adding dev-v0.14.8 tag to this commit to ensure building

Author: rishabhpoddar

html/supertokens_python/constants.html

@@ -42,7 +42,7 @@ <h1 class="title">Module <code>supertokens_python.constants</code></h1>
 from __future__ import annotations
 
 SUPPORTED_CDI_VERSIONS = [&#34;2.21&#34;]
-VERSION = &#34;0.14.7&#34;
+VERSION = &#34;0.14.8&#34;
 TELEMETRY = &#34;/telemetry&#34;
 USER_COUNT = &#34;/users/count&#34;
 USER_DELETE = &#34;/user/remove&#34;

html/supertokens_python/recipe/session/framework/fastapi/index.html

@@ -39,11 +39,18 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.fasta
 # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 # License for the specific language governing permissions and limitations
 # under the License.
+import json
+
 from typing import Any, Callable, Coroutine, Dict, Union, List, Optional
 
+from supertokens_python import Supertokens
 from supertokens_python.framework.fastapi.fastapi_request import FastApiRequest
+from supertokens_python.framework.fastapi.fastapi_response import FastApiResponse
 from supertokens_python.recipe.session import SessionRecipe
+from supertokens_python.exceptions import SuperTokensError
 from supertokens_python.types import MaybeAwaitable
+from fastapi.responses import JSONResponse
+from fastapi import Request
 
 from ...interfaces import SessionContainer, SessionClaimValidator
 
@@ -62,13 +69,12 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.fasta
 ) -&gt; Callable[..., Coroutine[Any, Any, Union[SessionContainer, None]]]:
     if user_context is None:
         user_context = {}
-    from fastapi import Request
 
     async def func(request: Request) -&gt; Union[SessionContainer, None]:
-        baseRequest = FastApiRequest(request)
+        base_req = FastApiRequest(request)
         recipe = SessionRecipe.get_instance()
         session = await recipe.verify_session(
-            baseRequest,
+            base_req,
             anti_csrf_check,
             session_required,
             check_database,
@@ -78,12 +84,31 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.fasta
         if session is None:
             if session_required:
                 raise Exception(&#34;Should never come here&#34;)
-            baseRequest.set_session_as_none()
+            base_req.set_session_as_none()
         else:
-            baseRequest.set_session(session)
-        return baseRequest.get_session()
+            base_req.set_session(session)
+        return base_req.get_session()
 
-    return func</code></pre>
+    return func
+
+
+async def session_exception_handler(
+    request: Request, exc: SuperTokensError
+) -&gt; JSONResponse:
+    &#34;&#34;&#34;FastAPI exceptional handler for errors raised by Supertokens SDK when not using middleware
+
+    Usage: `app.add_exception_handler(SuperTokensError, st_exception_handler)`
+    &#34;&#34;&#34;
+    base_req = FastApiRequest(request)
+    base_res = FastApiResponse(JSONResponse())
+    result = await Supertokens.get_instance().handle_supertokens_error(
+        base_req, exc, base_res
+    )
+    if isinstance(result, FastApiResponse):
+        body = json.loads(result.response.body)
+        return JSONResponse(body, status_code=result.response.status_code)
+
+    raise Exception(&#34;Should never come here&#34;)</code></pre>
 </details>
 </section>
 <section>
@@ -93,6 +118,35 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.fasta
 <section>
 <h2 class="section-title" id="header-functions">Functions</h2>
 <dl>
+<dt id="supertokens_python.recipe.session.framework.fastapi.session_exception_handler"><code class="name flex">
+<span>async def <span class="ident">session_exception_handler</span></span>(<span>request: starlette.requests.Request, exc: <a title="supertokens_python.exceptions.SuperTokensError" href="../../../../exceptions.html#supertokens_python.exceptions.SuperTokensError">SuperTokensError</a>) ‑> starlette.responses.JSONResponse</span>
+</code></dt>
+<dd>
+<div class="desc"><p>FastAPI exceptional handler for errors raised by Supertokens SDK when not using middleware</p>
+<p>Usage: <code>app.add_exception_handler(SuperTokensError, st_exception_handler)</code></p></div>
+<details class="source">
+<summary>
+<span>Expand source code</span>
+</summary>
+<pre><code class="python">async def session_exception_handler(
+    request: Request, exc: SuperTokensError
+) -&gt; JSONResponse:
+    &#34;&#34;&#34;FastAPI exceptional handler for errors raised by Supertokens SDK when not using middleware
+
+    Usage: `app.add_exception_handler(SuperTokensError, st_exception_handler)`
+    &#34;&#34;&#34;
+    base_req = FastApiRequest(request)
+    base_res = FastApiResponse(JSONResponse())
+    result = await Supertokens.get_instance().handle_supertokens_error(
+        base_req, exc, base_res
+    )
+    if isinstance(result, FastApiResponse):
+        body = json.loads(result.response.body)
+        return JSONResponse(body, status_code=result.response.status_code)
+
+    raise Exception(&#34;Should never come here&#34;)</code></pre>
+</details>
+</dd>
 <dt id="supertokens_python.recipe.session.framework.fastapi.verify_session"><code class="name flex">
 <span>def <span class="ident">verify_session</span></span>(<span>anti_csrf_check: Optional[bool] = None, session_required: bool = True, check_database: bool = False, override_global_claim_validators: Optional[Callable[[List[<a title="supertokens_python.recipe.session.interfaces.SessionClaimValidator" href="../../interfaces.html#supertokens_python.recipe.session.interfaces.SessionClaimValidator">SessionClaimValidator</a>], <a title="supertokens_python.recipe.session.interfaces.SessionContainer" href="../../interfaces.html#supertokens_python.recipe.session.interfaces.SessionContainer">SessionContainer</a>, Dict[str, Any]], Union[Awaitable[List[<a title="supertokens_python.recipe.session.interfaces.SessionClaimValidator" href="../../interfaces.html#supertokens_python.recipe.session.interfaces.SessionClaimValidator">SessionClaimValidator</a>]], List[<a title="supertokens_python.recipe.session.interfaces.SessionClaimValidator" href="../../interfaces.html#supertokens_python.recipe.session.interfaces.SessionClaimValidator">SessionClaimValidator</a>]]]] = None, user_context: Optional[Dict[str, Any]] = None) ‑> Callable[..., Coroutine[Any, Any, Optional[<a title="supertokens_python.recipe.session.interfaces.SessionContainer" href="../../interfaces.html#supertokens_python.recipe.session.interfaces.SessionContainer">SessionContainer</a>]]]</span>
 </code></dt>
@@ -116,13 +170,12 @@ <h2 class="section-title" id="header-functions">Functions</h2>
 ) -&gt; Callable[..., Coroutine[Any, Any, Union[SessionContainer, None]]]:
     if user_context is None:
         user_context = {}
-    from fastapi import Request
 
     async def func(request: Request) -&gt; Union[SessionContainer, None]:
-        baseRequest = FastApiRequest(request)
+        base_req = FastApiRequest(request)
         recipe = SessionRecipe.get_instance()
         session = await recipe.verify_session(
-            baseRequest,
+            base_req,
             anti_csrf_check,
             session_required,
             check_database,
@@ -132,10 +185,10 @@ <h2 class="section-title" id="header-functions">Functions</h2>
         if session is None:
             if session_required:
                 raise Exception(&#34;Should never come here&#34;)
-            baseRequest.set_session_as_none()
+            base_req.set_session_as_none()
         else:
-            baseRequest.set_session(session)
-        return baseRequest.get_session()
+            base_req.set_session(session)
+        return base_req.get_session()
 
     return func</code></pre>
 </details>
@@ -158,6 +211,7 @@ <h2>Index</h2>
 </li>
 <li><h3><a href="#header-functions">Functions</a></h3>
 <ul class="">
+<li><code><a title="supertokens_python.recipe.session.framework.fastapi.session_exception_handler" href="#supertokens_python.recipe.session.framework.fastapi.session_exception_handler">session_exception_handler</a></code></li>
 <li><code><a title="supertokens_python.recipe.session.framework.fastapi.verify_session" href="#supertokens_python.recipe.session.framework.fastapi.verify_session">verify_session</a></code></li>
 </ul>
 </li>

html/supertokens_python/recipe/session/framework/flask/index.html

@@ -42,9 +42,12 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.flask
 from functools import wraps
 from typing import Any, Callable, Dict, TypeVar, Union, cast, List, Optional
 
+from supertokens_python import Supertokens
 from supertokens_python.async_to_sync_wrapper import sync
 from supertokens_python.framework.flask.flask_request import FlaskRequest
+from supertokens_python.framework.flask.flask_response import FlaskResponse
 from supertokens_python.recipe.session import SessionRecipe, SessionContainer
+from supertokens_python.exceptions import SuperTokensError
 from supertokens_python.recipe.session.interfaces import SessionClaimValidator
 from supertokens_python.types import MaybeAwaitable
 
@@ -71,27 +74,39 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.framework.flask
         def wrapped_function(*args: Any, **kwargs: Any):
             from flask import make_response, request
 
-            baseRequest = FlaskRequest(request)
-            recipe = SessionRecipe.get_instance()
-            session = sync(
-                recipe.verify_session(
-                    baseRequest,
-                    anti_csrf_check,
-                    session_required,
-                    check_database,
-                    override_global_claim_validators,
-                    user_context,
+            base_req = FlaskRequest(request)
+
+            try:
+                recipe = SessionRecipe.get_instance()
+                session = sync(
+                    recipe.verify_session(
+                        base_req,
+                        anti_csrf_check,
+                        session_required,
+                        check_database,
+                        override_global_claim_validators,
+                        user_context,
+                    )
                 )
-            )
-            if session is None:
-                if session_required:
-                    raise Exception(&#34;Should never come here&#34;)
-                baseRequest.set_session_as_none()
-            else:
-                baseRequest.set_session(session)
+                if session is None:
+                    if session_required:
+                        raise Exception(&#34;Should never come here&#34;)
+                    base_req.set_session_as_none()
+                else:
+                    base_req.set_session(session)
 
-            response = f(*args, **kwargs)
-            return make_response(response) if response is not None else None
+                response = f(*args, **kwargs)
+                return make_response(response) if response is not None else None
+            except SuperTokensError as e:
+                response = FlaskResponse(make_response())
+                result = sync(
+                    Supertokens.get_instance().handle_supertokens_error(
+                        base_req, e, response
+                    )
+                )
+                if isinstance(result, FlaskResponse):
+                    return result.response
+                raise Exception(&#34;Should never come here&#34;)
 
         return cast(_T, wrapped_function)
 
@@ -134,27 +149,39 @@ <h2 class="section-title" id="header-functions">Functions</h2>
         def wrapped_function(*args: Any, **kwargs: Any):
             from flask import make_response, request
 
-            baseRequest = FlaskRequest(request)
-            recipe = SessionRecipe.get_instance()
-            session = sync(
-                recipe.verify_session(
-                    baseRequest,
-                    anti_csrf_check,
-                    session_required,
-                    check_database,
-                    override_global_claim_validators,
-                    user_context,
+            base_req = FlaskRequest(request)
+
+            try:
+                recipe = SessionRecipe.get_instance()
+                session = sync(
+                    recipe.verify_session(
+                        base_req,
+                        anti_csrf_check,
+                        session_required,
+                        check_database,
+                        override_global_claim_validators,
+                        user_context,
+                    )
+                )
+                if session is None:
+                    if session_required:
+                        raise Exception(&#34;Should never come here&#34;)
+                    base_req.set_session_as_none()
+                else:
+                    base_req.set_session(session)
+
+                response = f(*args, **kwargs)
+                return make_response(response) if response is not None else None
+            except SuperTokensError as e:
+                response = FlaskResponse(make_response())
+                result = sync(
+                    Supertokens.get_instance().handle_supertokens_error(
+                        base_req, e, response
+                    )
                 )
-            )
-            if session is None:
-                if session_required:
-                    raise Exception(&#34;Should never come here&#34;)
-                baseRequest.set_session_as_none()
-            else:
-                baseRequest.set_session(session)
-
-            response = f(*args, **kwargs)
-            return make_response(response) if response is not None else None
+                if isinstance(result, FlaskResponse):
+                    return result.response
+                raise Exception(&#34;Should never come here&#34;)
 
         return cast(_T, wrapped_function)
 

html/supertokens_python/recipe/session/session_request_functions.html

@@ -181,6 +181,8 @@ <h1 class="title">Module <code>supertokens_python.recipe.session.session_request
         do_anti_csrf_check = normalise_http_method(request.method()) != &#34;get&#34;
     if request_transfer_method == &#34;header&#34;:
         do_anti_csrf_check = False
+    if request_access_token is None:
+        do_anti_csrf_check = False
 
     if do_anti_csrf_check and config.anti_csrf == &#34;VIA_CUSTOM_HEADER&#34;:
         if config.anti_csrf == &#34;VIA_CUSTOM_HEADER&#34;:
@@ -691,6 +693,8 @@ <h2 class="section-title" id="header-functions">Functions</h2>
         do_anti_csrf_check = normalise_http_method(request.method()) != &#34;get&#34;
     if request_transfer_method == &#34;header&#34;:
         do_anti_csrf_check = False
+    if request_access_token is None:
+        do_anti_csrf_check = False
 
     if do_anti_csrf_check and config.anti_csrf == &#34;VIA_CUSTOM_HEADER&#34;:
         if config.anti_csrf == &#34;VIA_CUSTOM_HEADER&#34;: