easyapi-django 0.31__tar.gz → 0.32__tar.gz

{easyapi_django-0.31/easyapi_django.egg-info → easyapi_django-0.32}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: easyapi_django
-Version: 0.31
+Version: 0.32
 Summary: A simple rest api generator for django based on models
 Author-email: Stamatios Stamou Jr <bushier.outsets.0c@icloud.com>
 License: MIT
@@ -278,12 +278,15 @@ class TaskResource(BaseResource):
     cache_scope_fields = ['space_id', ('account', 'plan_id')]
 ```
 
-Strict by default: if the request has authenticated context but a
-configured field is **missing** from the session payload, the request
-fails with `HTTPException(500)` instead of silently merging caches
-across scopes. Anonymous requests skip the fold. `None`, `0` and `''`
-count as present (a real value). Use `before_cache` for the rare case
-that needs context outside `self.user` / `self.account`:
+Lenient by default: if the request has authenticated context but a
+configured field is **missing** from the session payload, the framework
+logs a `WARNING` (logger `easyapi.base`) and **skips the scope fold** —
+the request still serves, the cache may be shared across scopes until
+the operator updates the session payload. Anonymous requests also skip
+the fold. `None`, `0` and `''` count as present (a real value).
+
+Use `before_cache` for the rare case that needs context outside
+`self.user` / `self.account`:
 
 ```python
 async def before_cache(self, request):

{easyapi_django-0.31 → easyapi_django-0.32}/README.md

@@ -251,12 +251,15 @@ class TaskResource(BaseResource):
     cache_scope_fields = ['space_id', ('account', 'plan_id')]
 ```
 
-Strict by default: if the request has authenticated context but a
-configured field is **missing** from the session payload, the request
-fails with `HTTPException(500)` instead of silently merging caches
-across scopes. Anonymous requests skip the fold. `None`, `0` and `''`
-count as present (a real value). Use `before_cache` for the rare case
-that needs context outside `self.user` / `self.account`:
+Lenient by default: if the request has authenticated context but a
+configured field is **missing** from the session payload, the framework
+logs a `WARNING` (logger `easyapi.base`) and **skips the scope fold** —
+the request still serves, the cache may be shared across scopes until
+the operator updates the session payload. Anonymous requests also skip
+the fold. `None`, `0` and `''` count as present (a real value).
+
+Use `before_cache` for the rare case that needs context outside
+`self.user` / `self.account`:
 
 ```python
 async def before_cache(self, request):

{easyapi_django-0.31 → easyapi_django-0.32}/easyapi/base.py

@@ -393,18 +393,21 @@ class BaseResource(View):
         for source, field in self.cache_scope_fields:
             container = sources.get(source)
             if container is None:
-                raise HTTPException(
-                    500,
-                    f"Cache scope source {source!r} missing from session "
-                    f"for {self.__class__.__name__}",
+                logger.warning(
+                    "cache scope source %r missing from session for %s; "
+                    "skipping scope fold (cache may be shared across "
+                    "scopes — populate the session payload to fix)",
+                    source, self.__class__.__name__,
                 )
+                return None
             if field not in container:
-                raise HTTPException(
-                    500,
-                    f"Cache scope field {field!r} missing from "
-                    f"{source} session payload for "
-                    f"{self.__class__.__name__}",
+                logger.warning(
+                    "cache scope field %r missing from %s session payload "
+                    "for %s; skipping scope fold (cache may be shared "
+                    "across scopes — populate the session payload to fix)",
+                    field, source, self.__class__.__name__,
                 )
+                return None
             parts.append(f'{source}.{field}={container[field]!r}')
 
         digest = hashlib.md5(':'.join(parts).encode('utf-8')).hexdigest()[:16]
@@ -514,6 +517,33 @@ class BaseResource(View):
             )
 
     async def dispatch(self, request, *args, **kwargs) -> None:
+        """Outer wrapper — guarantees unhandled exceptions never reach
+        the wire silently. ``HTTPException`` re-raises (rendered by
+        :class:`ExceptionMiddleware`); anything else gets logged with
+        full traceback and returns a sanitized JSON 500.
+
+        Without this net, exceptions from ``_authenticate``, ``aset_tenant``,
+        ``_serve_cache``, ``pre_process``, ``_parse_body``, ``build_filters``
+        or ``serialize`` bubbled to Django's default async handler with no
+        easyapi-side log — Sentry stayed empty and operators were blind.
+        """
+        try:
+            return await self._dispatch(request, *args, **kwargs)
+        except HTTPException:
+            raise
+        except Exception:
+            logger.exception(
+                'Unhandled error in dispatch %s %s',
+                request.method, request.path,
+            )
+            if getattr(django_settings, 'DEBUG', False):
+                raise
+            return JsonResponse(
+                {'success': False, 'status': 500, 'detail': 'Internal error'},
+                status=500,
+            )
+
+    async def _dispatch(self, request, *args, **kwargs) -> None:
         self.identifier = get_client_ip(request)
 
         await self._enforce_rate_limit(request)

{easyapi_django-0.31 → easyapi_django-0.32/easyapi_django.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: easyapi_django
-Version: 0.31
+Version: 0.32
 Summary: A simple rest api generator for django based on models
 Author-email: Stamatios Stamou Jr <bushier.outsets.0c@icloud.com>
 License: MIT
@@ -278,12 +278,15 @@ class TaskResource(BaseResource):
     cache_scope_fields = ['space_id', ('account', 'plan_id')]
 ```
 
-Strict by default: if the request has authenticated context but a
-configured field is **missing** from the session payload, the request
-fails with `HTTPException(500)` instead of silently merging caches
-across scopes. Anonymous requests skip the fold. `None`, `0` and `''`
-count as present (a real value). Use `before_cache` for the rare case
-that needs context outside `self.user` / `self.account`:
+Lenient by default: if the request has authenticated context but a
+configured field is **missing** from the session payload, the framework
+logs a `WARNING` (logger `easyapi.base`) and **skips the scope fold** —
+the request still serves, the cache may be shared across scopes until
+the operator updates the session payload. Anonymous requests also skip
+the fold. `None`, `0` and `''` count as present (a real value).
+
+Use `before_cache` for the rare case that needs context outside
+`self.user` / `self.account`:
 
 ```python
 async def before_cache(self, request):

{easyapi_django-0.31 → easyapi_django-0.32}/pyproject.toml

@@ -11,7 +11,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "easyapi_django"
-version = "0.31"
+version = "0.32"
 authors = [
   { name="Stamatios Stamou Jr", email="bushier.outsets.0c@icloud.com" },
 ]

{easyapi_django-0.31 → easyapi_django-0.32}/tests/test_cache_scope.py

@@ -154,28 +154,44 @@ def test_multiple_dimensions_combine():
     assert a._build_cache_key(_request(), None) != b._build_cache_key(_request(), None)
 
 
-# ── strict semantics ───────────────────────────────────────────────
+# ── lenient semantics (warn + skip fold, never 500) ────────────────
 
 
-def test_authenticated_user_missing_field_raises_500():
+def test_missing_field_logs_warning_and_skips_fold(caplog):
+    """Missing scope field on authenticated request must not block the
+    request — silent leak between scopes is preferable to taking the
+    site down. Operators see a warning to fix the session payload."""
+    import logging as _logging
+
     class _R(_Resource):
         cache_scope_fields = ['space_id']
     res = _make(_R, user={'id': 1})  # space_id NOT in user
-    with pytest.raises(HTTPException) as exc:
-        res._build_cache_key(_request(), None)
-    assert exc.value.args[0] == 500
-    assert 'space_id' in exc.value.args[1]
 
+    with caplog.at_level(_logging.WARNING, logger='easyapi.base'):
+        key = res._build_cache_key(_request(), None)
+
+    assert 'scope=' not in key  # fold skipped
+    records = [r for r in caplog.records if r.name == 'easyapi.base']
+    assert records, 'expected a warning when scope field is missing'
+    msg = records[0].getMessage()
+    assert 'space_id' in msg
+    assert '_R' in msg or 'class' in msg.lower()
+
+
+def test_missing_account_source_logs_warning_and_skips_fold(caplog):
+    import logging as _logging
 
-def test_authenticated_user_missing_account_source_raises_500():
-    """User present, account expected but absent — refuses to cache."""
     class _R(_Resource):
         cache_scope_fields = [('account', 'plan_id')]
     res = _make(_R, user={'id': 1}, account=None)
-    with pytest.raises(HTTPException) as exc:
-        res._build_cache_key(_request(), None)
-    assert exc.value.args[0] == 500
-    assert 'account' in exc.value.args[1]
+
+    with caplog.at_level(_logging.WARNING, logger='easyapi.base'):
+        key = res._build_cache_key(_request(), None)
+
+    assert 'scope=' not in key
+    records = [r for r in caplog.records if r.name == 'easyapi.base']
+    assert records
+    assert 'account' in records[0].getMessage()
 
 
 # ── coexistence with session_cache ─────────────────────────────────