feat: raise any httpx exceptions, e.g. from failed auth

This means that 403s, such as those from not being allowed to fetch a specific
version, are passed to client code, and so help debug permission errors better
than the disk i/o error that's being raised right now.

It also means there is consistency - before this change if there's a 403 (or
any other connection error) from the initial HEAD request on the start of a
query, then that was being passed to client now. Now, during the read data
during the query if these get raised they get passed to client code.

README.md

@@ -238,7 +238,13 @@ This means that sqlite-s3-query is not for all use cases of querying SQLite data
 This is not necessarily a permanent decision - it is possible that in future sqlite-s3-query will support unversioned buckets.
 
 
-## Exception hierarchy
+## Exceptions
+
+Any [exceptions raised by HTTPX](https://www.python-httpx.org/exceptions/) are passed through to client code unchanged. This includes `httpx.HTTPStatusError` when S3 returns a non-200 response. Most commonly this will be when S3 returns a 403 in the case of insufficient permissions on the database object being queried.
+
+All other exceptions raised inherit from `sqlite_s3_query.SQLiteS3QueryError` as described in the following section.
+
+### Exception hierarchy
 
 - `SQLiteS3QueryError`
 

sqlite_s3_query.py

@@ -69,13 +69,25 @@ def sqlite_s3_query_multi(url, get_credentials=lambda now: (
     body_hash = sha256(b'').hexdigest()
     scheme, netloc, path, _, _ = urlsplit(url)
 
+    pending_exception = None
+
+    def raise_any_pending_exception():
+        nonlocal pending_exception
+        if pending_exception is not None:
+            to_raise = pending_exception
+            pending_exception = None
+            raise to_raise
+
     def run(func, *args):
         res = func(*args)
+        raise_any_pending_exception()
         if res != 0:
             raise SQLiteError(libsqlite3.sqlite3_errstr(res).decode())
 
     def run_with_db(db, func, *args):
-        if func(*args) != 0:
+        res = func(*args)
+        raise_any_pending_exception()
+        if res != 0:
             raise SQLiteError(libsqlite3.sqlite3_errmsg(db).decode())
 
     @contextmanager
@@ -169,6 +181,7 @@ def x_close(p_file):
 
         x_read_type = CFUNCTYPE(c_int, c_void_p, c_void_p, c_int, c_int64)
         def x_read(p_file, p_out, i_amt, i_ofst):
+            nonlocal pending_exception
             offset = 0
 
             try:
@@ -183,7 +196,8 @@ def x_read(p_file, p_out, i_amt, i_ofst):
                         offset += len(chunk)
                         if offset > i_amt:
                             break
-            except Exception:
+            except Exception as exception:
+                pending_exception = exception
                 return SQLITE_IOERR
 
             if offset != i_amt:

test.py

@@ -15,6 +15,7 @@
 import uuid
 
 import httpx
+from httpx import HTTPStatusError
 
 from sqlite_s3_query import (
     VersioningNotEnabledError,
@@ -411,7 +412,42 @@ def test_empty_object(self):
             'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
             None,
         ), get_libsqlite3=get_libsqlite3) as query:
-            with self.assertRaisesRegex(SQLiteError, 'disk I/O error'):
+            with self.assertRaisesRegex(HTTPStatusError, r"\b416\b"):
+                query('SELECT 1').__enter__()
+
+    def test_incorrect_permission_on_context_enter(self):
+        with get_db([("CREATE TABLE my_table (my_col_a text, my_col_b text);",())]) as db:
+            put_object_with_versioning('my-bucket', 'my.db', db)
+
+        with self.assertRaisesRegex(HTTPStatusError, r"\b403\b"):
+            sqlite_s3_query('http://localhost:9000/my-bucket/my.db', get_credentials=lambda now: (
+                'us-east-1',
+                'AKIAIOSFODNN7EXAMPLE',
+                'not-the-right-key',
+                None,
+            ), get_libsqlite3=get_libsqlite3).__enter__()
+
+    def test_incorrect_permission_on_run_query(self):
+        with get_db([("CREATE TABLE my_table (my_col_a text, my_col_b text);",())]) as db:
+            put_object_with_versioning('my-bucket', 'my.db', db)
+
+        creds = (
+            (
+                'us-east-1',
+                'AKIAIOSFODNN7EXAMPLE',
+                'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
+                None,
+            ), (
+                'us-east-1',
+                'AKIAIOSFODNN7EXAMPLE',
+                'not-the-right-key',
+                None,
+            )
+        )
+        creds_it = iter(creds)
+
+        with sqlite_s3_query('http://localhost:9000/my-bucket/my.db', get_credentials=lambda now: next(creds_it), get_libsqlite3=get_libsqlite3) as query:
+            with self.assertRaisesRegex(HTTPStatusError, r"\b403\b"):
                 query('SELECT 1').__enter__()
 
     def test_bad_db_header(self):