fastapi-fullauth 0.1.0__tar.gz → 0.3.0__tar.gz

fastapi_fullauth-0.3.0/CHANGELOG.md

@@ -0,0 +1,87 @@
+# Changelog
+
+## 0.3.0
+
+### Breaking changes
+
+- **`create_refresh_token` returns `RefreshTokenMeta`** — previously returned a plain `str`. Now returns a `NamedTuple` with `.token`, `.expires_at`, `.family_id`. Callers that used the raw string must access `.token`.
+- **`create_token_pair` returns `tuple[str, RefreshTokenMeta]`** — second element is now `RefreshTokenMeta` instead of `str`.
+- **`revoke_all_user_refresh_tokens` is now required** on custom adapters — new abstract method on `AbstractUserAdapter`.
+
+### Added
+
+- `current_superuser` dependency and `SuperUser` annotated type
+- `CurrentUser`, `VerifiedUser`, `SuperUser` annotated types in `dependencies.current_user` for cleaner route signatures
+- `RefreshTokenMeta` named tuple — avoids decoding freshly created tokens just to read `expires_at` and `family_id`
+- `FullAuth.get_custom_claims(user)` — moved custom claims logic from router into the class, with validation against reserved JWT keys (`sub`, `exp`, `type`, etc.)
+- `revoke_all_user_refresh_tokens(user_id)` on all adapters — bulk session revocation
+- Session revocation on password reset, password change, and account deletion
+- `configure_hasher()` — wires `PASSWORD_HASH_ALGORITHM` config to the actual hasher; supports `argon2id` and `bcrypt`
+- Automatic password rehash on login when hash algorithm or params have changed
+- Register now checks uniqueness on `login_field` (not just email) when `login_field != "email"`
+- `InMemoryBlacklist` now respects `ttl_seconds` — expired entries are evicted on lookup
+- `RateLimiter` evicts keys with empty timestamp lists to prevent unbounded dict growth
+- `description` parameter on all route decorators for Swagger docs
+
+### Fixed
+
+- `current_active_verified_user` was missing `payload.type != "access"` check — refresh tokens could pass through
+- Purpose tokens (password reset, email verify) could be used as regular access tokens — `current_user` now rejects tokens with `extra.purpose`
+- Duplicate token decode + user lookup across dependencies, router endpoints, and admin routes — consolidated into reusable `current_user` dependency chain
+- Duplicate `roles` + `extra_claims` fetch in refresh route — pulled above the if/else branch
+- Login flow fetched the user from DB twice (once in router, once in `login()`) — now accepts pre-fetched user
+- Unused `request: Request` parameters in dependencies and routes
+- Removed duplicate docstrings on routes (kept `description=` on decorators)
+- `require_permission` was a full copy of `require_role` — now delegates to it
+
+### Internal
+
+- Route order follows auth lifecycle: register → login → refresh → logout → user → email/password → admin
+- `require_role` / `require_permission` use `Depends(current_user)` instead of duplicating token logic
+- Removed `_get_custom_claims` module-level function from router
+
+## 0.2.0
+
+### Breaking changes
+
+- **JSON login** — `POST /login` now accepts `{"email": "...", "password": "..."}` instead of form data. Swagger auth uses bearer token input instead of username/password form.
+- **No default User model** — SQLModel and SQLAlchemy adapters no longer ship a concrete `User`/`UserModel` table class. Users must define their own model from `UserBase`. This eliminates relationship conflicts when subclassing.
+- **`user_model` is required** — `SQLModelAdapter(session_maker, user_model=MyUser)` — no default.
+- **Removed `min_length=8`** from `CreateUserSchema` — password length is now fully controlled by `PasswordValidator` and `PASSWORD_MIN_LENGTH` config.
+- **`SQLAlchemyAdapter` renamed `UserModel` to `UserBase`** — import `UserBase` instead.
+
+### Added
+
+- `POST /auth/change-password` — verifies current password, validates new
+- `PATCH /auth/me` — update profile with protected field filtering
+- `DELETE /auth/me` — self-deletion
+- `expires_in` in login/refresh responses
+- Per-IP auth rate limiting on login, register, password-reset (`AUTH_RATE_LIMIT_*` config)
+- `LOGIN_FIELD` config — login by email, username, phone, or any model field
+- `get_user_by_field()` on all adapters for generic field lookups
+- Structured example apps (`examples/memory_app/`, `examples/sqlmodel_app/`)
+
+### Fixed
+
+- `InMemoryAdapter.update_user` returning base `UserSchema` instead of custom schema
+- Stale `User.id` / `UserModel` references in adapter queries after model removal
+- Parameter ordering in adapter constructors (required params before optional)
+
+## 0.1.0
+
+Initial release.
+
+- JWT access/refresh tokens with rotation and blacklisting
+- Argon2id password hashing
+- Auth flows: register, login, logout, password reset, email verification
+- Brute-force lockout, per-IP rate limiting, CSRF, security headers
+- Bearer and cookie backends
+- SQLAlchemy, SQLModel, and InMemory adapters
+- Redis blacklist backend
+- Refresh token persistence with family tracking and reuse detection
+- Flat config (`secret_key=...`) or full `FullAuthConfig` object
+- Auto-derive schemas from ORM model fields
+- Auto-wire middleware from config flags
+- Route enum, event hooks, email hooks
+- `current_user`, `current_active_verified_user`, `require_role` dependencies
+- 97 tests

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-fullauth
-Version: 0.1.0
+Version: 0.3.0
 Summary: Production-grade, async-native authentication and authorization library for FastAPI
 Project-URL: Homepage, https://github.com/mdfarhankc/fastapi-fullauth
 Project-URL: Documentation, https://github.com/mdfarhankc/fastapi-fullauth
@@ -25,29 +25,12 @@ Requires-Dist: fastapi>=0.110
 Requires-Dist: pydantic-settings>=2.0
 Requires-Dist: pydantic[email]>=2.0
 Requires-Dist: pyjwt>=2.8
-Requires-Dist: python-multipart>=0.0.22
 Requires-Dist: uuid-utils>=0.14.1
 Provides-Extra: all
 Requires-Dist: alembic>=1.13; extra == 'all'
-Requires-Dist: beanie>=1.25; extra == 'all'
-Requires-Dist: httpx-oauth>=0.13; extra == 'all'
-Requires-Dist: itsdangerous>=2.1; extra == 'all'
-Requires-Dist: pyotp>=2.9; extra == 'all'
-Requires-Dist: qrcode>=7.4; extra == 'all'
 Requires-Dist: redis>=5.0; extra == 'all'
 Requires-Dist: sqlalchemy[asyncio]>=2.0; extra == 'all'
 Requires-Dist: sqlmodel>=0.0.16; extra == 'all'
-Requires-Dist: tortoise-orm>=0.21; extra == 'all'
-Requires-Dist: webauthn>=2.0; extra == 'all'
-Provides-Extra: audit
-Provides-Extra: beanie
-Requires-Dist: beanie>=1.25; extra == 'beanie'
-Provides-Extra: magic-link
-Requires-Dist: itsdangerous>=2.1; extra == 'magic-link'
-Provides-Extra: oauth
-Requires-Dist: httpx-oauth>=0.13; extra == 'oauth'
-Provides-Extra: passkeys
-Requires-Dist: webauthn>=2.0; extra == 'passkeys'
 Provides-Extra: redis
 Requires-Dist: redis>=5.0; extra == 'redis'
 Provides-Extra: sqlalchemy
@@ -56,12 +39,6 @@ Requires-Dist: sqlalchemy[asyncio]>=2.0; extra == 'sqlalchemy'
 Provides-Extra: sqlmodel
 Requires-Dist: alembic>=1.13; extra == 'sqlmodel'
 Requires-Dist: sqlmodel>=0.0.16; extra == 'sqlmodel'
-Provides-Extra: tenants
-Provides-Extra: tortoise
-Requires-Dist: tortoise-orm>=0.21; extra == 'tortoise'
-Provides-Extra: totp
-Requires-Dist: pyotp>=2.9; extra == 'totp'
-Requires-Dist: qrcode>=7.4; extra == 'totp'
 Description-Content-Type: text/markdown
 
 # fastapi-fullauth
@@ -114,13 +91,12 @@ from sqlmodel import Field, Relationship
 
 class MyUser(UserBase, table=True):
     __tablename__ = "fullauth_users"
-    __table_args__ = {"extend_existing": True}
 
     display_name: str = Field(default="", max_length=100)
     phone: str = Field(default="", max_length=20)
 
-    roles: list[Role] = Relationship(back_populates="users", link_model=UserRoleLink)
-    refresh_tokens: list[RefreshTokenRecord] = Relationship(back_populates="user")
+    roles: list[Role] = Relationship(link_model=UserRoleLink)
+    refresh_tokens: list[RefreshTokenRecord] = Relationship()
 
 fullauth = FullAuth(
     secret_key="...",
@@ -132,16 +108,31 @@ No need to create separate schema classes or subclass the adapter. Registration
 
 ## Protected routes
 
+Use the `Annotated` types for clean route signatures:
+
 ```python
-from fastapi import Depends
-from fastapi_fullauth.dependencies import current_user, require_role
+from fastapi_fullauth.dependencies import CurrentUser, VerifiedUser, SuperUser, require_role
 
 @app.get("/profile")
-async def profile(user=Depends(current_user)):
+async def profile(user: CurrentUser):
     return user
 
+@app.get("/dashboard")
+async def dashboard(user: VerifiedUser):
+    # only email-verified users
+    return {"email": user.email}
+
 @app.delete("/admin/users/{id}")
-async def delete_user(user=Depends(require_role("admin"))):
+async def delete_user(user: SuperUser):
+    # only superusers
+    ...
+
+# or use require_role for custom roles
+from fastapi import Depends
+from fastapi_fullauth.dependencies import require_role
+
+@app.get("/editor")
+async def editor_panel(user=Depends(require_role("editor"))):
     ...
 ```
 
@@ -191,15 +182,44 @@ fullauth.hooks.on("after_register", welcome)
 
 Events: `after_register`, `after_login`, `after_logout`, `after_password_change`, `after_password_reset`, `after_email_verify`, `send_verification_email`, `send_password_reset_email`
 
-## Route control
+## Custom token claims
+
+Embed app-specific data into JWTs (available in `payload.extra`):
 
 ```python
-from fastapi_fullauth import Route
+async def add_claims(user):
+    return {"tenant_id": "acme", "plan": "pro"}
 
 fullauth = FullAuth(
     secret_key="...",
     adapter=adapter,
-    enabled_routes=[Route.LOGIN, Route.LOGOUT, Route.REFRESH],
+    on_create_token_claims=add_claims,
+)
+```
+
+Reserved keys (`sub`, `exp`, `iat`, `jti`, `type`, `roles`, `extra`, `family_id`) are rejected to prevent accidental overwrites.
+
+## Password hashing
+
+Argon2id by default. Switch to bcrypt via config:
+
+```python
+fullauth = FullAuth(
+    secret_key="...",
+    adapter=adapter,
+    password_hash_algorithm="bcrypt",  # requires: pip install bcrypt
+)
+```
+
+When switching algorithms, existing users are transparently rehashed on their next login.
+
+## Route control
+
+```python
+fullauth = FullAuth(
+    secret_key="...",
+    adapter=adapter,
+    enabled_routes=["login", "logout", "refresh"],
 )
 ```
 
@@ -211,6 +231,20 @@ SecurityHeaders, CSRF, and rate limiting are auto-wired from config flags. Pass
 
 Login, register, and password-reset have per-IP rate limits enabled by default (5/3/3 per minute). Configure via `AUTH_RATE_LIMIT_*` settings.
 
+## Login field
+
+By default, login uses `email`. Change it to any field on your user model:
+
+```python
+# username login: POST /login {"username": "john", "password": "..."}
+fullauth = FullAuth(secret_key="...", adapter=adapter, login_field="username")
+
+# phone login: POST /login {"phone": "+1234567890", "password": "..."}
+fullauth = FullAuth(secret_key="...", adapter=adapter, login_field="phone")
+```
+
+The Swagger UI and request body update automatically. The adapter looks up users by that field.
+
 ## Development
 
 ```bash
@@ -218,6 +252,10 @@ git clone https://github.com/mdfarhankc/fastapi-fullauth.git
 cd fastapi-fullauth
 uv sync --dev --extra sqlalchemy --extra sqlmodel
 uv run pytest tests/ -v
+
+# run examples
+uv run uvicorn examples.memory_app.main:app --reload
+uv run uvicorn examples.sqlmodel_app.main:app --reload
 ```
 
 ## License

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/README.md

@@ -48,13 +48,12 @@ from sqlmodel import Field, Relationship
 
 class MyUser(UserBase, table=True):
     __tablename__ = "fullauth_users"
-    __table_args__ = {"extend_existing": True}
 
     display_name: str = Field(default="", max_length=100)
     phone: str = Field(default="", max_length=20)
 
-    roles: list[Role] = Relationship(back_populates="users", link_model=UserRoleLink)
-    refresh_tokens: list[RefreshTokenRecord] = Relationship(back_populates="user")
+    roles: list[Role] = Relationship(link_model=UserRoleLink)
+    refresh_tokens: list[RefreshTokenRecord] = Relationship()
 
 fullauth = FullAuth(
     secret_key="...",
@@ -66,16 +65,31 @@ No need to create separate schema classes or subclass the adapter. Registration
 
 ## Protected routes
 
+Use the `Annotated` types for clean route signatures:
+
 ```python
-from fastapi import Depends
-from fastapi_fullauth.dependencies import current_user, require_role
+from fastapi_fullauth.dependencies import CurrentUser, VerifiedUser, SuperUser, require_role
 
 @app.get("/profile")
-async def profile(user=Depends(current_user)):
+async def profile(user: CurrentUser):
     return user
 
+@app.get("/dashboard")
+async def dashboard(user: VerifiedUser):
+    # only email-verified users
+    return {"email": user.email}
+
 @app.delete("/admin/users/{id}")
-async def delete_user(user=Depends(require_role("admin"))):
+async def delete_user(user: SuperUser):
+    # only superusers
+    ...
+
+# or use require_role for custom roles
+from fastapi import Depends
+from fastapi_fullauth.dependencies import require_role
+
+@app.get("/editor")
+async def editor_panel(user=Depends(require_role("editor"))):
     ...
 ```
 
@@ -125,15 +139,44 @@ fullauth.hooks.on("after_register", welcome)
 
 Events: `after_register`, `after_login`, `after_logout`, `after_password_change`, `after_password_reset`, `after_email_verify`, `send_verification_email`, `send_password_reset_email`
 
-## Route control
+## Custom token claims
+
+Embed app-specific data into JWTs (available in `payload.extra`):
 
 ```python
-from fastapi_fullauth import Route
+async def add_claims(user):
+    return {"tenant_id": "acme", "plan": "pro"}
 
 fullauth = FullAuth(
     secret_key="...",
     adapter=adapter,
-    enabled_routes=[Route.LOGIN, Route.LOGOUT, Route.REFRESH],
+    on_create_token_claims=add_claims,
+)
+```
+
+Reserved keys (`sub`, `exp`, `iat`, `jti`, `type`, `roles`, `extra`, `family_id`) are rejected to prevent accidental overwrites.
+
+## Password hashing
+
+Argon2id by default. Switch to bcrypt via config:
+
+```python
+fullauth = FullAuth(
+    secret_key="...",
+    adapter=adapter,
+    password_hash_algorithm="bcrypt",  # requires: pip install bcrypt
+)
+```
+
+When switching algorithms, existing users are transparently rehashed on their next login.
+
+## Route control
+
+```python
+fullauth = FullAuth(
+    secret_key="...",
+    adapter=adapter,
+    enabled_routes=["login", "logout", "refresh"],
 )
 ```
 
@@ -145,6 +188,20 @@ SecurityHeaders, CSRF, and rate limiting are auto-wired from config flags. Pass
 
 Login, register, and password-reset have per-IP rate limits enabled by default (5/3/3 per minute). Configure via `AUTH_RATE_LIMIT_*` settings.
 
+## Login field
+
+By default, login uses `email`. Change it to any field on your user model:
+
+```python
+# username login: POST /login {"username": "john", "password": "..."}
+fullauth = FullAuth(secret_key="...", adapter=adapter, login_field="username")
+
+# phone login: POST /login {"phone": "+1234567890", "password": "..."}
+fullauth = FullAuth(secret_key="...", adapter=adapter, login_field="phone")
+```
+
+The Swagger UI and request body update automatically. The adapter looks up users by that field.
+
 ## Development
 
 ```bash
@@ -152,6 +209,10 @@ git clone https://github.com/mdfarhankc/fastapi-fullauth.git
 cd fastapi-fullauth
 uv sync --dev --extra sqlalchemy --extra sqlmodel
 uv run pytest tests/ -v
+
+# run examples
+uv run uvicorn examples.memory_app.main:app --reload
+uv run uvicorn examples.sqlmodel_app.main:app --reload
 ```
 
 ## License

fastapi_fullauth-0.3.0/examples/memory_app/auth.py

@@ -0,0 +1,8 @@
+from fastapi_fullauth import FullAuth
+from fastapi_fullauth.adapters.memory import InMemoryAdapter
+
+fullauth = FullAuth(
+    secret_key="change-me-use-a-32-byte-key-here",
+    adapter=InMemoryAdapter(),
+    include_user_in_login=True,
+)

fastapi_fullauth-0.3.0/examples/memory_app/main.py

@@ -0,0 +1,13 @@
+"""
+Run: uv run uvicorn examples.memory_app.main:app --reload
+No database needed — everything in memory.
+"""
+
+from fastapi import FastAPI
+
+from .auth import fullauth
+from .routes import router
+
+app = FastAPI(title="FullAuth Memory Demo")
+fullauth.init_app(app)
+app.include_router(router)

fastapi_fullauth-0.3.0/examples/memory_app/routes.py

@@ -0,0 +1,15 @@
+from fastapi import APIRouter, Depends
+
+from fastapi_fullauth.dependencies import current_user, require_role
+
+router = APIRouter(prefix="/api/v1")
+
+
+@router.get("/dashboard")
+async def dashboard(user=Depends(current_user)):
+    return {"msg": "welcome", "user": user}
+
+
+@router.get("/admin")
+async def admin_only(user=Depends(require_role("admin"))):
+    return {"msg": "admin area", "user": user}

fastapi_fullauth-0.3.0/examples/sqlmodel_app/auth.py

@@ -0,0 +1,28 @@
+from fastapi_fullauth import FullAuth
+from fastapi_fullauth.adapters.sqlmodel import SQLModelAdapter
+from fastapi_fullauth.types import UserSchema
+
+from .config import session_maker
+from .models import User
+
+
+async def send_verification_email(email: str, token: str):
+    print(f"\n[VERIFY] To: {email}\n[VERIFY] Token: {token}\n")
+
+
+async def send_password_reset_email(email: str, token: str):
+    print(f"\n[RESET] To: {email}\n[RESET] Token: {token}\n")
+
+
+async def add_custom_claims(user: UserSchema) -> dict:
+    return {"display_name": getattr(user, "display_name", "")}
+
+
+fullauth = FullAuth(
+    secret_key="change-me-use-a-32-byte-key-here",
+    adapter=SQLModelAdapter(session_maker=session_maker, user_model=User),
+    on_create_token_claims=add_custom_claims,
+    include_user_in_login=True,
+)
+fullauth.hooks.on("send_verification_email", send_verification_email)
+fullauth.hooks.on("send_password_reset_email", send_password_reset_email)

fastapi_fullauth-0.3.0/examples/sqlmodel_app/config.py

@@ -0,0 +1,5 @@
+from sqlalchemy.ext.asyncio import async_sessionmaker, create_async_engine
+
+DATABASE_URL = "sqlite+aiosqlite:///fullauth_sqlmodel_demo.db"
+engine = create_async_engine(DATABASE_URL)
+session_maker = async_sessionmaker(engine, expire_on_commit=False)

fastapi_fullauth-0.3.0/examples/sqlmodel_app/main.py

@@ -0,0 +1,26 @@
+"""
+Run: uv run uvicorn examples.sqlmodel_app.main:app --reload
+Requires: uv add fastapi-fullauth[sqlmodel] aiosqlite
+"""
+
+from contextlib import asynccontextmanager
+
+from fastapi import FastAPI
+from sqlmodel import SQLModel
+
+from .auth import fullauth
+from .config import engine
+from .routes import router
+
+
+@asynccontextmanager
+async def lifespan(app: FastAPI):
+    async with engine.begin() as conn:
+        await conn.run_sync(SQLModel.metadata.create_all)
+    yield
+    await engine.dispose()
+
+
+app = FastAPI(title="FullAuth SQLModel Demo", lifespan=lifespan)
+fullauth.init_app(app)
+app.include_router(router)

fastapi_fullauth-0.3.0/examples/sqlmodel_app/models.py

@@ -0,0 +1,18 @@
+from sqlmodel import Field, Relationship
+
+from fastapi_fullauth.adapters.sqlmodel import (
+    RefreshTokenRecord,
+    Role,
+    UserBase,
+    UserRoleLink,
+)
+
+
+class User(UserBase, table=True):
+    __tablename__ = "fullauth_users"
+
+    display_name: str = Field(default="", max_length=100)
+    phone: str = Field(default="", max_length=20)
+
+    roles: list[Role] = Relationship(link_model=UserRoleLink)
+    refresh_tokens: list[RefreshTokenRecord] = Relationship()

fastapi_fullauth-0.3.0/examples/sqlmodel_app/routes.py

@@ -0,0 +1,15 @@
+from fastapi import APIRouter, Depends
+
+from fastapi_fullauth.dependencies import current_user, require_role
+
+router = APIRouter(prefix="/api/v1")
+
+
+@router.get("/dashboard")
+async def dashboard(user=Depends(current_user)):
+    return {"msg": "welcome", "user": user}
+
+
+@router.get("/admin")
+async def admin_only(user=Depends(require_role("admin"))):
+    return {"msg": "admin area", "user": user}

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/fastapi_fullauth/__init__.py

@@ -1,8 +1,8 @@
-__version__ = "0.1.0"
+__version__ = "0.3.0"
 
 from fastapi_fullauth.config import FullAuthConfig
 from fastapi_fullauth.fullauth import FullAuth
-from fastapi_fullauth.types import Route
+from fastapi_fullauth.types import RouteName
 from fastapi_fullauth.utils import create_superuser, generate_secret_key
 from fastapi_fullauth.validators import PasswordValidator
 
@@ -10,7 +10,7 @@ __all__ = [
     "FullAuth",
     "FullAuthConfig",
     "PasswordValidator",
-    "Route",
+    "RouteName",
     "create_superuser",
     "generate_secret_key",
 ]

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/fastapi_fullauth/adapters/base.py

@@ -17,6 +17,14 @@ class AbstractUserAdapter(ABC):
     @abstractmethod
     async def get_user_by_email(self, email: str) -> UserSchema | None: ...
 
+    async def get_user_by_field(self, field: str, value: str) -> UserSchema | None:
+        """Look up a user by an arbitrary field. Override for non-email login."""
+        if field == "email":
+            return await self.get_user_by_email(value)
+        raise NotImplementedError(
+            f"Lookup by '{field}' not implemented — override get_user_by_field()"
+        )
+
     @abstractmethod
     async def create_user(self, data: CreateUserSchema, hashed_password: str) -> UserSchema: ...
 
@@ -47,6 +55,9 @@ class AbstractUserAdapter(ABC):
     @abstractmethod
     async def revoke_refresh_token_family(self, family_id: str) -> None: ...
 
+    @abstractmethod
+    async def revoke_all_user_refresh_tokens(self, user_id: str) -> None: ...
+
     @abstractmethod
     async def set_user_verified(self, user_id: str) -> None: ...
 

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/fastapi_fullauth/adapters/memory.py

@@ -21,8 +21,11 @@ class InMemoryAdapter(AbstractUserAdapter):
         return self._user_schema(**data)
 
     async def get_user_by_email(self, email: str) -> UserSchema | None:
+        return await self.get_user_by_field("email", email)
+
+    async def get_user_by_field(self, field: str, value: str) -> UserSchema | None:
         for data in self._users.values():
-            if data["email"] == email:
+            if data.get(field) == value:
                 return self._user_schema(**data)
         return None
 
@@ -79,6 +82,11 @@ class InMemoryAdapter(AbstractUserAdapter):
             if tok.family_id == family_id:
                 tok.revoked = True
 
+    async def revoke_all_user_refresh_tokens(self, user_id: str) -> None:
+        for tok in self._refresh_tokens.values():
+            if tok.user_id == user_id:
+                tok.revoked = True
+
     async def set_user_verified(self, user_id: str) -> None:
         if user_id in self._users:
             self._users[user_id]["is_verified"] = True

{fastapi_fullauth-0.1.0 → fastapi_fullauth-0.3.0}/fastapi_fullauth/adapters/sqlalchemy/__init__.py

@@ -3,7 +3,7 @@ from fastapi_fullauth.adapters.sqlalchemy.models import (
     FullAuthBase,
     RefreshTokenModel,
     RoleModel,
-    UserModel,
+    UserBase,
     UserRoleModel,
 )
 
@@ -12,6 +12,6 @@ __all__ = [
     "RefreshTokenModel",
     "RoleModel",
     "SQLAlchemyAdapter",
-    "UserModel",
+    "UserBase",
     "UserRoleModel",
 ]