公開エンドポイント

import time
import urllib.error
import urllib.request

from sandbox_auth import AUTH
from cwsandbox import (
    Endpoint,
    EndpointAuth,
    EndpointKind,
    Sandbox,
    Service,
    ServiceVisibility,
)


def get_status(url, headers=None):
    request = urllib.request.Request(url, headers=headers or {})
    try:
        with urllib.request.urlopen(request, timeout=10) as response:
            return response.status
    except urllib.error.HTTPError as error:
        return error.code


with Sandbox.run(
    "python3", "-m", "http.server", "8080",
    container_image="python:3.11",
    services=[
        Service(
            port=8080,
            name="web",
            visibility=ServiceVisibility.PUBLIC,
            endpoint=Endpoint(kind=EndpointKind.HTTPS, auth=EndpointAuth.SHARE_TOKEN),
        ),
    ],
    resources={"cpu": "1", "memory": "1Gi"},
    max_lifetime_seconds=300,
    auth=AUTH,
) as sandbox:
    token = sandbox.endpoint_share_token
    if token is None:
        sandbox.start().result()
        token = sandbox.endpoint_share_token
    if token is None:
        raise RuntimeError("No share token returned; recreate the sandbox.")

    sandbox.wait()
    deadline = time.monotonic() + 60
    while time.monotonic() < deadline:
        sandbox.get_status()
        if sandbox.service_urls:
            url = sandbox.service_urls[0][2]
            try:
                if get_status(url, token.as_headers()) == 200:
                    break
            except (urllib.error.URLError, TimeoutError, OSError):
                pass
        time.sleep(2)
    else:
        raise TimeoutError("Authenticated request did not succeed within 60 seconds.")

    assert get_status(url) == 401, "Expected anonymous access to be rejected."
    print("Authenticated request: 200; anonymous request: 401")

8443 tls 8443-2f8d41b6-9c3e-4a17-b5d2-7e0a13c64f89.a1b2c3d4.ep2.cwsandbox.com:443

import socket
import ssl

address = "[ENDPOINT-ADDRESS]"  # service_addresses からの host:port
host, port = address.rsplit(":", 1)

context = ssl.create_default_context(cafile="[PATH-TO-CA-CERT]")

with socket.create_connection((host, int(port))) as sock:
    with context.wrap_socket(sock, server_hostname=host) as tls:
        print(tls.version(), tls.getpeercert()["subject"])