# Nitrokey Python SDK

The Nitrokey Python SDK can be used to use and configure Nitrokey devices.

**[Documentation](https://docs.nitrokey.com/software/nitrokey-sdk-py/)**

## Features

The SDK supports these devices and features:

- Nitrokey 3
  - device and bootloader management (`nitrokey.nk3`)
  - admin app (`nitrokey.trussed.admin_app`)
  - provisioner app (`nitrokey.trussed.provisioner_app`)
  - secrets app (`nitrokey.nk3.secrets_app`)
- Nitrokey Passkey
  - device and bootloader management (`nitrokey.nkpk`)
  - admin app (`nitrokey.trussed.admin_app`)
  - provisioner app (`nitrokey.trussed.provisioner_app`)

## Installation

The Nitrokey Python SDK is released to the [Python Package Index][pypi] (PyPI) and can be installed with `pip`:

[pypi]: https://pypi.org/project/nitrokey/

```
$ pip install nitrokey
```

The releases are also available as [signed tags][releases] in the GitHub repository [Nitrokey/nitrokey-sdk-py][github].

[releases]: https://github.com/Nitrokey/nitrokey-sdk-py/releases
[github]: https://github.com/Nitrokey/nitrokey-sdk-py

## Getting Started

```python
import nitrokey.trussed

print("Connected Nitrokey devices:")
for device in nitrokey.trussed.list():
    print(f"- {device.name} at {device.path}")
```

## Compatibility

The Nitrokey Python SDK currently requires Python 3.10 or later.
Support for old Python versions may be dropped in minor releases.

## Related Projects

- [pynitrokey](https://github.com/Nitrokey/pynitrokey):
  A command line interface for the Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 and NetHSM
- [nitrokey-app2](https://github.com/nitrokey/nitrokey-app2):
  A graphical application to manage and use Nitrokey 3 devices
- [nethsm-sdk-py](https://github.com/Nitrokey/nethsm-sdk-py):
  A client-side Python SDK for NetHSM

## Development

The following software is required for the development of the SDK:

- Python 3.10 or newer
- [poetry](https://python-poetry.org/)
- GNU Make
- git

After checking out the source code from GitHub, you can install the SDK and its dev dependencies into a new virtual environment managed by poetry using `make install`:

```
$ git clone https://github.com/Nitrokey/nitrokey-sdk-py.git
$ cd nitrokey-sdk-py
$ make install
```

We use multiple checks and linters for this project.
Use `make check` to run all required checks.
Some problems can automatically be fixed by running `make fix`.

The SDK also includes minimal tests to ensure that it is installed and loaded correctly.
Use `make test` to run these tests.

### Dependency Management

We use [poetry](https://python-poetry.org) for dependency management.
poetry maintains a lockfile with pinned dependency versions that is used for development environments and in CI.
This lockfile includes the hash of the `pyproject.toml` file, so it needs to be updated if `pyproject.toml` is changed.
These make targets can be used to invoke poetry for the most common tasks:

- `make install` installs the SDK and its dependencies as specified in the lockfile (must be up-to-date)
- `make lock` updates the lockfile without changing pinned dependency versions
- `make update` bumps all dependencies, installs them and updates the lockfile

For more information, see poetry’s documentation on [Managing depencies](https://python-poetry.org/docs/managing-dependencies/) and [Commands](https://python-poetry.org/docs/cli/).

### Publishing Releases

Releases are published using Github Actions.
To create a new release:
1. Update the `version` field in `pyproject.toml` manually or using `poetry version`.
2. Update the [changelog](./CHANGELOG.md) for the release.
3. Run `make update-version` to update the RPM package version.
4. Commit these changes, create a PR and merge into `main`.
5. [Trigger the `full.yaml` workflow](https://github.com/Nitrokey/nitrokey-sdk-py/actions/workflows/full.yaml) for the release branch to run the full compatibility tests.
6. Create a signed tag with the version number and a `v` prefix, for example `v0.2.4`, and push it to this repository.
7. [Create a new release](https://github.com/Nitrokey/nitrokey-sdk-py/releases/new) for this tag and copy the relevant parts from the [changelog](./CHANGELOG.md) to the release description.
8. Wait for the deployment action to run and approve the deployment to [PyPI](https://pypi.org/p/nitrokey).

All commits to `main` are automatically deployed to [TestPyPI](https://test.pypi.org/p/nitrokey).
It is also possible to publish release candidates (pre-releases) with a suffix like `-rc.1`.

## License

This software is fully open source.

All software, unless otherwise noted, is dual licensed under [Apache 2.0](./LICENSES/Apache-2.0.txt) and [MIT](./LICENSES/MIT.txt).
You may use the software under the terms of either the Apache 2.0 license or MIT license.

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
