ab-ecosystem-python

Python SDK for the Partner Ecosystem: JWKS-based auth verification and server-to-server actions.

Install

pip install ab-ecosystem-python

Quick start

Initialise once at start-up, then call the user methods anywhere — either via the module-level helpers (they use the process-wide singleton) or on the client returned by init.

from ab_ecosystem import init, get_user_profile, get_user_subscription

init(
    api_url="https://api.example.com",
    project_id="proj_123",
    project_secret="super-secret",
)

# module-level (singleton)
profile = get_user_profile(access_token=user_jwt)

# or on the instance
client = init(api_url="...", project_id="...", project_secret="...")
subscription = client.get_user_subscription(access_token=user_jwt)

Methods

:project_id is filled from your config. Every call sends the project credentials via HTTP Basic auth plus the x-project-id header.

Per-user authentication

Each user method accepts access_token and user_id:

• access_token (the end-user's JWT) → forwarded as Authorization: Bearer <token>.
• user_id (when no access_token) → keeps the project HTTP Basic auth and adds a user-id header so the API can resolve the user.
• neither → project HTTP Basic auth only.

sdk.get_user_profile(access_token=user_jwt)
sdk.get_user_profile(user_id="user_123")

Deductions

from ab_ecosystem import send_deduction_request, DeductionRequest

# amount is required; meta / reference / note default to {} / "" / ""
send_deduction_request(
    "wallet_1",
    DeductionRequest(amount=10, meta={"order_id": "o_1"}, reference="ref_1", note="usage"),
    user_id="user_123",
)

# a plain dict works too
send_deduction_request("wallet_1", {"amount": 5}, access_token=user_jwt)

Verifying incoming tokens

The Node SDK ships an Express middleware; in Python the framework-agnostic core is exposed instead, so you can wire it into Flask, FastAPI, Django, etc.

from ab_ecosystem import verify_token, extract_bearer_token

token = extract_bearer_token(request.headers.get("authorization"))
claims = verify_token(token)          # raises jwt.PyJWTError on failure

License

MIT