momento/cache_client/test_sorted_set_simple.py
+# auth client
+	@poetry run python src/momento/internal/codegen.py src/momento/internal/aio/_scs_token_client.py src/momento/internal/synchronous/_scs_token_client.py
+	@poetry run python src/momento/internal/codegen.py src/momento/auth_client_async.py src/momento/auth_client.py
+	@poetry run python src/momento/internal/codegen.py tests/momento/auth_client/test_auth_client_async.py tests/momento/auth_client/test_auth_client.py
 
 .PHONY: gen-sync
 ## Generate synchronous code and tests from asynchronous code.

src/momento/__init__.py

@@ -10,6 +10,8 @@
 from momento import logs
 
 from .auth import CredentialProvider
+from .auth_client import AuthClient
+from .auth_client_async import AuthClientAsync
 from .cache_client import CacheClient
 from .cache_client_async import CacheClientAsync
 from .config import Configurations, TopicConfigurations
@@ -27,4 +29,6 @@
     "CacheClientAsync",
     "TopicClient",
     "TopicClientAsync",
+    "AuthClient",
+    "AuthClientAsync",
 ]

src/momento/auth/access_control/__init__.py

@@ -0,0 +1,70 @@
+"""Disposable Token Scope.
+
+Defines the data classes for specifying the permission scope of a disposable token.
+"""
+from dataclasses import dataclass
+from typing import List, Optional, Union
+
+from momento.auth.access_control.permission_scope import (
+    CachePermission,
+    Permissions,
+)
+
+
+@dataclass
+class AllCacheItems:
+    """Indicates permission to access all items in a cache."""
+
+    pass
+
+
+@dataclass
+class CacheItemKey:
+    """The key of a cache item."""
+
+    key: str
+
+
+@dataclass
+class CacheItemKeyPrefix:
+    """The prefix of a cache item key."""
+
+    key_prefix: str
+
+
+@dataclass
+class CacheItemSelector:
+    """A selection of cache items to grant permissions to, either all cache items, a specific cache item, or a items that match a specified key prefix."""
+
+    cache_item: Union[CacheItemKey, CacheItemKeyPrefix, AllCacheItems, str]
+
+    def is_all_cache_items(self) -> bool:
+        return isinstance(self.cache_item, AllCacheItems)
+
+
+@dataclass
+class DisposableTokenCachePermission(CachePermission):
+    """Encapsulates the information needed to grant permissions to a cache item."""
+
+    cache_item_selector: CacheItemSelector
+
+
+@dataclass
+class DisposableTokenCachePermissions:
+    """A list of permissions to grant to a disposable token."""
+
+    disposable_token_permissions: List[DisposableTokenCachePermission]
+
+
+@dataclass
+class DisposableTokenScope:
+    """A set of permissions to grant to a disposable token."""
+
+    disposable_token_scope: Union[Permissions, DisposableTokenCachePermissions]
+
+
+@dataclass
+class DisposableTokenProps:
+    """Additional properties for a disposable token, such as token_id, which can be used to identify the source of a token."""
+
+    token_id: Optional[str]