clerk-dev 0.5.0a1

Python Client SDK for clerk.dev

The most comprehensive User Management Platform

The Clerk Python library provides convenient access to the Clerk REST API from any Python application 3.0+. The library includes type definitions for all request params and response fields, and offers synchronous and asynchronous support powered by httpx

⚠️ Warning

This is a pre production SDK that has not yet been published to PYPI.

SDK Installation

PIP

pip install clerk-dev

Poetry

poetry add clerk-dev

SDK Example Usage

Example

# Synchronous Example
from clerk_dev import Clerk

s = Clerk(
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.email_addresses.get(email_address_id="email_address_id_example")

if res is not None:
    # handle response
    pass

The same SDK client can also be used to make asychronous requests by importing asyncio.

# Asynchronous Example
import asyncio
from clerk_dev import Clerk

async def main():
    s = Clerk(
        bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
    )
    res = await s.email_addresses.get_async(email_address_id="email_address_id_example")
    if res is not None:
        # handle response
        pass

asyncio.run(main())

Available Resources and Operations

actor_tokens

• create - Create actor token
• revoke - Revoke actor token

allowlist_identifiers

• list - List all identifiers on the allow-list
• create - Add identifier to the allow-list
• delete - Delete identifier from allow-list

beta_features

• update_production_instance_domain - Update production instance domain :warning: Deprecated
• update_instance_auth_config - Update instance settings
• change_production_instance_domain - Update production instance domain

blocklist_identifiers

• list - List all identifiers on the block-list
• create - Add identifier to the block-list
• delete - Delete identifier from block-list

clients

• list - List all clients :warning: Deprecated
• get - Get a client
• verify - Verify a client

domains

• list - List all instance domains
• add - Add a domain
• delete - Delete a satellite domain
• update - Update a domain

email_addresses

• create - Create an email address
• delete - Delete an email address
• get - Retrieve an email address
• update - Update an email address

instance_settings

• update - Update instance settings
• update_organization_settings - Update instance organization settings
• update_restrictions - Update instance restrictions

invitations

• list - List all invitations
• create - Create an invitation
• revoke - Revokes an invitation

jwks

• get - Retrieve the JSON Web Key Set of the instance

jwt_templates

• list - List all templates
• create - Create a JWT template
• delete - Delete a Template
• get - Retrieve a template
• update - Update a JWT template

o_auth_applications

• list - Get a list of OAuth applications for an instance
• create - Create an OAuth application
• delete - Delete an OAuth application
• get - Retrieve an OAuth application by ID
• update - Update an OAuth application
• rotate_secret - Rotate the client secret of the given OAuth application

organizations

• list - Get a list of organizations for an instance
• create - Create an organization
• delete - Delete an organization
• get - Retrieve an organization by ID or slug
• update - Update an organization
• delete_logo - Delete the organization's logo.
• upload_logo - Upload a logo for the organization
• merge_metadata - Merge and update metadata for an organization

organization_invitations

• list - Get a list of organization invitations
• create - Create and send an organization invitation
• get - Retrieve an organization invitation by ID
• revoke - Revoke a pending organization invitation
• create_bulk - Bulk create and send organization invitations
• list_pending - Get a list of pending organization invitations :warning: Deprecated

organization_memberships

• list - Get a list of all members of an organization
• create - Create a new organization membership
• delete - Remove a member from an organization
• update - Update an organization membership
• update_metadata - Merge and update organization membership metadata

phone_numbers

• create - Create a phone number
• delete - Delete a phone number
• get - Retrieve a phone number
• update - Update a phone number

proxy_checks

• verify - Verify the proxy configuration for your domain

misc

• get_public_interstitial - Returns the markup for the interstitial page

redirect_urls

• list - List all redirect URLs
• create - Create a redirect URL
• delete - Delete a redirect URL
• get - Retrieve a redirect URL

saml_connections

• list - Get a list of SAML Connections for an instance
• create - Create a SAML Connection
• delete - Delete a SAML Connection
• get - Retrieve a SAML Connection by ID
• update - Update a SAML Connection

sessions

• list - List all sessions
• get - Retrieve a session
• revoke - Revoke a session
• create_token_from_template - Create a session token from a jwt template
• verify - Verify a session :warning: Deprecated

sign_in_tokens

• create - Create sign-in token
• revoke - Revoke the given sign-in token

sign_ups

• update - Update a sign-up

templates

• list - List all templates
• get - Retrieve a template
• upsert - Update a template for a given type and slug
• preview - Preview changes to a template
• revert - Revert a template
• toggle_delivery - Toggle the delivery by Clerk for a template of a given type and slug

testing_tokens

• create - Retrieve a new testing token

users

• list - List all users
• create - Create a new user
• delete - Delete a user
• get - Retrieve a user
• update - Update a user
• ban - Ban a user
• lock - Lock a user
• update_metadata - Merge and update a user's metadata
• disable_mfa - Disable a user's MFA methods
• get_o_auth_access_token - Retrieve the OAuth access token of a user
• get_organization_memberships - Retrieve all memberships for a user
• delete_profile_image - Delete user profile image
• set_profile_image - Set user profile image
• unban - Unban a user
• unlock - Unlock a user
• verify_password - Verify the password of a user
• verify_totp - Verify a TOTP or backup code for a user
• count - Count users

webhooks

• delete_svix_app - Delete a Svix app
• create_svix_app - Create a Svix app
• generate_svix_auth_url - Create a Svix Dashboard URL

Error Handling

Handling errors in this SDK should largely match your expectations. All operations return a response object or raise an error. If Error objects are specified in your OpenAPI Spec, the SDK will raise the appropriate Error type.

Error Object	Status Code	Content Type
models.ClerkErrors	400,402,422	application/json
models.SDKError	4xx-5xx	/

Example

from clerk_dev import Clerk, models

s = Clerk(
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)

res = None
try:
    res = s.actor_tokens.create(actor={
    "sub": "user_2OEpKhcCN1Lat9NQ0G6puh7q5Rb",
}, user_id="user_1a2b3c", expires_in_seconds=3600, session_max_duration_in_seconds=1800)

except models.ClerkErrors as e:
    # handle exception
    raise(e)
except models.SDKError as e:
    # handle exception
    raise(e)

if res is not None:
    # handle response
    pass

Server Selection

Select Server by Index

You can override the default server globally by passing a server index to the server_idx: int optional parameter when initializing the SDK client instance. The selected server will then be used as the default on the operations that use it. This table lists the indexes associated with the available servers:

#	Server	Variables
0	https://api.clerk.com/v1	None

Example

from clerk_dev import Clerk

s = Clerk(
    server_idx=0,
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.actor_tokens.create(actor={
    "sub": "user_2OEpKhcCN1Lat9NQ0G6puh7q5Rb",
}, user_id="user_1a2b3c", expires_in_seconds=3600, session_max_duration_in_seconds=1800)

if res is not None:
    # handle response
    pass

Override Server URL Per-Client

The default server can also be overridden globally by passing a URL to the server_url: str optional parameter when initializing the SDK client instance. For example:

from clerk_dev import Clerk

s = Clerk(
    server_url="https://api.clerk.com/v1",
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.actor_tokens.create(actor={
    "sub": "user_2OEpKhcCN1Lat9NQ0G6puh7q5Rb",
}, user_id="user_1a2b3c", expires_in_seconds=3600, session_max_duration_in_seconds=1800)

if res is not None:
    # handle response
    pass

Custom HTTP Client

The Python SDK makes API calls using the httpx HTTP library. In order to provide a convenient way to configure timeouts, cookies, proxies, custom headers, and other low-level configuration, you can initialize the SDK client with your own HTTP client instance. Depending on whether you are using the sync or async version of the SDK, you can pass an instance of HttpClient or AsyncHttpClient respectively, which are Protocol's ensuring that the client has the necessary methods to make API calls. This allows you to wrap the client with your own custom logic, such as adding custom headers, logging, or error handling, or you can just pass an instance of httpx.Client or httpx.AsyncClient directly.

For example, you could specify a header for every request that this sdk makes as follows:

from clerk_dev import Clerk
import httpx

http_client = httpx.Client(headers={"x-custom-header": "someValue"})
s = Clerk(client=http_client)

or you could wrap the client with your own custom logic:

from clerk_dev import Clerk
from clerk_dev.httpclient import AsyncHttpClient
import httpx

class CustomClient(AsyncHttpClient):
    client: AsyncHttpClient

    def __init__(self, client: AsyncHttpClient):
        self.client = client

    async def send(
        self,
        request: httpx.Request,
        *,
        stream: bool = False,
        auth: Union[
            httpx._types.AuthTypes, httpx._client.UseClientDefault, None
        ] = httpx.USE_CLIENT_DEFAULT,
        follow_redirects: Union[
            bool, httpx._client.UseClientDefault
        ] = httpx.USE_CLIENT_DEFAULT,
    ) -> httpx.Response:
        request.headers["Client-Level-Header"] = "added by client"

        return await self.client.send(
            request, stream=stream, auth=auth, follow_redirects=follow_redirects
        )

    def build_request(
        self,
        method: str,
        url: httpx._types.URLTypes,
        *,
        content: Optional[httpx._types.RequestContent] = None,
        data: Optional[httpx._types.RequestData] = None,
        files: Optional[httpx._types.RequestFiles] = None,
        json: Optional[Any] = None,
        params: Optional[httpx._types.QueryParamTypes] = None,
        headers: Optional[httpx._types.HeaderTypes] = None,
        cookies: Optional[httpx._types.CookieTypes] = None,
        timeout: Union[
            httpx._types.TimeoutTypes, httpx._client.UseClientDefault
        ] = httpx.USE_CLIENT_DEFAULT,
        extensions: Optional[httpx._types.RequestExtensions] = None,
    ) -> httpx.Request:
        return self.client.build_request(
            method,
            url,
            content=content,
            data=data,
            files=files,
            json=json,
            params=params,
            headers=headers,
            cookies=cookies,
            timeout=timeout,
            extensions=extensions,
        )

s = Clerk(async_client=CustomClient(httpx.AsyncClient()))

Authentication

Per-Client Security Schemes

This SDK supports the following security scheme globally:

Name	Type	Scheme
bearer_auth	http	HTTP Bearer

To authenticate with the API the bearer_auth parameter must be set when initializing the SDK client instance. For example:

from clerk_dev import Clerk

s = Clerk(
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.actor_tokens.create(actor={
    "sub": "user_2OEpKhcCN1Lat9NQ0G6puh7q5Rb",
}, user_id="user_1a2b3c", expires_in_seconds=3600, session_max_duration_in_seconds=1800)

if res is not None:
    # handle response
    pass

File uploads

Certain SDK methods accept file objects as part of a request body or multi-part request. It is possible and typically recommended to upload files as a stream rather than reading the entire contents into memory. This avoids excessive memory consumption and potentially crashing with out-of-memory errors when working with very large files. The following example demonstrates how to attach a file stream to a request.

[!TIP]

For endpoints that handle file uploads bytes arrays can also be used. However, using streams is recommended for large files.

from clerk_dev import Clerk

s = Clerk(
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.organizations.upload_logo(organization_id="org_12345", file={
    "file_name": "your_file_here",
    "content": open("<file_path>", "rb"),
    "content_type": "<value>",
}, uploader_user_id="user_67890")

if res is not None:
    # handle response
    pass

Pagination

Some of the endpoints in this SDK support pagination. To use pagination, you make your SDK calls as usual, but the returned response object will have a Next method that can be called to pull down the next group of results. If the return value of Next is None, then there are no more pages to be fetched.

Here's an example of one such pagination call:

from clerk_dev import Clerk

s = Clerk(
    bearer_auth="<YOUR_BEARER_TOKEN_HERE>",
)


res = s.clients.list(limit=20, offset=10)

if res is not None:
    while True:
        # handle items

        res = res.Next()
        if res is None:
            break

Development

Maturity

This SDK is in beta, and there may be breaking changes between versions without a major version update. Therefore, we recommend pinning usage to a specific package version. This way, you can install the same version each time without breaking changes unless you are intentionally looking for the latest version.

Contributions

While we value open-source contributions to this SDK, this library is generated programmatically. Feel free to open a PR or a Github issue as a proof of concept and we'll do our best to include it in a future release!

SDK Created by Speakeasy