core-framework 0.12.4__tar.gz → 0.12.6__tar.gz

{core_framework-0.12.4 → core_framework-0.12.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-framework
-Version: 0.12.4
+Version: 0.12.6
 Summary: Core Framework - Django-inspired, FastAPI-powered. Alta performance, baixo acoplamento, produtividade extrema.
 Project-URL: Homepage, https://github.com/SorPuti/core-framework
 Project-URL: Documentation, https://github.com/SorPuti/core-framework#readme

{core_framework-0.12.4 → core_framework-0.12.6}/core/__init__.py

@@ -278,7 +278,7 @@ from core.exceptions import (
     MissingDependency,
 )
 
-__version__ = "0.12.4"
+__version__ = "0.12.6"
 __all__ = [
     # Models
     "Model",

{core_framework-0.12.4 → core_framework-0.12.6}/core/auth/__init__.py

@@ -121,9 +121,18 @@ from core.auth.views import (
 from core.auth.middleware import (
     AuthenticationMiddleware,
     OptionalAuthenticationMiddleware,
+    JWTAuthBackend,
+    AuthenticatedUser,
     ensure_auth_middleware,
 )
 
+# Helper functions for consistent user access
+from core.auth.helpers import (
+    get_request_user,
+    is_authenticated,
+    set_request_user,
+)
+
 __all__ = [
     # Base
     "AuthBackend",
@@ -196,5 +205,11 @@ __all__ = [
     # Middleware
     "AuthenticationMiddleware",
     "OptionalAuthenticationMiddleware",
+    "JWTAuthBackend",
+    "AuthenticatedUser",
     "ensure_auth_middleware",
+    # Helpers
+    "get_request_user",
+    "is_authenticated",
+    "set_request_user",
 ]

{core_framework-0.12.4 → core_framework-0.12.6}/core/auth/backends.py

@@ -161,14 +161,14 @@ class ModelBackend(AuthBackend):
     
     async def login(self, request: "Request", user: Any) -> None:
         """Executa ações pós-login."""
-        # Armazena usuário no request.state
-        request.state.user = user
+        # Armazena usuário no request.state (for backward compatibility)
+        from core.auth.helpers import set_request_user
+        set_request_user(request, user)
     
     async def logout(self, request: "Request", user: Any) -> None:
         """Executa ações de logout."""
-        # Remove usuário do request.state
-        if hasattr(request.state, "user"):
-            request.state.user = None
+        from core.auth.helpers import set_request_user
+        set_request_user(request, None)
 
 
 class TokenAuthBackend(AuthBackend):

{core_framework-0.12.4 → core_framework-0.12.6}/core/auth/decorators.py

@@ -24,6 +24,7 @@ from typing import Any, TYPE_CHECKING
 from fastapi import Depends, HTTPException, Request, status
 
 from core.permissions import Permission as PermissionBase
+from core.auth.helpers import get_request_user
 
 if TYPE_CHECKING:
     pass
@@ -70,7 +71,7 @@ class HasPermission(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -135,7 +136,7 @@ class IsInGroup(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -179,7 +180,7 @@ class IsSuperuser(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -207,7 +208,7 @@ class IsStaff(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -235,7 +236,7 @@ class IsActive(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -371,7 +372,7 @@ def login_required():
             ...
     """
     async def check(request: Request):
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(

core_framework-0.12.6/core/auth/helpers.py

@@ -0,0 +1,104 @@
+"""
+Helper functions for authentication.
+
+Provides consistent user access across the framework, supporting both:
+- request.user (Starlette AuthenticationMiddleware pattern - preferred)
+- request.state.user (legacy pattern - backward compatibility)
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any, TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from starlette.requests import Request
+
+logger = logging.getLogger("core.auth")
+
+
+def get_request_user(request: "Request") -> Any | None:
+    """
+    Get authenticated user from request.
+    
+    Checks both patterns for compatibility:
+    1. request.user (Starlette AuthenticationMiddleware - preferred)
+    2. request.state.user (legacy pattern)
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        The authenticated user model or None if not authenticated
+        
+    Example:
+        from core.auth.helpers import get_request_user
+        
+        async def my_view(request: Request):
+            user = get_request_user(request)
+            if user is None:
+                raise HTTPException(401, "Not authenticated")
+    """
+    # Pattern 1: request.user (Starlette AuthenticationMiddleware)
+    user = getattr(request, "user", None)
+    if user is not None:
+        # Check if it's an authenticated user (has is_authenticated = True)
+        if getattr(user, "is_authenticated", False):
+            # If it's our AuthenticatedUser wrapper, return the underlying model
+            if hasattr(user, "_user"):
+                return user._user
+            return user
+    
+    # Pattern 2: request.state.user (legacy)
+    user = getattr(request.state, "user", None) if hasattr(request, "state") else None
+    
+    return user
+
+
+def is_authenticated(request: "Request") -> bool:
+    """
+    Check if request has an authenticated user.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        True if authenticated, False otherwise
+    """
+    # Pattern 1: request.user with is_authenticated
+    user = getattr(request, "user", None)
+    if user is not None and getattr(user, "is_authenticated", False):
+        return True
+    
+    # Pattern 2: request.state.user
+    if hasattr(request, "state"):
+        user = getattr(request.state, "user", None)
+        if user is not None:
+            return True
+    
+    return False
+
+
+def set_request_user(request: "Request", user: Any | None) -> None:
+    """
+    Set the authenticated user on the request.
+    
+    Sets both patterns for maximum compatibility:
+    - request.state.user (for dependencies and legacy code)
+    
+    Note: request.user is set by Starlette's AuthenticationMiddleware
+    via scope["user"] and cannot be set directly.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        user: The user model or None
+    """
+    if hasattr(request, "state"):
+        request.state.user = user
+
+
+__all__ = [
+    "get_request_user",
+    "is_authenticated", 
+    "set_request_user",
+]