core-framework 0.12.5__tar.gz → 0.12.6__tar.gz

{core_framework-0.12.5 → core_framework-0.12.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: core-framework
-Version: 0.12.5
+Version: 0.12.6
 Summary: Core Framework - Django-inspired, FastAPI-powered. Alta performance, baixo acoplamento, produtividade extrema.
 Project-URL: Homepage, https://github.com/SorPuti/core-framework
 Project-URL: Documentation, https://github.com/SorPuti/core-framework#readme

{core_framework-0.12.5 → core_framework-0.12.6}/core/__init__.py

@@ -278,7 +278,7 @@ from core.exceptions import (
     MissingDependency,
 )
 
-__version__ = "0.12.5"
+__version__ = "0.12.6"
 __all__ = [
     # Models
     "Model",

{core_framework-0.12.5 → core_framework-0.12.6}/core/auth/__init__.py

@@ -121,9 +121,18 @@ from core.auth.views import (
 from core.auth.middleware import (
     AuthenticationMiddleware,
     OptionalAuthenticationMiddleware,
+    JWTAuthBackend,
+    AuthenticatedUser,
     ensure_auth_middleware,
 )
 
+# Helper functions for consistent user access
+from core.auth.helpers import (
+    get_request_user,
+    is_authenticated,
+    set_request_user,
+)
+
 __all__ = [
     # Base
     "AuthBackend",
@@ -196,5 +205,11 @@ __all__ = [
     # Middleware
     "AuthenticationMiddleware",
     "OptionalAuthenticationMiddleware",
+    "JWTAuthBackend",
+    "AuthenticatedUser",
     "ensure_auth_middleware",
+    # Helpers
+    "get_request_user",
+    "is_authenticated",
+    "set_request_user",
 ]

{core_framework-0.12.5 → core_framework-0.12.6}/core/auth/backends.py

@@ -161,14 +161,14 @@ class ModelBackend(AuthBackend):
     
     async def login(self, request: "Request", user: Any) -> None:
         """Executa ações pós-login."""
-        # Armazena usuário no request.state
-        request.state.user = user
+        # Armazena usuário no request.state (for backward compatibility)
+        from core.auth.helpers import set_request_user
+        set_request_user(request, user)
     
     async def logout(self, request: "Request", user: Any) -> None:
         """Executa ações de logout."""
-        # Remove usuário do request.state
-        if hasattr(request.state, "user"):
-            request.state.user = None
+        from core.auth.helpers import set_request_user
+        set_request_user(request, None)
 
 
 class TokenAuthBackend(AuthBackend):

{core_framework-0.12.5 → core_framework-0.12.6}/core/auth/decorators.py

@@ -24,6 +24,7 @@ from typing import Any, TYPE_CHECKING
 from fastapi import Depends, HTTPException, Request, status
 
 from core.permissions import Permission as PermissionBase
+from core.auth.helpers import get_request_user
 
 if TYPE_CHECKING:
     pass
@@ -70,7 +71,7 @@ class HasPermission(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -135,7 +136,7 @@ class IsInGroup(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -179,7 +180,7 @@ class IsSuperuser(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -207,7 +208,7 @@ class IsStaff(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -235,7 +236,7 @@ class IsActive(PermissionBase):
         request: Request,
         view: Any = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             return False
@@ -371,7 +372,7 @@ def login_required():
             ...
     """
     async def check(request: Request):
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(

core_framework-0.12.6/core/auth/helpers.py

@@ -0,0 +1,104 @@
+"""
+Helper functions for authentication.
+
+Provides consistent user access across the framework, supporting both:
+- request.user (Starlette AuthenticationMiddleware pattern - preferred)
+- request.state.user (legacy pattern - backward compatibility)
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any, TYPE_CHECKING
+
+if TYPE_CHECKING:
+    from starlette.requests import Request
+
+logger = logging.getLogger("core.auth")
+
+
+def get_request_user(request: "Request") -> Any | None:
+    """
+    Get authenticated user from request.
+    
+    Checks both patterns for compatibility:
+    1. request.user (Starlette AuthenticationMiddleware - preferred)
+    2. request.state.user (legacy pattern)
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        The authenticated user model or None if not authenticated
+        
+    Example:
+        from core.auth.helpers import get_request_user
+        
+        async def my_view(request: Request):
+            user = get_request_user(request)
+            if user is None:
+                raise HTTPException(401, "Not authenticated")
+    """
+    # Pattern 1: request.user (Starlette AuthenticationMiddleware)
+    user = getattr(request, "user", None)
+    if user is not None:
+        # Check if it's an authenticated user (has is_authenticated = True)
+        if getattr(user, "is_authenticated", False):
+            # If it's our AuthenticatedUser wrapper, return the underlying model
+            if hasattr(user, "_user"):
+                return user._user
+            return user
+    
+    # Pattern 2: request.state.user (legacy)
+    user = getattr(request.state, "user", None) if hasattr(request, "state") else None
+    
+    return user
+
+
+def is_authenticated(request: "Request") -> bool:
+    """
+    Check if request has an authenticated user.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        
+    Returns:
+        True if authenticated, False otherwise
+    """
+    # Pattern 1: request.user with is_authenticated
+    user = getattr(request, "user", None)
+    if user is not None and getattr(user, "is_authenticated", False):
+        return True
+    
+    # Pattern 2: request.state.user
+    if hasattr(request, "state"):
+        user = getattr(request.state, "user", None)
+        if user is not None:
+            return True
+    
+    return False
+
+
+def set_request_user(request: "Request", user: Any | None) -> None:
+    """
+    Set the authenticated user on the request.
+    
+    Sets both patterns for maximum compatibility:
+    - request.state.user (for dependencies and legacy code)
+    
+    Note: request.user is set by Starlette's AuthenticationMiddleware
+    via scope["user"] and cannot be set directly.
+    
+    Args:
+        request: The Starlette/FastAPI request object
+        user: The user model or None
+    """
+    if hasattr(request, "state"):
+        request.state.user = user
+
+
+__all__ = [
+    "get_request_user",
+    "is_authenticated", 
+    "set_request_user",
+]

{core_framework-0.12.5 → core_framework-0.12.6}/core/cli/main.py

@@ -1039,9 +1039,10 @@ class AuthViewSet(ModelViewSet):
         Returns:
             Current user data
         """
-        # User is available via request.state.user (populated by auth middleware)
+        # User is available via request.user (Starlette pattern) or request.state.user (legacy)
         # permission_classes=[IsAuthenticated] ensures user is authenticated
-        user = request.state.user
+        from core.auth.helpers import get_request_user
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(status_code=401, detail="Authentication required")
@@ -1065,9 +1066,10 @@ class AuthViewSet(ModelViewSet):
         body = await request.json()
         data = ChangePasswordInput.model_validate(body)
         
-        # User is available via request.state.user (populated by auth middleware)
+        # User is available via request.user (Starlette pattern) or request.state.user (legacy)
         # permission_classes=[IsAuthenticated] ensures user is authenticated
-        user = request.state.user
+        from core.auth.helpers import get_request_user
+        user = get_request_user(request)
         
         if user is None:
             raise HTTPException(status_code=401, detail="Authentication required")

{core_framework-0.12.5 → core_framework-0.12.6}/core/dependencies.py

@@ -395,12 +395,14 @@ async def get_request_context(request: Request) -> dict[str, Any]:
     
     Útil para logging e auditoria.
     """
+    from core.auth.helpers import get_request_user
+    
     return {
         "method": request.method,
         "url": str(request.url),
         "client_ip": request.client.host if request.client else None,
         "user_agent": request.headers.get("user-agent"),
-        "user": getattr(request.state, "user", None),
+        "user": get_request_user(request),
     }
 
 

{core_framework-0.12.5 → core_framework-0.12.6}/core/permissions.py

@@ -15,6 +15,8 @@ from typing import Any, TYPE_CHECKING
 
 from fastapi import HTTPException, Request, status
 
+from core.auth.helpers import get_request_user
+
 if TYPE_CHECKING:
     from core.views import APIView
 
@@ -32,7 +34,7 @@ class Permission(ABC):
                 request: Request,
                 view: APIView | None = None,
             ) -> bool:
-                user = getattr(request.state, "user", None)
+                user = get_request_user(request)
                 return user is not None and user.is_admin
     """
     
@@ -214,7 +216,7 @@ class IsAuthenticated(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         return user is not None
 
 
@@ -236,7 +238,7 @@ class IsAuthenticatedOrReadOnly(Permission):
         if request.method in self.SAFE_METHODS:
             return True
         
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         return user is not None
 
 
@@ -250,7 +252,7 @@ class IsAdmin(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         if user is None:
             return False
         
@@ -285,7 +287,7 @@ class IsOwner(Permission):
         if obj is None:
             return True
         
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         if user is None:
             return False
         
@@ -318,7 +320,7 @@ class HasRole(Permission):
         request: Request,
         view: "APIView | None" = None,
     ) -> bool:
-        user = getattr(request.state, "user", None)
+        user = get_request_user(request)
         if user is None:
             return False
         

{core_framework-0.12.5 → core_framework-0.12.6}/core/tenancy.py

@@ -231,8 +231,9 @@ async def extract_tenant_from_request(
 
     Checks user, header, and query param in order.
     """
-    # tenant_id = await extract_tenant_from_request(request)
-    user = getattr(request.state, "user", None)
+    from core.auth.helpers import get_request_user
+    
+    user = get_request_user(request)
     if user is not None:
         tenant_id = getattr(user, user_tenant_attr, None)
         if tenant_id is not None:

{core_framework-0.12.5 → core_framework-0.12.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "core-framework"
-version = "0.12.5"
+version = "0.12.6"
 description = "Core Framework - Django-inspired, FastAPI-powered. Alta performance, baixo acoplamento, produtividade extrema."
 requires-python = ">=3.10,<4.0"
 readme = "README.md"