csrd-utils 0.3.60__tar.gz → 0.3.62__tar.gz

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: csrd-utils
-Version: 0.3.60
+Version: 0.3.62
 Summary: CLI utilities for csrd service generation and feature augmentation
 Project-URL: Repository, https://github.com/csrd-api/fastapi-common
 Project-URL: Documentation, https://github.com/csrd-api/fastapi-common/tree/main/packages/utils

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "csrd-utils"
-version = "0.3.60"
+version = "0.3.62"
 description = "CLI utilities for csrd service generation and feature augmentation"
 license = { text = "MIT" }
 requires-python = ">=3.12"

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/__main__.py

@@ -41,6 +41,7 @@ class GenerateServiceArgs(TypedDict):
     broker: str
     has_caching: bool
     cache_backend: str
+    has_auth: bool
     has_structured_logging: bool
     overwrite_if_exists: bool
 
@@ -236,6 +237,7 @@ def _collect_new_service_config(args: argparse.Namespace) -> GenerateServiceArgs
                 "broker": args.broker,
                 "has_caching": args.caching,
                 "cache_backend": args.cache_backend,
+                "has_auth": False,
                 "has_structured_logging": args.structured_logging,
                 "overwrite_if_exists": args.force,
             }
@@ -327,6 +329,7 @@ def _collect_new_service_config(args: argparse.Namespace) -> GenerateServiceArgs
             "broker": broker,
             "has_caching": has_caching,
             "cache_backend": cache_backend,
+            "has_auth": False,
             "has_structured_logging": has_structured_logging,
             "overwrite_if_exists": overwrite_if_exists,
         }
@@ -468,6 +471,7 @@ def _generate_services_from_cluster_spec(
         has_delegates = bool(delegates_list)
         has_workers = service_type == "worker" or "workers" in features
         has_caching = "caching" in features
+        has_auth = "auth-service" in service.get("requires", []) and name != "auth-service"
         has_structured_logging = "logging" in features
         database = str(service.get("database", "sqlite")) if has_database else "sqlite"
 
@@ -516,6 +520,7 @@ def _generate_services_from_cluster_spec(
                     broker=broker,
                     has_caching=has_caching,
                     cache_backend="redis",
+                    has_auth=has_auth,
                     has_structured_logging=has_structured_logging,
                     overwrite_if_exists=force,
                 )

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/generator.py

@@ -137,6 +137,7 @@ def _build_context(
     broker: str,
     has_caching: bool,
     cache_backend: str,
+    has_auth: bool,
     has_structured_logging: bool,
 ) -> dict[str, Any]:
     return {
@@ -153,6 +154,7 @@ def _build_context(
         "broker": broker,
         "has_caching": has_caching,
         "cache_backend": cache_backend,
+        "has_auth": has_auth,
         "has_structured_logging": has_structured_logging,
     }
 
@@ -175,6 +177,7 @@ def generate_service(
     cache_backend: str,
     has_structured_logging: bool,
     overwrite_if_exists: bool,
+    has_auth: bool = False,
 ) -> Path:
     """Generate a service from the bundled cookiecutter-service template."""
     output_root = output_dir.resolve()
@@ -204,6 +207,7 @@ def generate_service(
         broker=broker,
         has_caching=has_caching,
         cache_backend=cache_backend,
+        has_auth=has_auth,
         has_structured_logging=has_structured_logging,
     )
 

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/cookiecutter.json

@@ -18,6 +18,7 @@
   "cache_backend": [
     "redis"
   ],
+  "has_auth": false,
   "has_structured_logging": true,
   "port": "8080",
   "model_name": "Item",

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/dependencies/__init__.py

@@ -17,3 +17,9 @@ from .worker_broker import get_worker_broker_url
 
 __all__ += ("get_worker_broker_url",)
 {%- endif %}
+
+{%- if cookiecutter.has_auth %}
+from .auth_service import VerifiedTokenDep
+
+__all__ += ("VerifiedTokenDep",)
+{%- endif %}

csrd_utils-0.3.62/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/dependencies/auth_service.py

@@ -0,0 +1,64 @@
+{%- if cookiecutter.has_auth %}
+from typing import Annotated
+
+import httpx
+from fastapi import HTTPException, Security
+from fastapi.requests import Request
+
+from csrd.auth import CallbackAuthenticator, create_bearer_dependency
+from csrd.models.claims import UserClaims
+from csrd.versioning import find_token
+
+from ..settings import settings
+
+
+def _map_claims(payload: dict[str, object]) -> UserClaims:
+    claims = payload.get("claims") if isinstance(payload.get("claims"), dict) else payload
+    if not isinstance(claims, dict):
+        raise HTTPException(status_code=502, detail="invalid auth response")
+
+    authorities = claims.get("authorities") or claims.get("roles") or []
+    if isinstance(authorities, str):
+        authorities = authorities.split()
+
+    sub = str(claims.get("sub", ""))
+    user_name = str(claims.get("user_name") or sub)
+
+    return UserClaims(
+        sub=sub,
+        user_name=user_name,
+        authorities=list(authorities),
+    )
+
+
+async def _remote_verify(_: Request, token: str) -> UserClaims:
+    try:
+        async with httpx.AsyncClient(timeout=5.0) as client:
+            response = await client.post(
+                f"{settings.auth_service_url}/api/verify",
+                json={"token": token},
+            )
+    except httpx.ConnectError as exc:
+        raise HTTPException(status_code=503, detail="auth service unavailable") from exc
+
+    if response.status_code != 200:
+        raise HTTPException(status_code=401, detail="invalid token")
+
+    payload = response.json()
+    if not isinstance(payload, dict):
+        raise HTTPException(status_code=502, detail="invalid auth response")
+    return _map_claims(payload)
+
+
+_authenticator = CallbackAuthenticator(callback=_remote_verify)
+
+VerifiedTokenDep = Annotated[
+    UserClaims,
+    Security(create_bearer_dependency(_authenticator, token_finder=find_token)),
+]
+
+
+__all__ = ("VerifiedTokenDep",)
+{%- else %}
+__all__: tuple[str, ...] = ()
+{%- endif %}

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/requirements.txt

@@ -24,6 +24,10 @@ psycopg[binary]>=3.2,<4
 csrd-delegate>=0.1.36,<1
 {%- endif %}
 
+{%- if cookiecutter.has_auth %}
+csrd-auth>=0.1.36,<1
+{%- endif %}
+
 {%- if cookiecutter.has_workers %}
 celery>=5.4,<6
 {%- if cookiecutter.broker == "redis" %}

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/settings.py

@@ -57,6 +57,13 @@ class Settings(BaseSettings):
     has_caching: bool = False
     {%- endif %}
 
+    {%- if cookiecutter.has_auth %}
+    has_auth: bool = True
+    auth_service_url: str = "http://auth-service:8081"
+    {%- else %}
+    has_auth: bool = False
+    {%- endif %}
+
     @model_validator(mode="after")
     def validate_db_credentials(self) -> Self:
         if not self.has_database:

csrd_utils-0.3.62/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/tests/conftest.py

@@ -0,0 +1,66 @@
+"""Shared test fixtures for {{ cookiecutter.service_name }}."""
+
+import os
+import secrets
+
+import pytest
+from fastapi.testclient import TestClient
+{%- if cookiecutter.has_auth %}
+from fastapi import HTTPException
+
+from csrd.models.claims import UserClaims
+
+from {{cookiecutter.__service_name_snake}}.dependencies import auth_service as auth_dependency
+{%- endif %}
+
+from {{cookiecutter.__service_name_snake}} import build_app
+
+HAS_DATABASE = {{"True" if cookiecutter.has_database else "False"}}
+DB_KIND = "{{ cookiecutter.database }}"
+HAS_AUTH = {{"True" if cookiecutter.has_auth else "False"}}
+
+
+# [INSERT: fixtures]
+
+
+{%- if cookiecutter.has_auth %}
+@pytest.fixture
+def auth_token() -> str:
+    # Generate a per-test bearer token value used by auth-guarded endpoints.
+    return f"test-token-{secrets.token_hex(8)}"
+
+
+@pytest.fixture(autouse=True)
+def mock_auth_verifier(auth_token: str):
+    original_callback = auth_dependency._authenticator.callback
+
+    async def _fake_verify(_request, token: str) -> UserClaims:
+        if token != auth_token:
+            raise HTTPException(status_code=401, detail="invalid token")
+        return UserClaims(sub="test-user", user_name="test-user", authorities=["ROLE_USER"])
+
+    auth_dependency._authenticator.callback = _fake_verify
+    try:
+        yield
+    finally:
+        auth_dependency._authenticator.callback = original_callback
+{%- endif %}
+
+
+@pytest.fixture
+def client():
+    if HAS_DATABASE and DB_KIND == "maria":
+        os.environ.setdefault("DB_HOST", "localhost")
+        os.environ.setdefault("DB_PORT", "3306")
+        os.environ.setdefault("DB_USER", "service_user")
+        os.environ.setdefault("DB_PASSWORD", "change_me")
+        os.environ.setdefault("DB_NAME", "service_db")
+    elif HAS_DATABASE and DB_KIND == "postgres":
+        os.environ.setdefault("DB_HOST", "localhost")
+        os.environ.setdefault("DB_PORT", "5432")
+        os.environ.setdefault("DB_USER", "service_user")
+        os.environ.setdefault("DB_PASSWORD", "change_me")
+        os.environ.setdefault("DB_NAME", "service_db")
+
+    app = build_app()
+    return TestClient(app)

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/tests/test_items.py

@@ -2,6 +2,13 @@
 
 from fastapi import HTTPException
 
+{%- if cookiecutter.has_auth %}
+
+
+def _auth_headers(token: str) -> dict[str, str]:
+    return {"Authorization": f"Bearer {token}"}
+{%- endif %}
+
 
 def test_health(client):
     response = client.get("/health")
@@ -10,9 +17,13 @@ def test_health(client):
 
 
 {%- if cookiecutter.has_database or not cookiecutter.has_delegates %}
-def test_create_item_returns_data(client):
+def test_create_item_returns_data(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     create_response = client.post(
-        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "Test Item"}
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "Test Item"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert create_response.status_code == 200
     item = create_response.json()
@@ -21,11 +32,28 @@ def test_create_item_returns_data(client):
     assert "created_at" in item
 
 
-def test_list_items(client):
-    client.post("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "Item 1"})
-    client.post("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "Item 2"})
+def test_list_items(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
+    client.post(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "Item 1"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
+    client.post(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "Item 2"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
 
-    response = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}")
+    response = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert response.status_code == 200
     items = response.json()["{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}"]
     names = {item["name"] for item in items}
@@ -33,46 +61,73 @@ def test_list_items(client):
     assert "Item 2" in names
 
 
-def test_get_item_missing_returns_404(client):
-    response = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing-id")
+def test_get_item_missing_returns_404(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
+    response = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing-id",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert response.status_code == 404
 
 
-def test_get_item_returns_created_item(client):
+def test_get_item_returns_created_item(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     created = client.post(
-        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "Lookup"}
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "Lookup"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     ).json()
     response = client.get(
-        f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{created['id']}"
+        f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{created['id']}",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert response.status_code == 200
     assert response.json()["id"] == created["id"]
     assert response.json()["name"] == "Lookup"
 
 
-def test_update_and_delete_item(client):
+def test_update_and_delete_item(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     created = client.post(
-        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "Original"}
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "Original"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     ).json()
     item_id = created["id"]
 
     updated = client.put(
         f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{item_id}",
         json={"name": "Updated"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert updated.status_code == 200
     assert updated.json()["updated"] is True
 
-    deleted = client.delete(f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{item_id}")
+    deleted = client.delete(
+        f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{item_id}",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert deleted.status_code == 200
     assert deleted.json()["deleted"] is True
 
 
-def test_upsert_item(client):
+def test_upsert_item(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     item_id = "custom-upsert-id"
     first = client.put(
         f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{item_id}/upsert",
         json={"name": "Created"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert first.status_code == 200
     assert first.json()["rows_affected"] == 1
@@ -80,29 +135,38 @@ def test_upsert_item(client):
     second = client.put(
         f"/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/{item_id}/upsert",
         json={"name": "Updated"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert second.status_code == 200
     assert second.json()["rows_affected"] == 1
 
 
-def test_update_missing_returns_404(client):
+def test_update_missing_returns_404(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     response = client.put(
         "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing-id",
         json={"name": "Nope"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert response.status_code == 404
 
 
-def test_delete_missing_returns_404(client):
+def test_delete_missing_returns_404(client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     response = client.delete(
-        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing-id"
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing-id",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert response.status_code == 404
 {%- endif %}
 
 
 {%- if cookiecutter.has_delegates and not cookiecutter.has_database %}
-def test_delegate_create_and_list(monkeypatch, client):
+def test_delegate_create_and_list(monkeypatch, client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     calls: list[tuple[str, str]] = []
 
     async def fake_delegate_request(method: str, path: str, payload=None):
@@ -114,28 +178,42 @@ def test_delegate_create_and_list(monkeypatch, client):
     monkeypatch.setattr("{{cookiecutter.__service_name_snake}}.views.unversioned.items_view._delegate_request", fake_delegate_request)
 
     created = client.post(
-        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}", json={"name": "X"}
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        json={"name": "X"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert created.status_code == 200
     assert created.json()["id"] == "d1"
 
-    listed = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}")
+    listed = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert listed.status_code == 200
     assert len(listed.json()["{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}"]) == 1
     assert calls[0][0] == "POST"
     assert calls[1][0] == "GET"
 
 
-def test_delegate_error_mapping(monkeypatch, client):
+def test_delegate_error_mapping(monkeypatch, client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     async def fake_delegate_request(_method: str, _path: str, payload=None):
         raise HTTPException(status_code=404, detail="not found")
 
     monkeypatch.setattr("{{cookiecutter.__service_name_snake}}.views.unversioned.items_view._delegate_request", fake_delegate_request)
-    response = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing")
+    response = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/missing",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert response.status_code == 404
 
 
-def test_delegate_get_update_upsert_delete(monkeypatch, client):
+def test_delegate_get_update_upsert_delete(monkeypatch, client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     async def fake_delegate_request(method: str, path: str, payload=None):
         if method == "GET":
             return {"id": "d2", "name": "From delegate", "created_at": "2026-01-01T00:00:00Z"}
@@ -149,13 +227,21 @@ def test_delegate_get_update_upsert_delete(monkeypatch, client):
 
     monkeypatch.setattr("{{cookiecutter.__service_name_snake}}.views.unversioned.items_view._delegate_request", fake_delegate_request)
 
-    fetched = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2")
+    fetched = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert fetched.status_code == 200
     assert fetched.json()["id"] == "d2"
 
     updated = client.put(
         "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2",
         json={"name": "Updated"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert updated.status_code == 200
     assert updated.json()["updated"] is True
@@ -163,20 +249,33 @@ def test_delegate_get_update_upsert_delete(monkeypatch, client):
     upserted = client.put(
         "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2/upsert",
         json={"name": "Upserted"},
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
     )
     assert upserted.status_code == 200
     assert upserted.json()["rows_affected"] == 1
 
-    deleted = client.delete("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2")
+    deleted = client.delete(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}/d2",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert deleted.status_code == 200
     assert deleted.json()["deleted"] is True
 
 
-def test_delegate_list_invalid_payload_returns_502(monkeypatch, client):
+def test_delegate_list_invalid_payload_returns_502(monkeypatch, client{%- if cookiecutter.has_auth %}, auth_token{% endif %}):
     async def fake_delegate_request(_method: str, _path: str, payload=None):
         return {"{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}": "bad"}
 
     monkeypatch.setattr("{{cookiecutter.__service_name_snake}}.views.unversioned.items_view._delegate_request", fake_delegate_request)
-    response = client.get("/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}")
+    response = client.get(
+        "/api/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}",
+        {%- if cookiecutter.has_auth %}
+        headers=_auth_headers(auth_token),
+        {%- endif %}
+    )
     assert response.status_code == 502
 {%- endif %}

{csrd_utils-0.3.60 → csrd_utils-0.3.62}/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/views/unversioned/items_view.py

@@ -11,6 +11,9 @@ from pydantic import BaseModel
 {%- if cookiecutter.has_database %}
 from ...dependencies import RepositoryDep
 {%- endif %}
+{%- if cookiecutter.has_auth %}
+from ...dependencies import VerifiedTokenDep
+{%- endif %}
 
 ITEMS_ROUTE = "/{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}"
 
@@ -89,6 +92,9 @@ def _dummy_item(record_id: str, name: str, created_at: str) -> dict[str, str]:
 @router.post(ITEMS_ROUTE, response_model={{ cookiecutter.model_name }}Response)
 async def create_{{ cookiecutter.model_name | lower }}(
     payload: Create{{ cookiecutter.model_name }}Request,
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}
@@ -113,6 +119,9 @@ async def create_{{ cookiecutter.model_name | lower }}(
 
 @router.get(ITEMS_ROUTE, response_model={{ cookiecutter.model_name }}ListResponse)
 async def list_{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}(
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}
@@ -134,6 +143,9 @@ async def list_{{ cookiecutter.model_name_plural | lower | replace(' ', '_') }}(
 @router.get(f"{ITEMS_ROUTE}" + "/{entity_id}", response_model={{ cookiecutter.model_name }}Response)
 async def get_{{ cookiecutter.model_name | lower }}(
     entity_id: str,
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}
@@ -161,6 +173,9 @@ async def get_{{ cookiecutter.model_name | lower }}(
 async def update_{{ cookiecutter.model_name | lower }}(
     entity_id: str,
     payload: Update{{ cookiecutter.model_name }}Request,
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}
@@ -197,6 +212,9 @@ async def update_{{ cookiecutter.model_name | lower }}(
 async def upsert_{{ cookiecutter.model_name | lower }}(
     entity_id: str,
     payload: Update{{ cookiecutter.model_name }}Request,
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}
@@ -229,6 +247,9 @@ async def upsert_{{ cookiecutter.model_name | lower }}(
 @router.delete(f"{ITEMS_ROUTE}" + "/{entity_id}", response_model={{ cookiecutter.model_name }}DeleteResponse)
 async def delete_{{ cookiecutter.model_name | lower }}(
     entity_id: str,
+    {%- if cookiecutter.has_auth %}
+    _verified: VerifiedTokenDep,
+    {%- endif %}
     {%- if cookiecutter.has_database %}
     repo: RepositoryDep,
     {%- endif %}

csrd_utils-0.3.60/src/csrd_utils/templates/cookiecutter-service/{{cookiecutter.__service_name_snake}}/tests/conftest.py

@@ -1,33 +0,0 @@
-"""Shared test fixtures for {{ cookiecutter.service_name }}."""
-
-import os
-
-import pytest
-from fastapi.testclient import TestClient
-
-from {{cookiecutter.__service_name_snake}} import build_app
-
-HAS_DATABASE = {{"True" if cookiecutter.has_database else "False"}}
-DB_KIND = "{{ cookiecutter.database }}"
-
-
-# [INSERT: fixtures]
-
-
-@pytest.fixture
-def client():
-    if HAS_DATABASE and DB_KIND == "maria":
-        os.environ.setdefault("DB_HOST", "localhost")
-        os.environ.setdefault("DB_PORT", "3306")
-        os.environ.setdefault("DB_USER", "service_user")
-        os.environ.setdefault("DB_PASSWORD", "change_me")
-        os.environ.setdefault("DB_NAME", "service_db")
-    elif HAS_DATABASE and DB_KIND == "postgres":
-        os.environ.setdefault("DB_HOST", "localhost")
-        os.environ.setdefault("DB_PORT", "5432")
-        os.environ.setdefault("DB_USER", "service_user")
-        os.environ.setdefault("DB_PASSWORD", "change_me")
-        os.environ.setdefault("DB_NAME", "service_db")
-
-    app = build_app()
-    return TestClient(app)