Skip to main content

api config library

Project description

apiconfig

Flexible, extensible configuration and authentication for Python API clients.

PyPI - Python Version PyPI - Version Test Status Publish to PyPI


Table of Contents

Documentation

Module Description

apiconfig is a standalone Python library for managing API client configuration and authentication. It provides a robust, extensible foundation for building API clients, handling configuration (base URLs, timeouts, retries, headers) and supporting multiple authentication strategies (API key, Basic, Bearer, custom).

apiconfig is designed for:

  • Developers building reusable, testable API clients.
  • Projects needing flexible configuration sources (env, file, memory).
  • Secure, pluggable authentication for HTTP APIs.

Navigation


Contents

apiconfig/
├── auth/          # Authentication strategies (basic, bearer, API key, custom)
├── config/        # API client configuration and providers
├── exceptions/    # Structured exception hierarchy
├── testing/       # Test utilities and helpers
├── utils/         # Logging, redaction, and utilities
└── types.py       # Shared type definitions

Usage Examples

Quickstart

pip install apiconfig
from apiconfig import ClientConfig, ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", header_name="X-API-Key")
config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    auth_strategy=auth,
    timeout=10.0,
    retries=3,
)
print(config.base_url)  # https://api.example.com/v1

Installation

Install from PyPI:

pip install apiconfig

Or with Poetry:

poetry add apiconfig

Key Features

  • Unified API Client Configuration: Manage base URLs, versions, headers, timeouts, retries, and more with a single, validated config object.
  • Authentication Strategies: Built-in support for API Key, Basic, Bearer, and custom authentication via the Strategy Pattern.
  • Config Providers: Load configuration from environment variables, files, or in-memory sources.
  • Extensible: Easily add new authentication methods or config providers.
  • Robust Error Handling: Clear, structured exception hierarchy for all config and auth errors.
  • Type Safety: Strong type hints and type-checked public API.
  • Logging Integration: Standard logging hooks for debugging and auditability.
  • High Test Coverage: Around 94% coverage with unit and integration tests.

Basic Configuration

from apiconfig import ClientConfig

config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    headers={"X-My-Header": "value"},
    timeout=10.0,
    retries=3,
)
print(config.base_url)  # https://api.example.com/v1

Authentication Strategies

API Key in Header

from apiconfig import ClientConfig, ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", header_name="X-API-Key")
config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    auth_strategy=auth,
)

API Key in Query Parameter

from apiconfig import ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", param_name="api_key")

Basic and Bearer Auth

from apiconfig import BasicAuth, BearerAuth

basic = BasicAuth(username="user", password="pass")
bearer = BearerAuth(access_token="my-jwt-token")

Custom Authentication

from apiconfig import CustomAuth

custom = CustomAuth(auth_callable=lambda: {"Authorization": "Custom xyz"})

Using Configuration Providers

Environment Variables

from apiconfig import EnvProvider

env = EnvProvider(prefix="MYAPI_")
config_dict = env.load()
# Example: MYAPI_HOSTNAME=api.example.com, MYAPI_TIMEOUT=5

File and Memory Providers

from apiconfig import FileProvider, MemoryProvider

file_provider = FileProvider(file_path="config.json")
file_config = file_provider.load()

# MemoryProvider accepts configuration via the ``config_data`` parameter and
# exposes ``get_config`` instead of ``load``
memory_provider = MemoryProvider(config_data={"hostname": "api.example.com"})
memory_config = memory_provider.get_config()

Merging Configurations

from apiconfig import ClientConfig

base = ClientConfig(hostname="api.example.com", timeout=10)
override = ClientConfig(timeout=5, retries=2)
merged = base.merge(override)

Practical Example: Real API Client Setup

Below is a real-world example based on the integration tests. This pattern demonstrates how to use apiconfig to load configuration and secrets from environment variables, set up authentication, and make a request with an HTTP client (e.g., httpx):

import os
import httpx
from apiconfig import EnvProvider, ClientConfig, BearerAuth

# Load config and secrets from environment variables
env = EnvProvider()
config_dict = env.load()

# Get token and base URL from environment or use defaults
access_token = config_dict.get("FIKEN_ACCESS_TOKEN") or os.environ.get("FIKEN_ACCESS_TOKEN")
base_url = config_dict.get("FIKEN_BASE_URL") or os.environ.get("FIKEN_BASE_URL") or "https://api.fiken.no/api/v2"

# Set up authentication strategy if token is available
auth_strategy = BearerAuth(access_token) if access_token else None

# Create the API client configuration
client_config = ClientConfig(
    hostname=base_url,
    auth_strategy=auth_strategy,
)

# Prepare request headers using the auth strategy
headers = {}
if client_config.auth_strategy is not None:
    headers.update(client_config.auth_strategy.prepare_request_headers())

# Make a real HTTP request using httpx
with httpx.Client(timeout=10.0) as client:
    response = client.get(f"{client_config.base_url}/companies", headers=headers)
    print(response.status_code, response.json())

This approach can be adapted for any API and authentication method supported by apiconfig. See the integration tests for more real-world examples.


Logging

apiconfig uses standard Python logging. To enable debug output:

import logging

logging.basicConfig(level=logging.DEBUG)
logging.getLogger("apiconfig").setLevel(logging.INFO)

Error Handling

All errors are structured and documented. Common exceptions include:

  • APIConfigError
  • ConfigurationError
  • AuthenticationError
  • InvalidConfigError
  • MissingConfigError
  • AuthStrategyError

Key Components

Alias Description
JsonObject Dictionary representing a JSON object
HeadersType Mapping of HTTP header names to values
QueryParamType Mapping for URL query parameters
DataType HTTP request body data
ResponseBodyType API response body

Architecture

Class Hierarchy

classDiagram
    ClientConfig --> AuthStrategy : uses
    ConfigManager --> ClientConfig : manages
    AuthStrategy <|-- ApiKeyAuth
    AuthStrategy <|-- BasicAuth
    AuthStrategy <|-- BearerAuth

Authentication Flow

sequenceDiagram
    participant Client
    participant AuthStrategy
    participant HTTPClient

    Client->>AuthStrategy: prepare_request_headers()
    AuthStrategy-->>Client: headers
    Client->>HTTPClient: request with headers

    alt token expired
        HTTPClient-->>Client: 401
        Client->>AuthStrategy: refresh()
        AuthStrategy-->>Client: new token
        Client->>HTTPClient: retry request
    end

Testing

Testing and Coverage

apiconfig is fully tested with pytest and coverage.py. To run tests and check coverage:

pytest --cov=apiconfig --cov-report=html

Static Type Checking

apiconfig uses Pyright for optional static type checking. Before running Pyright, ensure development dependencies are installed and the virtual environment is active:

poetry install --with dev
poetry shell
pyright

This guarantees libraries like httpx, pytest, and their stubs are available.

Test Structure

Unit tests are organized by feature under tests/unit. The exception hierarchy is covered in tests/unit/exceptions.

Test Dependencies

Tests rely only on pytest and the apiconfig package; no external services are required.


Running tests

Use pytest to execute the full test suite:

poetry run pytest

Test Structure

  • tests/unit – unit tests
  • tests/integration – integration tests against real APIs

Test Dependencies

  • Install dev dependencies with poetry install --with dev
  • Environment variables for integration tests are loaded automatically

CI/CD

Continuous integration and deployment are managed with GitHub Actions. All pushes and pull requests are tested, and releases are published to PyPI after passing tests.


Dependencies

External

Internal

  • Modules like apiconfig.config, apiconfig.auth, and apiconfig.utils

Optional

Optional Dependencies

None

Install development dependencies with:

poetry install --with dev

Status

Stability: Stable - the project is actively used in production environments. API Version: Follows Semantic Versioning starting at version 0.x. Deprecations: None

Maintenance Notes

The library is currently stable and actively maintained. Issues and pull requests are triaged on a best-effort basis. Minor feature requests and fixes are welcome.

Changelog

See CHANGELOG.md for a complete history of changes.

Future Considerations

Planned improvements include enhanced documentation, additional auth strategies, expanded test coverage, and formatter enhancements for more consistent styling.

Further Documentation


See Also


License

LGPL-3.0-or-later. See LICENSE for details.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

apiconfig-0.3.3.dev220.tar.gz (100.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

apiconfig-0.3.3.dev220-py3-none-any.whl (137.3 kB view details)

Uploaded Python 3

File details

Details for the file apiconfig-0.3.3.dev220.tar.gz.

File metadata

  • Download URL: apiconfig-0.3.3.dev220.tar.gz
  • Upload date:
  • Size: 100.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.12.9

File hashes

Hashes for apiconfig-0.3.3.dev220.tar.gz
Algorithm Hash digest
SHA256 34d1e20054467b46ddcf29677f88c50c54a0f3d8d350344e2eb1bcd414883709
MD5 41b73bc7fc3bdc47a424f459bde3d7d2
BLAKE2b-256 58e8ce41961af0c4f54d5ff2d3f1a562aff8d0b63b7ae84cd6deae1a3bbeac95

See more details on using hashes here.

Provenance

The following attestation bundles were made for apiconfig-0.3.3.dev220.tar.gz:

Publisher: publish.yaml on Leikaab/apiconfig

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file apiconfig-0.3.3.dev220-py3-none-any.whl.

File metadata

File hashes

Hashes for apiconfig-0.3.3.dev220-py3-none-any.whl
Algorithm Hash digest
SHA256 ac11aec455ba44fe5bc0799c9488d75f2de0ccc567d9bfb1c4541ac3c943f793
MD5 b6015be34a3edfb62efd79c79b22cc50
BLAKE2b-256 7ee13be25b5870a7a3634d76cb3dfa7973df5ae5bfdb8885a04b1584f31e9962

See more details on using hashes here.

Provenance

The following attestation bundles were made for apiconfig-0.3.3.dev220-py3-none-any.whl:

Publisher: publish.yaml on Leikaab/apiconfig

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page