Switch to uv and trusted publishing

.github/workflows/publish.yml

@@ -1,29 +1,40 @@
 name: Publish
+
 on:
   release:
-    types: [created]
+    types: [published]
+
 jobs:
-  build-n-publish:
-    name: Build and publish
+  build:
+    name: Build distribution
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
-    - uses: actions/checkout@master
-    - name: Set up Python 3.9
-      uses: actions/setup-python@v1
-      with:
-        python-version: 3.9
-    - name: Install pypa/propelauth_fastapi
-      run: >-
-        python -m
-        pip install -r requirements.txt
-        --user
-    - name: Run tests
-      run: python -m pytest
-
-    - name: Build a binary wheel and a source tarball
-      run: python setup.py sdist
+      - uses: actions/checkout@v6.0.0
+      - uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+      - run: uv sync --frozen
+      - run: uv run pytest
+      - run: uv build
+      - uses: actions/upload-artifact@v7.0.1
+        with:
+          name: python-package-distributions
+          path: dist/
+          if-no-files-found: error
 
-    - name: Publish distribution 📦 to Test PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1
-      with:
-        password: ${{ secrets.PYPI_API_TOKEN }}
+  publish:
+    name: Publish to PyPI
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v8.0.1
+        with:
+          name: python-package-distributions
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@v1.14.0

.github/workflows/test.yml

@@ -5,17 +5,9 @@ jobs:
     name: Build and test
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
-    - name: Set up Python 3.9
-      uses: actions/setup-python@v1
-      with:
-        python-version: 3.9
-
-    - name: Install 
-      run: >-
-        python -m
-        pip install -r requirements.txt
-        --user
-
-    - name: Run tests
-      run: python -m pytest
+      - uses: actions/checkout@v6.0.0
+      - uses: astral-sh/setup-uv@v8.1.0
+        with:
+          enable-cache: true
+      - run: uv sync --frozen
+      - run: uv run pytest

.python-version

@@ -0,0 +1 @@
+3.12

pyproject.toml

@@ -0,0 +1,33 @@
+[project]
+name = "propelauth-fastapi"
+version = "4.3.2"
+description = "A FastAPI library for managing authentication, backed by PropelAuth"
+readme = "README.md"
+requires-python = ">=3.9"
+license = { text = "MIT" }
+authors = [{ name = "PropelAuth", email = "support@propelauth.com" }]
+dependencies = [
+    "propelauth-py==4.3.2",
+    "requests",
+    "httpx>=0.28.1",
+    "fastapi",
+]
+
+[project.urls]
+Homepage = "https://github.com/propelauth/propelauth-fastapi"
+
+[dependency-groups]
+dev = [
+    "pytest",
+    "requests-mock",
+]
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[tool.uv]
+no-build = false
+
+[tool.hatch.build.targets.wheel]
+packages = ["propelauth_fastapi"]