syncanix-sdk 0.1.0

syncanix-sdk

Python intent verification SDK for Syncanix (Django, Flask, FastAPI).

Install: pip install syncanix-sdk[django] or [flask] or [fastapi].

See the Syncanix docs for usage.

v2 (act-as-user) binds

The per-route helpers — syncanix_verify_intent (Flask/Django) and require_syncanix_intent (FastAPI) — accept optional keyword args to enforce the v2 argsHash / audience / single-use-nonce binds (omit them and only the v1 coordinate is checked, unchanged):

@syncanix_verify_intent(
    secret=SECRET,
    # CANONICAL args — NOT the raw body. Reconstruct from every source
    # (ADR-0138): REST → {**view_args, **query, **body}; GraphQL → variables.
    get_args=lambda request: canonical_args(request),
    expected_audience="syncanix:tenant:<tenantId>",  # or omit to skip
    nonce_store=InMemoryNonceStore(),                 # or omit to skip
)
def refund(request): ...

Each bind is opt-in. Replay protection needs a nonce_store (InMemoryNonceStore is single-instance only — use a shared store for a horizontally scaled API). The v2 sub is surfaced on the verified payload's .sub. Passing the bare request body as get_args would falsely reject path-param / GET / GraphQL calls — reconstruct the canonical args.