asana
Python client library for Asana.
Required: Security procedures for outdated OpenSSL versions
Older versions of OpenSSL can cause a problem when using python-asana
In particular, at the time of this writing, at least MacOS X 10.11 and below ship with a very old version of OpenSSL:
$ openssl version
OpenSSL 0.9.8zh 14 Jan 2016
OpenSSL 0.9.8 was first released in 2005, and therefore only supports TLS (Transport Layer Security) version 1.0. Asana has deprecated and stopped accepting requests for clients which do not suport TLS 1.0 and above, which unfortunately includes any software linked against this version of the library - this includes both the MacOS X provided Python interpreter and any homebrew installed Python that is not specifically configured to link against a newer version.
To see if your Python version is affected, run
$ python -c "import ssl; print ssl.OPENSSL_VERSION"
If the version printed at the command line is older than 1.0.1
, when, in 2012, OpenSSL first supported TLS 1.1 and 1.2, you will not be able to use python-asana
to connect to Asana. Specifically, you will recieve 400 Bad Request
responses with an error message in the response body about the lack of support for TLS 1.1 and above.
Fortunately, homebrew makes it easy to install both an updated OpenSSL and a Python interpreter that links to it. Run
$ brew install openssl
... # homebrew installs
$ /usr/local/Cellar/openssl/*/bin/openssl version # Just to verify...
OpenSSL 1.0.2h 3 May 2016
Finally, you have to install the homebrew version of python which links against the newer OpenSSL
$ brew install python --with-brewed-openssl
... # homebrew installs
$ python -c "import ssl; print ssl.OPENSSL_VERSION" # Verify inside Python
OpenSSL 1.0.2h 3 May 2016
If you see the version of OpenSSL greater than OpenSSL 1.0.1, then you're all set to start using python-asana
Similarly, if you're not using a homebrew version of Python (e.g. using macports or manually compiling) you'll have to make sure that your installation of Python is using an up-to-date version of OpenSSL. Note: this does not apply to using virtualenv
; virtualenv
manages Python packages, but uses the system python and its standard library packages, including OpenSSL.
Authentication
Personal Access Token
Create a client using your Asana Personal Access Token:
client = asana.Client.access_token('PERSONAL_ACCESS_TOKEN')
OAuth 2
Asana supports OAuth 2. asana
handles some of the details of the OAuth flow for you.
Create a client using your OAuth Client ID and secret:
client = asana.Client.oauth(
client_id='ASANA_CLIENT_ID',
client_secret='ASANA_CLIENT_SECRET',
redirect_uri='https://yourapp.com/auth/asana/callback'
)
Redirect the user to the authorization URL obtained from the client's session
object:
(url, state) = client.session.authorization_url()
When the user is redirected back to your callback, check the state
URL parameter matches, then pass the code
parameter to obtain a bearer token:
if request.params['state'] == state:
token = client.session.fetch_token(code=request.params['code'])
# ...
else:
# error! possible CSRF attack
Note: if you're writing a non-browser-based application (e.x. a command line tool) you can use the special redirect URI urn:ietf:wg:oauth:2.0:oob
to prompt the user to copy and paste the code into the application.
Usage
The client's methods are divided into several resources: attachments
, events
, projects
, stories
, tags
, tasks
, teams
, users
, and workspaces
.
Methods that return a single object return that object directly:
me = client.users.me()
print "Hello " + me['name']
workspace_id = me['workspaces'][0]['id']
project = client.projects.create_in_workspace(workspace_id, { 'name': 'new project' })
print "Created project with id: " + project['id']
Methods that return multiple items (e.x. find_all
) return a page iterator by default. See the "Collections" section.
the gen folder for methods available for each resource.
SeeOptions
Various options can be set globally on the Client.DEFAULTS
object, per-client on client.options
, or per-request as additional named arguments. For example:
# global:
asana.Client.DEFAULTS['page_size'] = 100
# per-client:
client.options['page_size'] = 100
# per-request:
client.tasks.find_all({ 'project': 1234 }, page_size=100)
Available options
base_url
(default: "https://app.asana.com/api/1.0"): API endpoint base URL to connect tomax_retries
(default: 5): number to times to retry if API rate limit is reached or a server error occures. Rate limit retries delay until the rate limit expires, server errors exponentially backoff starting with a 1 second delay.full_payload
(default: False): return the entire JSON response instead of the 'data' propery (default for collection methods andevents.get
)fields
andexpand
: see API documentation
Collections (methods returning an array as it's 'data' property):
iterator_type
(default: "items"): specifies which type of iterator (or not) to return. Valid values are "items" andNone
.item_limit
(default: None): limits the number of items of a collection to return.page_size
(default: 50): limits the number of items per page to fetch at a time.offset
: offset token returned by previous calls to the same method (inresponse['next_page']['offset']
)
Events:
poll_interval
(default: 5): polling interval for getting new events viaevents.get_next
andevents.get_iterator
sync
: sync token returned by previous calls toevents.get
(inresponse['sync']
)
Collections
Items Iterator
By default, methods that return a collection of objects return an item iterator:
workspaces = client.workspaces.find_all(item_limit=1)
print workspaces.next()
print workspaces.next() # raises StopIteration if there are no more items
Or:
for workspace in client.workspaces.find_all()
print workspace
Raw API
You can also use the raw API to fetch a page at a time:
offset = None
while True:
page = client.workspaces.find_all(offset=offset, iterator_type=None)
print page['data']
if 'next_page' in page:
offset = page['next_page']['offset']
else:
break
Contributing
Feel free to fork and submit pull requests for the code! Please follow the existing code as an example of style and make sure that all your code passes lint and tests.
Code generation
The specific Asana resource classes under gen
(_Tag
, _Workspace
, _Task
, etc) are
generated code, hence they shouldn't be modified by hand. See the [asana-api-meta][meta] repo for details.
Deployment
Repo Owners Only. Take the following steps to issue a new release of the library.
Automatic Deployment
Run deploy.py [version]
. See deploy.py -h
for additional info.
Manual Deployment
- Merge in the desired changes into the
master
branch and commit them. - Clone the repo, work on master.
- Edit package version in
asana/__init__.py
to indicate the semantic version change. - Commit the change
- Tag the commit with
v
plus the same version number you set in the file.git tag v1.2.3
- Push changes to origin, including tags:
git push origin master --tags
Travis CI will automatically build and deploy the tagged release to pypi
.