core-framework 0.12.5__py3-none-any.whl → 0.12.7__py3-none-any.whl

core/__init__.py

@@ -278,7 +278,7 @@ from core.exceptions import (
     MissingDependency,
 )
 
-__version__ = "0.12.5"
+__version__ = "0.12.7"
 __all__ = [
     # Models
     "Model",

core/auth/__init__.py

@@ -121,9 +121,18 @@ from core.auth.views import (
 from core.auth.middleware import (
     AuthenticationMiddleware,
     OptionalAuthenticationMiddleware,
+    JWTAuthBackend,
+    AuthenticatedUser,
     ensure_auth_middleware,
 )
 
+# Helper functions for consistent user access
+from core.auth.helpers import (
+    get_request_user,
+    is_authenticated,
+    set_request_user,
+)
+
 __all__ = [
     # Base
     "AuthBackend",
@@ -196,5 +205,11 @@ __all__ = [
     # Middleware
     "AuthenticationMiddleware",
     "OptionalAuthenticationMiddleware",
+    "JWTAuthBackend",
+    "AuthenticatedUser",
     "ensure_auth_middleware",
+    # Helpers
+    "get_request_user",
+    "is_authenticated",
+    "set_request_user",
 ]

core/auth/backends.py

@@ -161,14 +161,14 @@ class ModelBackend(AuthBackend):
     
     async def login(self, request: "Request", user: Any) -> None:
         """Executa ações pós-login."""
-        # Armazena usuário no request.state
-        request.state.user = user
+        # Armazena usuário no request.state (for backward compatibility)
+        from core.auth.helpers import set_request_user
+        set_request_user(request, user)
     
     async def logout(self, request: "Request", user: Any) -> None:
         """Executa ações de logout."""
-        # Remove usuário do request.state
-        if hasattr(request.state, "user"):
-            request.state.user = None
+        from core.auth.helpers import set_request_user
+        set_request_user(request, None)
 
 
 class TokenAuthBackend(AuthBackend):

core/auth/decorators.py

@@ -29,6 +29,28 @@ if TYPE_CHECKING:
     pass
 
 
+def _get_user(request: Request) -> Any | None:
+    """
+    Get authenticated user from request.
+    
+    Internal helper to avoid circular imports.
+    Checks both Starlette and legacy patterns.
+    """
+    # Pattern 1: request.user (Starlette AuthenticationMiddleware)
+    user = getattr(request, "user", None)
+    if user is not None:
+        if getattr(user, "is_authenticated", False):
+            if hasattr(user, "_user"):
+                return user._user
+            return user
+    
+    # Pattern 2: request.state.user (legacy)
+    if hasattr(request, "state"):
+        return getattr(request.state, "user", None)
+    
+    return None
+
+
 # =============================================================================
 # Classes de Permissão (para uso em ViewSets)
 # =============================================================================
@@ -70,7 +92,7 @@ class HasPermission(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             return False
@@ -135,7 +157,7 @@ class IsInGroup(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             return False
@@ -179,7 +201,7 @@ class IsSuperuser(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             return False
@@ -207,7 +229,7 @@ class IsStaff(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             return False
@@ -235,7 +257,7 @@ class IsActive(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             return False
@@ -371,7 +393,7 @@ def login_required():
             ...
     """
     async def check(request: Request):
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         
         if user is None:
             raise HTTPException(

core/auth/helpers.py

@@ -0,0 +1,104 @@
+"""
+Helper functions for authentication.
+
+Provides consistent user access across the framework, supporting both:
+- request.user (Starlette AuthenticationMiddleware pattern - preferred)
+- request.state.user (legacy pattern - backward compatibility)
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any, TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from starlette.requests import Request
+
+logger = logging.getLogger("core.auth")
+
+
+def get_request_user(request: "Request") -> Any | None:
+    """
+    Get authenticated user from request.
+    
+    Checks both patterns for compatibility:
+    1. request.user (Starlette AuthenticationMiddleware - preferred)
+    2. request.state.user (legacy pattern)
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        The authenticated user model or None if not authenticated
+        
+    Example:
+        from core.auth.helpers import get_request_user
+        
+        async def my_view(request: Request):
+            user = get_request_user(request)
+            if user is None:
+                raise HTTPException(401, "Not authenticated")
+    """
+    # Pattern 1: request.user (Starlette AuthenticationMiddleware)
+    user = getattr(request, "user", None)
+    if user is not None:
+        # Check if it's an authenticated user (has is_authenticated = True)
+        if getattr(user, "is_authenticated", False):
+            # If it's our AuthenticatedUser wrapper, return the underlying model
+            if hasattr(user, "_user"):
+                return user._user
+            return user
+    
+    # Pattern 2: request.state.user (legacy)
+    user = getattr(request.state, "user", None) if hasattr(request, "state") else None
+    
+    return user
+
+
+def is_authenticated(request: "Request") -> bool:
+    """
+    Check if request has an authenticated user.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        True if authenticated, False otherwise
+    """
+    # Pattern 1: request.user with is_authenticated
+    user = getattr(request, "user", None)
+    if user is not None and getattr(user, "is_authenticated", False):
+        return True
+    
+    # Pattern 2: request.state.user
+    if hasattr(request, "state"):
+        user = getattr(request.state, "user", None)
+        if user is not None:
+            return True
+    
+    return False
+
+
+def set_request_user(request: "Request", user: Any | None) -> None:
+    """
+    Set the authenticated user on the request.
+    
+    Sets both patterns for maximum compatibility:
+    - request.state.user (for dependencies and legacy code)
+    
+    Note: request.user is set by Starlette's AuthenticationMiddleware
+    via scope["user"] and cannot be set directly.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        user: The user model or None
+    """
+    if hasattr(request, "state"):
+        request.state.user = user
+
+
+__all__ = [
+    "get_request_user",
+    "is_authenticated", 
+    "set_request_user",
+]

core/cli/main.py

@@ -1039,9 +1039,10 @@ class AuthViewSet(ModelViewSet):
         Returns:
             Current user data
         """
-        # User is available via request.state.user (populated by auth middleware)
+        # User is available via request.user (Starlette pattern) or request.state.user (legacy)
         # permission_classes=[IsAuthenticated] ensures user is authenticated
-        user = request.state.user
+        from core.auth.helpers import get_request_user
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(status_code=401, detail="Authentication required")
@@ -1065,9 +1066,10 @@ class AuthViewSet(ModelViewSet):
         body = await request.json()
         data = ChangePasswordInput.model_validate(body)
         
-        # User is available via request.state.user (populated by auth middleware)
+        # User is available via request.user (Starlette pattern) or request.state.user (legacy)
         # permission_classes=[IsAuthenticated] ensures user is authenticated
-        user = request.state.user
+        from core.auth.helpers import get_request_user
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(status_code=401, detail="Authentication required")

core/dependencies.py

@@ -395,12 +395,14 @@ async def get_request_context(request: Request) -> dict[str, Any]:
     
     Útil para logging e auditoria.
     """
+    from core.auth.helpers import get_request_user
+    
     return {
         "method": request.method,
         "url": str(request.url),
         "client_ip": request.client.host if request.client else None,
         "user_agent": request.headers.get("user-agent"),
-        "user": getattr(request.state, "user", None),
+        "user": get_request_user(request),
     }
 
 

core/permissions.py

@@ -19,6 +19,29 @@ if TYPE_CHECKING:
     from core.views import APIView
 
 
+def _get_user(request: Request) -> Any | None:
+    """
+    Get authenticated user from request.
+    
+    Internal helper to avoid circular imports.
+    Checks both Starlette and legacy patterns.
+    """
+    # Pattern 1: request.user (Starlette AuthenticationMiddleware)
+    user = getattr(request, "user", None)
+    if user is not None:
+        if getattr(user, "is_authenticated", False):
+            # If it's our AuthenticatedUser wrapper, return the underlying model
+            if hasattr(user, "_user"):
+                return user._user
+            return user
+    
+    # Pattern 2: request.state.user (legacy)
+    if hasattr(request, "state"):
+        return getattr(request.state, "user", None)
+    
+    return None
+
+
 class Permission(ABC):
     """
     Classe base para permissões.
@@ -32,7 +55,7 @@ class Permission(ABC):
                 request: Request,
                 view: APIView | None = None,
             ) -> bool:
-                user = getattr(request.state, "user", None)
+                user = _get_user(request)
                 return user is not None and user.is_admin
     """
     
@@ -214,7 +237,7 @@ class IsAuthenticated(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         return user is not None
 
 
@@ -236,7 +259,7 @@ class IsAuthenticatedOrReadOnly(Permission):
         if request.method in self.SAFE_METHODS:
             return True
         
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         return user is not None
 
 
@@ -250,7 +273,7 @@ class IsAdmin(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         if user is None:
             return False
         
@@ -285,7 +308,7 @@ class IsOwner(Permission):
         if obj is None:
             return True
         
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         if user is None:
             return False
         
@@ -318,7 +341,7 @@ class HasRole(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = _get_user(request)
         if user is None:
             return False
         

core/tenancy.py

@@ -231,8 +231,9 @@ async def extract_tenant_from_request(
 
     Checks user, header, and query param in order.
     """
-    # tenant_id = await extract_tenant_from_request(request)
-    user = getattr(request.state, "user", None)
+    from core.auth.helpers import get_request_user
+    
+    user = get_request_user(request)
     if user is not None:
         tenant_id = getattr(user, user_tenant_attr, None)
         if tenant_id is not None:

{core_framework-0.12.5.dist-info → core_framework-0.12.7.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-framework
-Version: 0.12.5
+Version: 0.12.7
 Summary: Core Framework - Django-inspired, FastAPI-powered. Alta performance, baixo acoplamento, produtividade extrema.
 Project-URL: Homepage, https://github.com/SorPuti/core-framework
 Project-URL: Documentation, https://github.com/SorPuti/core-framework#readme

{core_framework-0.12.5.dist-info → core_framework-0.12.7.dist-info}/RECORD

@@ -1,27 +1,28 @@
-core/__init__.py,sha256=pc5DiPlXIs8HLdJ6-rz30XpNpVTCGRhDxLw8VG65iDg,12058
+core/__init__.py,sha256=iBDdZ1c2d4AF0Ge4SFgwizp-q1o3MkcPJESG69yUKig,12058
 core/app.py,sha256=sCA3mJI696i7MIjrPxfOr5zEYt0njarQfHHy3EAajk4,21071
 core/choices.py,sha256=rhcL3p2dB7RK99zIilpmoTFVcibQEIaRpz0CY0kImCE,10502
 core/config.py,sha256=2-MVF9nLoYmxpYYH_Gzn4-Sa3MU87YZskRPtlNyhg6Q,14049
 core/database.py,sha256=XqB5tZnb9UYDbVGIh96YbmbGJZMqln6-diPBHCr3VWk,11564
 core/datetime.py,sha256=bzqlAj3foA-lzbhXjlEiDNR2D-nwXu9mpxpdcUb-Pmw,32730
-core/dependencies.py,sha256=LrNLbmQhXoCPRvoRPRMGNo0w6_l4NLGWeeTHzpUU36M,11582
+core/dependencies.py,sha256=p207A8qwj-QVAb7nNSe3HxkefClwSQNQQylSFFa-meU,11627
 core/exceptions.py,sha256=cdcffeYnMzCbS4hApOYNmPVNbPUpKcrgJbi3nKhqTuI,22702
 core/fields.py,sha256=F2NdToowkJ_LFvPN9KVyxIFES1AlVDy7WkEp-8UiBpA,9327
 core/middleware.py,sha256=MZVw7smJ2MiycYvkaYIC2cNpyqYGk3m-eeoDandqZU4,23506
 core/models.py,sha256=jdNdjRPKBZiOBOgg8CmDYBwmuWdD7twCIpqINLGY4Q4,33788
-core/permissions.py,sha256=HQu_eNBEodJyR50CYcFvdCw9LlEfhI5vJbljV5VIs7M,10162
+core/permissions.py,sha256=rWfKYHLpWvhWnyHN7QsOmvRkX-23fgSzidFSWOrhQfs,10781
 core/querysets.py,sha256=Z87-U06Un_xA9GKwcjXx0yzw6F_xf_tvG_rBT5UGL9c,22678
 core/relations.py,sha256=UbdRgj0XQGI4lv2FQV1ImSAwu4Pn8yxTkSsdzR3m8cM,21372
 core/routing.py,sha256=vIiJN8bQ2836WW2zUKTJVBTC8RpjtDYgEGdz7mldnGc,15422
 core/serializers.py,sha256=gR5Y7wTACm1pECkUEpAKBUbPmONGLMDDwej4fyIiOdo,9438
-core/tenancy.py,sha256=bDnQCejlfhmpoeGhs4sOsvl0aiaz99ukYiutFv7BtgM,9185
+core/tenancy.py,sha256=R4tNrLcAgRRDSqOvJS2IRXcD2J-zoCE4ng01ip9xWKI,9169
 core/validators.py,sha256=LCDyvqwIKnMaUEdaVx5kWveZt3XsydknZ_bxBL4ic5U,27895
 core/views.py,sha256=Vm2FREET0IJ2JZbClNJ0vvZ6RN5aQKC1sDXsrOb4-SY,43319
-core/auth/__init__.py,sha256=hVBigKluu4NdEmS2fbSHS-ylg3t99q5IH0cdjFDJ3JU,4322
-core/auth/backends.py,sha256=R-siIE8TrNqDHkCx42zXN1WVvvuWOun1nj8D5elrC9g,10425
+core/auth/__init__.py,sha256=_yr4rMMvDt_uKujzkKfqlQZ6x9UiQ6jmRppw14hTQNc,4645
+core/auth/backends.py,sha256=PkLk2RQN2rQdtYSiN0mn7cqSp95hnLjO9xTFZqSsPF8,10486
 core/auth/base.py,sha256=Q7vXgwTmgdmyW7G8eJmDket2bKB_8YFnraZ_kK9_gTs,21425
-core/auth/decorators.py,sha256=tmC7prKUvHuzQ3J872nM6r83DR9d82dCLXKLvUB1Os8,12288
+core/auth/decorators.py,sha256=OE9yMQgwnSN8wYAnYhBjAMz__K5E1yoTGkdZCUsafEg,12826
 core/auth/hashers.py,sha256=0gIf67TU0k5H744FADpyh9_ugxA7m3mhYPZxLh_lEtc,12808
+core/auth/helpers.py,sha256=nuaVL9KzIy6ZkVWz9Z327qe4-sfF0NbbJDFIX3tR6vg,3020
 core/auth/middleware.py,sha256=3Wddxi2MKHrHguKfdW9LRKhHaHcmQ807edVcsFLqhVc,16645
 core/auth/models.py,sha256=aEE7deQKPS1aH0Btzzh3Z1Bwuqy8zvLZwu4JFEmiUNk,34058
 core/auth/permissions.py,sha256=v3ykAgNpq5wJ0NkuC_FuveMctOkDfM9Xp11XEnUAuBg,12461
@@ -29,7 +30,7 @@ core/auth/schemas.py,sha256=L0W96dOD348rJDGeu1K5Rz3aJj-GdwMr2vbwwsYfo2g,3469
 core/auth/tokens.py,sha256=jOF40D5O8WRG8klRwMBuSG-jOhdsp1irXn2aZ2puNSg,9149
 core/auth/views.py,sha256=3gMaq8pzWoWr29ExJk21JgGay2fE3Fq3Tz99Wb_ftvE,14203
 core/cli/__init__.py,sha256=obodnvfe8DUziqpk-IAaHTEOb1KSfYQeuBZEAofut4o,449
-core/cli/main.py,sha256=daWz8tuMkMYrkNBfueDH5OghncdqLs3k7BUMmvDsSvk,119635
+core/cli/main.py,sha256=Odl-tetCDffs9xJ7l18xK4X583nGXYmD3nr-w-8cdZM,119787
 core/deployment/__init__.py,sha256=RNcBRO9oB3WRnhtTTwM6wzVEcUKpKF4XfRkGSbbykIc,794
 core/deployment/docker.py,sha256=ywraIk-ncbHiAX2vXH7jcU9KjhCGPIg7j0xgOTu5Cg8,8681
 core/deployment/kubernetes.py,sha256=IV6gf664EFEyQry2ehgJ2UFhZhWovKpaHXln_0WXCMg,8414
@@ -78,7 +79,7 @@ example/auth.py,sha256=zBpLutb8lVKnGfQqQ2wnyygsSutHYZzeJBuhnFhxBaQ,4971
 example/models.py,sha256=xKdx0kJ9n0tZ7sCce3KhV3BTvKvsh6m7G69eFm3ukf0,4549
 example/schemas.py,sha256=wJ9QofnuHp4PjtM_IuMMBLVFVDJ4YlwcF6uQm1ooKiY,6139
 example/views.py,sha256=GQwgQcW6yoeUIDbF7-lsaZV7cs8G1S1vGVtiwVpZIQE,14338
-core_framework-0.12.5.dist-info/METADATA,sha256=INxj7mhfca6AsK23r_uZ4pMozXdOumZN9EM9BUV2IcI,12791
-core_framework-0.12.5.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
-core_framework-0.12.5.dist-info/entry_points.txt,sha256=lQ65IAOpieqU1VcHCUReeyandpyy8IKGix6IkJW_4Is,39
-core_framework-0.12.5.dist-info/RECORD,,
+core_framework-0.12.7.dist-info/METADATA,sha256=ulDjkkAMX9Axdn5SN_mpqSe4oVF4-EKprbwBTA5rwOs,12791
+core_framework-0.12.7.dist-info/WHEEL,sha256=WLgqFyCfm_KASv4WHyYy0P3pM_m7J5L9k2skdKLirC8,87
+core_framework-0.12.7.dist-info/entry_points.txt,sha256=lQ65IAOpieqU1VcHCUReeyandpyy8IKGix6IkJW_4Is,39
+core_framework-0.12.7.dist-info/RECORD,,