Skip to main content

api config library

Project description

apiconfig

Flexible, extensible configuration and authentication for Python API clients.

PyPI - Python Version PyPI - Version Test Status Publish to PyPI


Table of Contents

Documentation

Module Description

apiconfig is a standalone Python library for managing API client configuration and authentication. It provides a robust, extensible foundation for building API clients, handling configuration (base URLs, timeouts, retries, headers) and supporting multiple authentication strategies (API key, Basic, Bearer, custom).

apiconfig is designed for:

  • Developers building reusable, testable API clients.
  • Projects needing flexible configuration sources (env, file, memory).
  • Secure, pluggable authentication for HTTP APIs.

Navigation


Contents

apiconfig/
├── auth/          # Authentication strategies (basic, bearer, API key, custom)
├── config/        # API client configuration and providers
├── exceptions/    # Structured exception hierarchy
├── testing/       # Test utilities and helpers
├── utils/         # Logging, redaction, and utilities
└── types.py       # Shared type definitions

Usage Examples

Quickstart

pip install apiconfig
from apiconfig import ClientConfig, ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", header_name="X-API-Key")
config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    auth_strategy=auth,
    timeout=10.0,
    retries=3,
)
print(config.base_url)  # https://api.example.com/v1

Installation

Install from PyPI:

pip install apiconfig

Or with Poetry:

poetry add apiconfig

Key Features

  • Unified API Client Configuration: Manage base URLs, versions, headers, timeouts, retries, and more with a single, validated config object.
  • Authentication Strategies: Built-in support for API Key, Basic, Bearer, and custom authentication via the Strategy Pattern.
  • Config Providers: Load configuration from environment variables, files, or in-memory sources.
  • Extensible: Easily add new authentication methods or config providers.
  • Robust Error Handling: Clear, structured exception hierarchy for all config and auth errors.
  • Type Safety: Strong type hints and type-checked public API.
  • Logging Integration: Standard logging hooks for debugging and auditability.
  • High Test Coverage: Around 94% coverage with unit and integration tests.

Basic Configuration

from apiconfig import ClientConfig

config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    headers={"X-My-Header": "value"},
    timeout=10.0,
    retries=3,
)
print(config.base_url)  # https://api.example.com/v1

Authentication Strategies

API Key in Header

from apiconfig import ClientConfig, ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", header_name="X-API-Key")
config = ClientConfig(
    hostname="api.example.com",
    version="v1",
    auth_strategy=auth,
)

API Key in Query Parameter

from apiconfig import ApiKeyAuth

auth = ApiKeyAuth(api_key="my-secret-key", param_name="api_key")

Basic and Bearer Auth

from apiconfig import BasicAuth, BearerAuth

basic = BasicAuth(username="user", password="pass")
bearer = BearerAuth(access_token="my-jwt-token")

Custom Authentication

from apiconfig import CustomAuth

custom = CustomAuth(auth_callable=lambda: {"Authorization": "Custom xyz"})

Using Configuration Providers

Environment Variables

from apiconfig import EnvProvider

env = EnvProvider(prefix="MYAPI_")
config_dict = env.load()
# Example: MYAPI_HOSTNAME=api.example.com, MYAPI_TIMEOUT=5

File and Memory Providers

from apiconfig import FileProvider, MemoryProvider

file_provider = FileProvider(file_path="config.json")
file_config = file_provider.load()

# MemoryProvider accepts configuration via the ``config_data`` parameter and
# exposes ``get_config`` instead of ``load``
memory_provider = MemoryProvider(config_data={"hostname": "api.example.com"})
memory_config = memory_provider.get_config()

Merging Configurations

from apiconfig import ClientConfig

base = ClientConfig(hostname="api.example.com", timeout=10)
override = ClientConfig(timeout=5, retries=2)
merged = base.merge(override)

Practical Example: Real API Client Setup

Below is a real-world example based on the integration tests. This pattern demonstrates how to use apiconfig to load configuration and secrets from environment variables, set up authentication, and make a request with an HTTP client (e.g., httpx):

import os
import httpx
from apiconfig import EnvProvider, ClientConfig, BearerAuth

# Load config and secrets from environment variables
env = EnvProvider()
config_dict = env.load()

# Get token and base URL from environment or use defaults
access_token = config_dict.get("FIKEN_ACCESS_TOKEN") or os.environ.get("FIKEN_ACCESS_TOKEN")
base_url = config_dict.get("FIKEN_BASE_URL") or os.environ.get("FIKEN_BASE_URL") or "https://api.fiken.no/api/v2"

# Set up authentication strategy if token is available
auth_strategy = BearerAuth(access_token) if access_token else None

# Create the API client configuration
client_config = ClientConfig(
    hostname=base_url,
    auth_strategy=auth_strategy,
)

# Prepare request headers using the auth strategy
headers = {}
if client_config.auth_strategy is not None:
    headers.update(client_config.auth_strategy.prepare_request_headers())

# Make a real HTTP request using httpx
with httpx.Client(timeout=10.0) as client:
    response = client.get(f"{client_config.base_url}/companies", headers=headers)
    print(response.status_code, response.json())

This approach can be adapted for any API and authentication method supported by apiconfig. See the integration tests for more real-world examples.


Logging

apiconfig uses standard Python logging. To enable debug output:

import logging

logging.basicConfig(level=logging.DEBUG)
logging.getLogger("apiconfig").setLevel(logging.INFO)

Error Handling

All errors are structured and documented. Common exceptions include:

  • APIConfigError
  • ConfigurationError
  • AuthenticationError
  • InvalidConfigError
  • MissingConfigError
  • AuthStrategyError

Key Components

Alias Description
JsonObject Dictionary representing a JSON object
HeadersType Mapping of HTTP header names to values
QueryParamType Mapping for URL query parameters
DataType HTTP request body data
ResponseBodyType API response body

Architecture

Class Hierarchy

classDiagram
    ClientConfig --> AuthStrategy : uses
    ConfigManager --> ClientConfig : manages
    AuthStrategy <|-- ApiKeyAuth
    AuthStrategy <|-- BasicAuth
    AuthStrategy <|-- BearerAuth

Authentication Flow

sequenceDiagram
    participant Client
    participant AuthStrategy
    participant HTTPClient

    Client->>AuthStrategy: prepare_request_headers()
    AuthStrategy-->>Client: headers
    Client->>HTTPClient: request with headers

    alt token expired
        HTTPClient-->>Client: 401
        Client->>AuthStrategy: refresh()
        AuthStrategy-->>Client: new token
        Client->>HTTPClient: retry request
    end

Testing

Testing and Coverage

apiconfig is fully tested with pytest and coverage.py. To run tests and check coverage:

pytest --cov=apiconfig --cov-report=html

Static Type Checking

apiconfig uses Pyright for optional static type checking. Before running Pyright, ensure development dependencies are installed and the virtual environment is active:

poetry install --with dev
poetry shell
pyright

This guarantees libraries like httpx, pytest, and their stubs are available.

Test Structure

Unit tests are organized by feature under tests/unit. The exception hierarchy is covered in tests/unit/exceptions.

Test Dependencies

Tests rely only on pytest and the apiconfig package; no external services are required.


Running tests

Use pytest to execute the full test suite:

poetry run pytest

Test Structure

  • tests/unit – unit tests
  • tests/integration – integration tests against real APIs

Test Dependencies

  • Install dev dependencies with poetry install --with dev
  • Environment variables for integration tests are loaded automatically

CI/CD

Continuous integration and deployment are managed with GitHub Actions. All pushes and pull requests are tested, and releases are published to PyPI after passing tests.


Dependencies

External

Internal

  • Modules like apiconfig.config, apiconfig.auth, and apiconfig.utils

Optional

Optional Dependencies

None

Install development dependencies with:

poetry install --with dev

Status

Stability: Stable - the project is actively used in production environments. API Version: Follows Semantic Versioning starting at version 0.x. Deprecations: None

Maintenance Notes

The library is currently stable and actively maintained. Issues and pull requests are triaged on a best-effort basis. Minor feature requests and fixes are welcome.

Changelog

See CHANGELOG.md for a complete history of changes.

Future Considerations

Planned improvements include enhanced documentation, additional auth strategies, expanded test coverage, and formatter enhancements for more consistent styling.

Further Documentation


See Also


License

LGPL-3.0-or-later. See LICENSE for details.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

apiconfig-0.3.3.dev222.tar.gz (100.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

apiconfig-0.3.3.dev222-py3-none-any.whl (137.3 kB view details)

Uploaded Python 3

File details

Details for the file apiconfig-0.3.3.dev222.tar.gz.

File metadata

  • Download URL: apiconfig-0.3.3.dev222.tar.gz
  • Upload date:
  • Size: 100.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.12.9

File hashes

Hashes for apiconfig-0.3.3.dev222.tar.gz
Algorithm Hash digest
SHA256 e6b4ff475243997cdfeab7ecaebf146d236ebea719bd2ff3e87e5f05385fb2fa
MD5 b2976afbd409dbcc12e28d113a983e94
BLAKE2b-256 c52178c0fa3ebaf7fc13e160f4484da8bd66494230d4351f120ef18dd6c645ec

See more details on using hashes here.

Provenance

The following attestation bundles were made for apiconfig-0.3.3.dev222.tar.gz:

Publisher: publish.yaml on Leikaab/apiconfig

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file apiconfig-0.3.3.dev222-py3-none-any.whl.

File metadata

File hashes

Hashes for apiconfig-0.3.3.dev222-py3-none-any.whl
Algorithm Hash digest
SHA256 90d62febcb3d4ff136608778522c5c35ef9166202a8998db6252aea2750f4afc
MD5 6e64b6170a06ae63c143301c5168d562
BLAKE2b-256 21e36651d7b389d133336bd881378f669ab725bffe86fc8512fd404f5e609f88

See more details on using hashes here.

Provenance

The following attestation bundles were made for apiconfig-0.3.3.dev222-py3-none-any.whl:

Publisher: publish.yaml on Leikaab/apiconfig

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page