Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions docs/source/api-reference.rst
Original file line number Diff line number Diff line change
Expand Up @@ -20,3 +20,7 @@ API Reference
.. automodule:: vws.response
:undoc-members:
:members:

.. automodule:: vws.transports
:undoc-members:
:members:
3 changes: 3 additions & 0 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,7 @@ dynamic = [
]
dependencies = [
"beartype>=0.22.9",
"httpx>=0.28.0",
"requests>=2.32.3",
"urllib3>=2.2.3",
"vws-auth-tools>=2024.7.12",
Expand Down Expand Up @@ -357,6 +358,8 @@ ignore_path = [
# Ideally we would limit the paths to the source code where we want to ignore names,
# but Vulture does not enable this.
ignore_names = [
# Public API classes imported by users from vws.transports
"HTTPXTransport",
# pytest configuration
"pytest_collect_file",
"pytest_collection_modifyitems",
Expand Down
1 change: 1 addition & 0 deletions spelling_private_dict.txt
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,7 @@ hmac
html
http
https
httpx
iff
io
issuecomment
Expand Down
37 changes: 15 additions & 22 deletions src/vws/_vws_request.py
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@
API.
"""

import requests
from beartype import BeartypeConf, beartype
from vws_auth_tools import authorization_header, rfc_1123_date

from vws.response import Response
from vws.transports import Transport


@beartype(conf=BeartypeConf(is_pep484_tower=True))
Expand All @@ -21,27 +21,30 @@ def target_api_request(
base_vws_url: str,
request_timeout_seconds: float | tuple[float, float],
extra_headers: dict[str, str],
transport: Transport,
) -> Response:
"""Make a request to the Vuforia Target API.

This uses `requests` to make a request against https://vws.vuforia.com.

Args:
content_type: The content type of the request.
server_access_key: A VWS server access key.
server_secret_key: A VWS server secret key.
method: The HTTP method which will be used in the request.
data: The request body which will be used in the request.
request_path: The path to the endpoint which will be used in the
method: The HTTP method which will be used in the
request.
data: The request body which will be used in the
request.
request_path: The path to the endpoint which will be
used in the request.
base_vws_url: The base URL for the VWS API.
request_timeout_seconds: The timeout for the request, as used by
``requests.request``. This can be a float to set both the
connect and read timeouts, or a (connect, read) tuple.
extra_headers: Additional headers to include in the request.
request_timeout_seconds: The timeout for the request.
This can be a float to set both the connect and
read timeouts, or a (connect, read) tuple.
extra_headers: Additional headers to include in the
request.
transport: The HTTP transport to use for the request.

Returns:
The response to the request made by `requests`.
The response to the request.
"""
date_string = rfc_1123_date()

Expand All @@ -64,20 +67,10 @@ def target_api_request(

url = base_vws_url.rstrip("/") + request_path

requests_response = requests.request(
return transport(
method=method,
url=url,
headers=headers,
data=data,
timeout=request_timeout_seconds,
)

return Response(
text=requests_response.text,
url=requests_response.url,
status_code=requests_response.status_code,
headers=dict(requests_response.headers),
request_body=requests_response.request.body,
tell_position=requests_response.raw.tell(),
content=bytes(requests_response.content),
)
27 changes: 11 additions & 16 deletions src/vws/query.py
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@
from http import HTTPMethod, HTTPStatus
from typing import Any, BinaryIO

import requests
from beartype import BeartypeConf, beartype
from urllib3.filepost import encode_multipart_formdata
from vws_auth_tools import authorization_header, rfc_1123_date
Expand All @@ -24,7 +23,7 @@
)
from vws.include_target_data import CloudRecoIncludeTargetData
from vws.reports import QueryResult, TargetData
from vws.response import Response
from vws.transports import RequestsTransport, Transport

_ImageType = io.BytesIO | BinaryIO

Expand All @@ -50,21 +49,26 @@ def __init__(
client_secret_key: str,
base_vwq_url: str = "https://cloudreco.vuforia.com",
request_timeout_seconds: float | tuple[float, float] = 30.0,
transport: Transport | None = None,
) -> None:
"""
Args:
client_access_key: A VWS client access key.
client_secret_key: A VWS client secret key.
base_vwq_url: The base URL for the VWQ API.
request_timeout_seconds: The timeout for each HTTP request, as
used by ``requests.request``. This can be a float to set
both the connect and read timeouts, or a (connect, read)
tuple.
request_timeout_seconds: The timeout for each
HTTP request. This can be a float to set both
the connect and read timeouts, or a
(connect, read) tuple.
transport: The HTTP transport to use for
requests. Defaults to
``RequestsTransport()``.
"""
self._client_access_key = client_access_key
self._client_secret_key = client_secret_key
self._base_vwq_url = base_vwq_url
self._request_timeout_seconds = request_timeout_seconds
self._transport = transport or RequestsTransport()

def query(
self,
Expand Down Expand Up @@ -143,22 +147,13 @@ def query(
"Content-Type": content_type_header,
}

requests_response = requests.request(
response = self._transport(
method=method,
url=self._base_vwq_url.rstrip("/") + request_path,
headers=headers,
data=content,
timeout=self._request_timeout_seconds,
)
response = Response(
text=requests_response.text,
url=requests_response.url,
status_code=requests_response.status_code,
headers=dict(requests_response.headers),
request_body=requests_response.request.body,
tell_position=requests_response.raw.tell(),
content=bytes(requests_response.content),
)

if response.status_code == HTTPStatus.REQUEST_ENTITY_TOO_LARGE:
raise RequestEntityTooLargeError(response=response)
Expand Down
158 changes: 158 additions & 0 deletions src/vws/transports.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,158 @@
"""HTTP transport implementations for VWS clients."""

from typing import Protocol, runtime_checkable

import httpx
import requests
from beartype import BeartypeConf, beartype

from vws.response import Response


@runtime_checkable
class Transport(Protocol):
"""Protocol for HTTP transports used by VWS clients.

A transport is a callable that makes an HTTP request and
returns a ``Response``.
"""

def __call__(
self,
*,
method: str,
url: str,
headers: dict[str, str],
data: bytes,
timeout: float | tuple[float, float],
) -> Response:
"""Make an HTTP request.

Args:
method: The HTTP method (e.g. "GET", "POST").
url: The full URL to request.
headers: Headers to send with the request.
data: The request body as bytes.
timeout: The timeout for the request. A float
sets both the connect and read timeouts. A
(connect, read) tuple sets them individually.

Returns:
A Response populated from the HTTP response.
"""
... # pylint: disable=unnecessary-ellipsis


@beartype(conf=BeartypeConf(is_pep484_tower=True))
class RequestsTransport:
"""HTTP transport using the ``requests`` library.

This is the default transport.
"""

def __call__(
self,
*,
method: str,
url: str,
headers: dict[str, str],
data: bytes,
timeout: float | tuple[float, float],
) -> Response:
"""Make an HTTP request using ``requests``.

Args:
method: The HTTP method.
url: The full URL.
headers: Request headers.
data: The request body.
timeout: The request timeout.

Returns:
A Response populated from the requests response.
"""
requests_response = requests.request(
method=method,
url=url,
headers=headers,
data=data,
timeout=timeout,
)

return Response(
text=requests_response.text,
url=requests_response.url,
status_code=requests_response.status_code,
headers=dict(requests_response.headers),
request_body=requests_response.request.body,
tell_position=requests_response.raw.tell(),
content=bytes(requests_response.content),
)


@beartype(conf=BeartypeConf(is_pep484_tower=True))
class HTTPXTransport:
"""HTTP transport using the ``httpx`` library.

Use this transport for environments where ``httpx`` is
preferred over ``requests``.
"""

def __call__(
self,
*,
method: str,
url: str,
headers: dict[str, str],
data: bytes,
timeout: float | tuple[float, float],
) -> Response:
"""Make an HTTP request using ``httpx``.

Args:
method: The HTTP method.
url: The full URL.
headers: Request headers.
data: The request body.
timeout: The request timeout.

Returns:
A Response populated from the httpx response.
"""
if isinstance(timeout, tuple):
connect_timeout, read_timeout = timeout
httpx_timeout = httpx.Timeout(
connect=connect_timeout,
read=read_timeout,
write=None,
pool=None,
)
else:
httpx_timeout = httpx.Timeout(
connect=timeout,
read=timeout,
write=None,
pool=None,
)

httpx_response = httpx.request(
method=method,
url=url,
headers=headers,
content=data,
timeout=httpx_timeout,
follow_redirects=True,
)

content = bytes(httpx_response.content)
request_content = httpx_response.request.content

return Response(
text=httpx_response.text,
url=str(object=httpx_response.url),
status_code=httpx_response.status_code,
headers=dict(httpx_response.headers),
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HTTPXTransport produces lowercase header keys unlike RequestsTransport

Low Severity

dict(httpx_response.headers) normalizes all header keys to lowercase (e.g., "content-type"), while dict(requests_response.headers) preserves the server's original casing (e.g., "Content-Type"). Since Response.headers is a plain dict[str, str] exposed as public API, any consumer doing case-sensitive key lookups like response.headers["Content-Type"] would get a KeyError with HTTPXTransport but work fine with RequestsTransport.

Fix in Cursor Fix in Web

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

HTTP headers are case-insensitive per RFC 7230. Both requests and httpx use case-insensitive header mappings internally — the difference only surfaces after calling dict(). In practice, this library's consumers access headers through the Response object, and any code doing case-sensitive key lookups on HTTP headers has a latent bug regardless of transport. Not changing this.

request_body=bytes(request_content) or None,
tell_position=len(content),
content=content,
)
16 changes: 12 additions & 4 deletions src/vws/vumark_service.py
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@
TooManyRequestsError,
UnknownTargetError,
)
from vws.transports import RequestsTransport, Transport
from vws.vumark_accept import VuMarkAccept


Expand All @@ -29,25 +30,31 @@ class VuMarkService:

def __init__(
self,
*,
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Breaking API change: VuMarkService now requires keyword-only arguments

High Severity

The bare * added to VuMarkService.__init__ forces server_access_key and server_secret_key to be keyword-only arguments. Previously these could be passed positionally (e.g., VuMarkService("key", "secret")). The other two clients (VWS and CloudRecoService) already had *, but VuMarkService did not, so this is a new breaking change to the public API — contradicting the PR's "full backwards compatibility" claim.

Fix in Cursor Fix in Web

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an intentional change. VWS and CloudRecoService already used * for keyword-only arguments, so VuMarkService was the odd one out. Making it consistent also avoids a pylint too-many-positional-arguments error now that transport is a new parameter.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good catch. Fixed in e2bf8ce — the float path now explicitly sets connect=timeout, read=timeout, write=None, pool=None to match the tuple path and requests semantics.

server_access_key: str,
server_secret_key: str,
base_vws_url: str = "https://vws.vuforia.com",
request_timeout_seconds: float | tuple[float, float] = 30.0,
transport: Transport | None = None,
) -> None:
"""
Args:
server_access_key: A VWS server access key.
server_secret_key: A VWS server secret key.
base_vws_url: The base URL for the VWS API.
request_timeout_seconds: The timeout for each HTTP request, as
used by ``requests.request``. This can be a float to set
both the connect and read timeouts, or a (connect, read)
tuple.
request_timeout_seconds: The timeout for each
HTTP request. This can be a float to set both
the connect and read timeouts, or a
(connect, read) tuple.
transport: The HTTP transport to use for
requests. Defaults to
``RequestsTransport()``.
"""
self._server_access_key = server_access_key
self._server_secret_key = server_secret_key
self._base_vws_url = base_vws_url
self._request_timeout_seconds = request_timeout_seconds
self._transport = transport or RequestsTransport()

def generate_vumark_instance(
self,
Expand Down Expand Up @@ -109,6 +116,7 @@ def generate_vumark_instance(
base_vws_url=self._base_vws_url,
request_timeout_seconds=self._request_timeout_seconds,
extra_headers={"Accept": accept},
transport=self._transport,
)

if (
Expand Down
Loading