aogier/starlette-authlib

Run the README sample app (uvicorn sample_app.app:app) and exercise its session login: GET /login sets a JWT session cookie (307), and GET / with that cookie returns 200 logged-in page; unauthenticated GET / returns 401.

cd <host-path> && ls -la && cat README* 2>/dev/null | head -300
cd <host-path> && git log -1 --format=%H 2>/dev/null; ls .github/workflows 2>/dev/null; cat pyproject.toml 2>/dev/null | head -60; ls <host-path> 2>/dev/null
cd <host-path> && python3 --version; which uv pip3 uvicorn; ls sample_app sample_app/*; cat sample_app/app.py | head -80; sed -n 1,200p <host-path> | head -150
cd /tmp && python3 -m venv <host-path> 2>&1 | tail -3; <host-path> install -q --upgrade pip 2>&1 | tail -3; <host-path> install -q <host-path> uvicorn 2>&1 | tail -15; echo EXIT=$?; <host-path> show starlette-authlib starlette uvicorn authlib 2>&1 | grep -E '^(Name|Version)'
sudo -n apt-get update -qq >/dev/null 2>&1; sudo -n DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3-venv python3-pip >/tmp/apt.log 2>&1; echo apt=$?; rm -rf <host-path>; cd /tmp && python3 -m venv <host-path> && <host-path> install -q <host-path> uvicorn 2>&1 | tail -15; echo PIP=${PIPESTATUS[0]}; <host-path> show starlette-authlib starlette uvicorn authlib 2>&1 | grep -E '^(Name|Version)'
cd <host-path> && (<host-path> sample_app.app:app --port 8000 > /tmp/uv.log 2>&1 &) ; sleep 4; curl -s -o /dev/null -w 'root %{http_code}\n' localhost:8000/; curl -s -c /tmp/cj -o /dev/null -w 'login %{http_code} %{redirect_url}\n' localhost:8000/login; curl -s -b /tmp/cj -w '\nauth %{http_code}\n' localhost:8000/; pkill -f 'uvicorn sample_app.app' ; sleep 1; pgrep -fa uvicorn || echo stopped; cat /tmp/uv.log | tail -5
cd <host-path> && <host-path> sample_app.app:app --port 8000 > /tmp/uv.log 2>&1 & echo $! > /tmp/uv.pid; sleep 4; curl -s -o /dev/null -w 'root %{http_code}\n' localhost:8000/; curl -s -c /tmp/cj -o /dev/null -w 'login %{http_code} %{redirect_url}\n' localhost:8000/login; curl -s -b /tmp/cj -w '\nauth %{http_code}\n' localhost:8000/; kill $(cat /tmp/uv.pid); sleep 2; kill -0 $(cat /tmp/uv.pid) 2>/dev/null && echo STILL_RUNNING || echo stopped; tail -3 /tmp/uv.log
grep -n "def http\|status\|urlopen\|expected" <host-path> | head -60; grep -n "'http'" <host-path> | head
cd <host-path> && mkdir -p .coldpass && ls -la .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"http","argv":["<host-path>","env":{}}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","operation":"Run the README sample app (uvicorn sample_app.app:app) and exercise its session login: GET /login sets a JWT session cookie (307), and GET / with that cookie returns 200 logged-in page; unauthenticated GET / returns 401.","operation_scope":"Sample app with default HS256 config; no credentials needed. RS256 / VANILLA variants not exercised.","steps":["Read README.md (Installation, Usage, sample application sections)","python3 -m venv <host-path> (python3-venv installed via apt-get)","<host-path> install <host-path> uvicorn","<host-path> sample_app.app:app --port 8000 (background), curl /, /login, /with cookie; server stopped afterward"],"deviations":["README 'pip install starlette-authlib' replaced with pip install from the pinned local checkout (same package, version 0.3.28) into <host-path>","uvicorn is not a declared dependency; installed explicitly because the README run command needs it.","python3-venv and python3-pip installed via apt-get (not present in the guest).","First attempt to stop the server with pkill -f matched the shell itself; restarted and stopped by PID instead. No repository unit or lint suites were run."],"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
python3 -I -m json.tool .coldpass/probe.json >/dev/null && python3 -I -m json.tool .coldpass/report.json >/dev/null && echo JSON_OK; <env-var>=<host-path> python3 -I <host-path> --validate; echo EXIT=$?; pgrep -f 'venv/bin/uvicorn' || echo no_server
ps -o pid,ppid,etime,args -p 2187,2215,2216,2219 2>/dev/null; ss -ltnp 2>/dev/null | grep 8000
kill 2187; sleep 2; ss -ltnp | grep -c ':8000 ' ; pgrep -f 'venv/bin/uvicorn sample_app' >/dev/null && echo STILL || echo none; <env-var>=<host-path> python3 -I <host-path> --validate
pgrep -af 'venv/bin/uvicorn sample_app' ; pgrep -f 'venv/bin/uvicorn sample_app' | xargs -r ps -o pid,ppid,args -p