fastapi-fullstack 0.2.5__tar.gz → 0.2.7__tar.gz

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-fullstack
-Version: 0.2.5
+Version: 0.2.7
 Summary: Full-stack FastAPI + Next.js template generator with PydanticAI/LangChain agents, WebSocket streaming, 20+ enterprise integrations, and Logfire/LangSmith observability. Ship AI apps fast. CLI tool to generate production-ready FastAPI + Next.js projects with AI agents, auth, and observability.
 Project-URL: Homepage, https://github.com/vstorm-co/full-stack-ai-agent-template
 Project-URL: Documentation, https://github.com/vstorm-co/full-stack-ai-agent-template#readme
@@ -19,23 +19,23 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Software Development :: Code Generators
 Requires-Python: >=3.11
-Requires-Dist: click>=8.1.0
-Requires-Dist: cookiecutter>=2.6.0
-Requires-Dist: email-validator>=2.0.0
-Requires-Dist: pydantic-settings>=2.0.0
-Requires-Dist: pydantic>=2.0.0
-Requires-Dist: questionary>=2.0.0
-Requires-Dist: rich>=13.0.0
+Requires-Dist: click>=8.3.0
+Requires-Dist: cookiecutter>=2.7.0
+Requires-Dist: email-validator>=2.3.0
+Requires-Dist: pydantic-settings>=2.13.0
+Requires-Dist: pydantic>=2.13.0
+Requires-Dist: questionary>=2.1.0
+Requires-Dist: rich>=15.0.0
 Provides-Extra: dev
-Requires-Dist: pre-commit>=3.0.0; extra == 'dev'
-Requires-Dist: pytest-cov>=4.0.0; extra == 'dev'
-Requires-Dist: pytest>=8.0.0; extra == 'dev'
-Requires-Dist: ruff>=0.8.0; extra == 'dev'
-Requires-Dist: ty>=0.0.29; extra == 'dev'
+Requires-Dist: pre-commit>=4.0.0; extra == 'dev'
+Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.0; extra == 'dev'
+Requires-Dist: ruff>=0.14.0; extra == 'dev'
+Requires-Dist: ty>=0.0.31; extra == 'dev'
 Provides-Extra: docs
-Requires-Dist: mkdocs-material>=9.5.0; extra == 'docs'
-Requires-Dist: mkdocs>=1.6.0; extra == 'docs'
-Requires-Dist: pymdown-extensions>=10.0.0; extra == 'docs'
+Requires-Dist: mkdocs-material>=9.7.0; extra == 'docs'
+Requires-Dist: mkdocs>=1.6.1; extra == 'docs'
+Requires-Dist: pymdown-extensions>=10.20; extra == 'docs'
 Description-Content-Type: text/markdown
 
 <p align="center">
@@ -397,6 +397,7 @@ Generated projects include **CLAUDE.md** and **AGENTS.md** files optimized for A
 - **Messaging Channels** - Telegram and Slack multi-bot integration with polling, webhooks, per-thread sessions, group concurrency control
 - **Conversation Sharing** - Share conversations with users or via public links, admin conversation browser
 - **Conversation Persistence** - Save chat history to database
+- **Message Ratings** - Like/dislike responses with feedback, admin analytics
 - **Image Description** - Extract images from documents, describe via LLM vision
 - **Multimodal Embeddings** - Google Gemini embedding model (text + images)
 - **Document Sources** - Local files, API upload, Google Drive, S3/MinIO

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/README.md

@@ -357,6 +357,7 @@ Generated projects include **CLAUDE.md** and **AGENTS.md** files optimized for A
 - **Messaging Channels** - Telegram and Slack multi-bot integration with polling, webhooks, per-thread sessions, group concurrency control
 - **Conversation Sharing** - Share conversations with users or via public links, admin conversation browser
 - **Conversation Persistence** - Save chat history to database
+- **Message Ratings** - Like/dislike responses with feedback, admin analytics
 - **Image Description** - Extract images from documents, describe via LLM vision
 - **Multimodal Embeddings** - Google Gemini embedding model (text + images)
 - **Document Sources** - Local files, API upload, Google Drive, S3/MinIO

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/fastapi_gen/cli.py

@@ -56,15 +56,51 @@ def cli(ctx: click.Context) -> None:
     help="Use default values without prompts",
 )
 @click.option("--name", type=str, help="Project name (for --no-input mode)")
-def new(output: Path | None, no_input: bool, name: str | None) -> None:
+@click.option(
+    "--minimal",
+    is_flag=True,
+    default=False,
+    help="Skip wizard — ask only for project name and use minimal defaults (SQLite, no Docker/Redis/CI)",
+)
+def new(output: Path | None, no_input: bool, name: str | None, minimal: bool) -> None:
     """Create a new FastAPI project interactively."""
     try:
-        if no_input:
+        if no_input or minimal:
             if not name:
-                console.print("[red]Error:[/] --name is required when using --no-input")
-                raise SystemExit(1)
-
-            config = ProjectConfig(project_name=name, background_tasks=BackgroundTaskType.NONE)
+                if minimal:
+                    import questionary
+
+                    name = questionary.text(
+                        "Project name:",
+                        validate=lambda v: bool(v) or "Name cannot be empty",
+                    ).ask()
+                    if not name:
+                        console.print("\n[yellow]Cancelled.[/]")
+                        return
+                else:
+                    console.print("[red]Error:[/] --name is required when using --no-input")
+                    raise SystemExit(1)
+
+            if minimal:
+                config = ProjectConfig(
+                    project_name=name,
+                    database=DatabaseType.SQLITE,
+                    enable_logfire=False,
+                    enable_redis=False,
+                    enable_caching=False,
+                    enable_rate_limiting=False,
+                    enable_pagination=False,
+                    enable_admin_panel=False,
+                    enable_docker=False,
+                    enable_kubernetes=False,
+                    background_tasks=BackgroundTaskType.NONE,
+                    ci_type=CIType.NONE,
+                )
+                console.print(f"[cyan]Creating minimal project:[/] {name}")
+                console.print("[dim]SQLite · no Docker · no Redis · no CI[/]")
+                console.print()
+            else:
+                config = ProjectConfig(project_name=name, background_tasks=BackgroundTaskType.NONE)
         else:
             config = run_interactive_prompts()
             show_summary(config)

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/fastapi_gen/config.py

@@ -343,6 +343,16 @@ class ProjectConfig(BaseModel):
                 "PydanticDeep uses Logfire for observability."
             )
 
+        # CrewAI 1.13.x pins opentelemetry-sdk<1.35 which conflicts with
+        # logfire>=4.30 (needs opentelemetry-sdk>=1.39). Disable logfire when
+        # using CrewAI to keep dependencies resolvable.
+        if self.ai_framework == AIFrameworkType.CREWAI and self.enable_logfire:
+            raise ValueError(
+                "CrewAI is incompatible with Logfire — CrewAI pins an older "
+                "opentelemetry-sdk that conflicts with current logfire. "
+                "Disable Logfire (enable_logfire=False) when using CrewAI."
+            )
+
         # Admin panel requires SQLAlchemy (SQLAdmin doesn't fully support SQLModel)
         if self.enable_admin_panel and self.orm_type == OrmType.SQLMODEL:
             raise ValueError(

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fastapi-fullstack"
-version = "0.2.5"
+version = "0.2.7"
 description = "Full-stack FastAPI + Next.js template generator with PydanticAI/LangChain agents, WebSocket streaming, 20+ enterprise integrations, and Logfire/LangSmith observability. Ship AI apps fast. CLI tool to generate production-ready FastAPI + Next.js projects with AI agents, auth, and observability."
 readme = "README.md"
 requires-python = ">=3.11"
@@ -44,27 +44,27 @@ classifiers = [
 ]
 
 dependencies = [
-    "click>=8.1.0",
-    "cookiecutter>=2.6.0",
-    "rich>=13.0.0",
-    "questionary>=2.0.0",
-    "pydantic>=2.0.0",
-    "pydantic-settings>=2.0.0",
-    "email-validator>=2.0.0",
+    "click>=8.3.0",
+    "cookiecutter>=2.7.0",
+    "rich>=15.0.0",
+    "questionary>=2.1.0",
+    "pydantic>=2.13.0",
+    "pydantic-settings>=2.13.0",
+    "email-validator>=2.3.0",
 ]
 
 [project.optional-dependencies]
 dev = [
-    "pytest>=8.0.0",
-    "pytest-cov>=4.0.0",
-    "ruff>=0.8.0",
-    "ty>=0.0.29",
-    "pre-commit>=3.0.0",
+    "pytest>=9.0.0",
+    "pytest-cov>=7.0.0",
+    "ruff>=0.14.0",
+    "ty>=0.0.31",
+    "pre-commit>=4.0.0",
 ]
 docs = [
-    "mkdocs>=1.6.0",
-    "mkdocs-material>=9.5.0",
-    "pymdown-extensions>=10.0.0",
+    "mkdocs>=1.6.1",
+    "mkdocs-material>=9.7.0",
+    "pymdown-extensions>=10.20",
 ]
 
 [project.scripts]
@@ -168,6 +168,7 @@ exclude_lines = [
 
 [dependency-groups]
 dev = [
-    "ty>=0.0.29",
-    "pytest-cov>=7.0.0",
+    "ty>=0.0.31",
+    "pytest-cov>=7.1.0",
+    "sqlalchemy>=2.0.49",
 ]

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/hooks/post_gen_project.py

@@ -47,6 +47,7 @@ enable_web_search = "{{ cookiecutter.enable_web_search }}" == "True"
 use_pydantic_deep = "{{ cookiecutter.use_pydantic_deep }}" == "True"
 use_telegram = "{{ cookiecutter.use_telegram }}" == "True"
 use_slack = "{{ cookiecutter.use_slack }}" == "True"
+enable_docker = "{{ cookiecutter.enable_docker }}" == "True"
 
 
 def remove_file(path: str) -> None:
@@ -158,6 +159,18 @@ if not enable_rag:
     remove_file(os.path.join(backend_app, "worker", "tasks", "rag_ingestion.py"))
     # Remove RAG agent tool
     remove_file(os.path.join(backend_app, "agents", "tools", "rag_tool.py"))
+    # Remove RAG document repository/service/model stubs
+    remove_file(os.path.join(backend_app, "repositories", "rag_document.py"))
+    remove_file(os.path.join(backend_app, "services", "rag_document.py"))
+    remove_file(os.path.join(backend_app, "services", "rag_sync.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "rag_document.py"))
+    # Remove sync source/log artifacts (they only exist for RAG)
+    remove_file(os.path.join(backend_app, "db", "models", "sync_source.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "sync_log.py"))
+    remove_file(os.path.join(backend_app, "schemas", "sync_source.py"))
+    remove_file(os.path.join(backend_app, "repositories", "sync_source.py"))
+    remove_file(os.path.join(backend_app, "repositories", "sync_log.py"))
+    remove_file(os.path.join(backend_app, "services", "sync_source.py"))
     # Remove frontend RAG files
     if use_frontend:
         frontend_src = os.path.join(os.getcwd(), "frontend", "src")
@@ -178,7 +191,65 @@ else:
         remove_file(os.path.join(backend_app, "rag", "connectors", "s3.py"))
     if not enable_google_drive_ingestion and not enable_s3_ingestion:
         remove_dir(os.path.join(backend_app, "rag", "sources"))
-        remove_dir(os.path.join(backend_app, "rag", "connectors"))
+        # Keep rag/connectors/ — its __init__.py defines CONNECTOR_REGISTRY which
+        # sync_source.py imports unconditionally even when no connectors are configured.
+
+# --- Messaging channels (Slack / Telegram) ---
+# Per-channel adapters & webhook routes
+if not use_telegram:
+    remove_file(os.path.join(backend_app, "channels", "telegram.py"))
+    remove_file(os.path.join(backend_app, "api", "routes", "v1", "telegram_webhook.py"))
+if not use_slack:
+    remove_file(os.path.join(backend_app, "channels", "slack.py"))
+    remove_file(os.path.join(backend_app, "api", "routes", "v1", "slack_webhook.py"))
+
+# Shared channel infrastructure — only present when at least one channel is enabled
+if not use_telegram and not use_slack:
+    remove_dir(os.path.join(backend_app, "channels"))
+    remove_file(os.path.join(backend_app, "api", "routes", "v1", "channels.py"))
+    remove_file(os.path.join(backend_app, "core", "channel_crypto.py"))
+    remove_file(os.path.join(backend_app, "commands", "channel.py"))
+    remove_file(os.path.join(backend_app, "services", "channel_bot.py"))
+    remove_file(os.path.join(backend_app, "services", "agent_invocation.py"))
+    remove_file(os.path.join(backend_app, "repositories", "channel_bot.py"))
+    remove_file(os.path.join(backend_app, "repositories", "channel_identity.py"))
+    remove_file(os.path.join(backend_app, "repositories", "channel_session.py"))
+    remove_file(os.path.join(backend_app, "schemas", "channel_bot.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "channel_bot.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "channel_identity.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "channel_session.py"))
+    remove_file(os.path.join(backend_app, "tasks", "channel.py"))
+
+# --- DeepAgents project files (only when use_pydantic_deep is enabled) ---
+if not use_pydantic_deep:
+    remove_file(os.path.join(backend_app, "api", "routes", "v1", "projects.py"))
+    remove_file(os.path.join(backend_app, "db", "models", "project.py"))
+    remove_file(os.path.join(backend_app, "schemas", "project.py"))
+    remove_file(os.path.join(backend_app, "services", "project.py"))
+    remove_file(os.path.join(backend_app, "repositories", "project.py"))
+
+# --- Test stubs that depend on disabled features ---
+backend_tests = os.path.join(os.getcwd(), "backend", "tests")
+if not enable_redis:
+    remove_file(os.path.join(backend_tests, "test_clients.py"))
+if not (use_postgresql and use_sqlalchemy):
+    remove_file(os.path.join(backend_tests, "test_services_conversation.py"))
+if not use_celery:
+    remove_file(os.path.join(backend_tests, "test_worker.py"))
+if not (enable_admin_panel and use_postgresql):
+    remove_file(os.path.join(backend_tests, "test_admin.py"))
+
+# --- Empty docker-compose placeholders ---
+if not enable_docker:
+    project_root = os.getcwd()
+    for compose_file in (
+        "docker-compose.yml",
+        "docker-compose.dev.yml",
+        "docker-compose.prod.yml",
+        "docker-compose.frontend.yml",
+        ".env.prod.example",
+    ):
+        remove_file(os.path.join(project_root, compose_file))
 
 # --- Cleanup stub files (files with only docstring, no code) ---
 core_dir = os.path.join(backend_app, "core")

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/.gitignore

@@ -103,5 +103,5 @@ Thumbs.db
 
 # Project specific
 {%- if cookiecutter.use_sqlite %}
-{{ cookiecutter.project_slug }}.db
+data/
 {%- endif %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/README.md

@@ -131,6 +131,18 @@ Chat with the agent at http://localhost:{{ cookiecutter.frontend_port }}/chat
 - **Add tools:** See `docs/howto/add-agent-tool.md`
 - **Agent config:** `.env` → `AI_MODEL`, `AI_TEMPERATURE`
 
+## Message Ratings
+
+Users can rate AI responses with 👍/👎 and optional feedback comments.
+Administrators can view analytics and export rating data.
+
+{%- if cookiecutter.use_frontend %}
+- Rate messages at http://localhost:{{ cookiecutter.frontend_port }}/chat
+- Admin dashboard at http://localhost:{{ cookiecutter.frontend_port }}/admin/ratings
+{%- endif %}
+
+See `docs/howto/use-ratings.md` for full documentation.
+
 {%- if cookiecutter.enable_rag %}
 
 ## RAG (Knowledge Base)

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/backend/.env.example

@@ -39,7 +39,7 @@ MONGO_DB={{ cookiecutter.project_slug }}
 {%- if cookiecutter.use_sqlite %}
 
 # === SQLite ===
-SQLITE_PATH=./{{ cookiecutter.project_slug }}.db
+SQLITE_PATH=./data/{{ cookiecutter.project_slug }}.db
 {%- endif %}
 
 {%- if cookiecutter.use_jwt %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/backend/alembic/env.py

@@ -3,6 +3,7 @@
 # ruff: noqa: I001 - Imports structured for Jinja2 template conditionals
 
 from logging.config import fileConfig
+from pathlib import Path
 
 from alembic import context
 from sqlalchemy import engine_from_config, pool
@@ -19,6 +20,22 @@ from app.db.base import Base
 {%- if cookiecutter.use_jwt %}
 from app.db.models.user import User  # noqa: F401
 {%- endif %}
+from app.db.models.conversation import Conversation, Message, ToolCall  # noqa: F401
+{%- if cookiecutter.use_jwt %}
+from app.db.models.message_rating import MessageRating  # noqa: F401
+{%- endif %}
+{%- if cookiecutter.enable_session_management and cookiecutter.use_jwt %}
+from app.db.models.session import Session  # noqa: F401
+{%- endif %}
+{%- if cookiecutter.enable_webhooks %}
+from app.db.models.webhook import Webhook, WebhookDelivery  # noqa: F401
+{%- endif %}
+from app.db.models.chat_file import ChatFile  # noqa: F401
+{%- if cookiecutter.enable_rag %}
+from app.db.models.rag_document import RAGDocument  # noqa: F401
+from app.db.models.sync_log import SyncLog  # noqa: F401
+from app.db.models.sync_source import SyncSource  # noqa: F401
+{%- endif %}
 
 config = context.config
 
@@ -32,6 +49,13 @@ target_metadata = Base.metadata
 {%- endif %}
 
 
+# Ensure SQLite data directory exists before connecting
+{%- if cookiecutter.use_sqlite %}
+db_path = Path(settings.SQLITE_PATH)
+db_path.parent.mkdir(parents=True, exist_ok=True)
+{%- endif %}
+
+
 def get_url() -> str:
     """Get database URL from settings."""
 {%- if cookiecutter.use_postgresql %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/backend/app/api/deps.py

@@ -198,6 +198,27 @@ def get_channel_bot_service() -> ChannelBotService:
 
 ChannelBotSvc = Annotated[ChannelBotService, Depends(get_channel_bot_service)]
 {%- endif %}
+{%- if cookiecutter.use_database and cookiecutter.use_jwt %}
+
+# Message rating service
+from app.services.message_rating import MessageRatingService
+{%- if cookiecutter.use_postgresql or cookiecutter.use_sqlite %}
+
+
+def get_rating_service(db: DBSession) -> MessageRatingService:
+    """Create MessageRatingService instance with database session."""
+    return MessageRatingService(db)
+{%- elif cookiecutter.use_mongodb %}
+
+
+def get_rating_service() -> MessageRatingService:
+    """Create MessageRatingService instance."""
+    return MessageRatingService()
+{%- endif %}
+
+
+MessageRatingSvc = Annotated[MessageRatingService, Depends(get_rating_service)]
+{%- endif %}
 
 {%- if cookiecutter.enable_rag and (cookiecutter.use_postgresql or cookiecutter.use_sqlite) %}
 from app.services.rag_document import RAGDocumentService
@@ -238,7 +259,6 @@ FileUploadSvc = Annotated[FileUploadService, Depends(get_file_upload_service)]
 {%- endif %}
 
 {%- if cookiecutter.use_jwt %}
-
 # === Authentication Dependencies ===
 
 from app.core.exceptions import AuthenticationError, AuthorizationError
@@ -247,8 +267,6 @@ from app.db.models.user import User, UserRole
 oauth2_scheme = OAuth2PasswordBearer(tokenUrl=f"{settings.API_V1_STR}/auth/login")
 
 {%- if cookiecutter.use_postgresql %}
-
-
 async def get_current_user(
     token: Annotated[str, Depends(oauth2_scheme)],
     user_service: UserSvc,
@@ -510,19 +528,44 @@ CurrentAdmin = Annotated[User, Depends(RoleChecker(UserRole.ADMIN))]
 
 
 # WebSocket authentication dependency
-from fastapi import WebSocket, Query, Cookie
+from fastapi import WebSocket, Cookie
+
+
+_WS_TOKEN_PROTOCOL_PREFIX = "access_token."
+
+
+def _extract_ws_auth(websocket: WebSocket) -> tuple[str | None, str | None]:
+    """Parse Sec-WebSocket-Protocol header for an auth token + app subprotocol.
+
+    Clients pass the token as a subprotocol of the form
+    ``access_token.<JWT>`` alongside an optional application subprotocol
+    (e.g. ``chat``). Returns (token, app_subprotocol) — either may be None.
+    """
+    raw = websocket.headers.get("sec-websocket-protocol") or ""
+    token: str | None = None
+    app_subprotocol: str | None = None
+    for proto in (p.strip() for p in raw.split(",") if p.strip()):
+        if proto.startswith(_WS_TOKEN_PROTOCOL_PREFIX):
+            token = proto[len(_WS_TOKEN_PROTOCOL_PREFIX):]
+        elif app_subprotocol is None:
+            app_subprotocol = proto
+    return token, app_subprotocol
 
 
 async def get_current_user_ws(
     websocket: WebSocket,
-    token: str | None = Query(None, alias="token"),
     access_token: str | None = Cookie(None),
 ) -> User:
-    """Get current user from WebSocket JWT token.
+    """Authenticate a WebSocket connection.
+
+    Token sources, checked in order:
+    1. ``Sec-WebSocket-Protocol`` header, in the form ``access_token.<JWT>``.
+       The chosen application subprotocol (e.g. ``chat``) is echoed back on
+       ``accept()`` via ``websocket.state.accept_subprotocol``.
+    2. Same-origin ``access_token`` cookie (fallback for same-origin clients).
 
-    Token can be passed either as:
-    - Query parameter: ws://...?token=<jwt>
-    - Cookie: access_token cookie (set by HTTP login)
+    Tokens in query strings are NOT accepted — they leak into logs and
+    Referer headers.
 
     Raises:
         AuthenticationError: If token is invalid or user not found.
@@ -531,8 +574,10 @@ async def get_current_user_ws(
 
     from app.core.security import verify_token
 
-    # Try query parameter first, then cookie
-    auth_token = token or access_token
+    subprotocol_token, app_subprotocol = _extract_ws_auth(websocket)
+    websocket.state.accept_subprotocol = app_subprotocol
+
+    auth_token = subprotocol_token or access_token
 
     if not auth_token:
         await websocket.close(code=4001, reason="Missing authentication token")
@@ -558,10 +603,26 @@ async def get_current_user_ws(
     async with get_db_context() as db:
         user_service = UserService(db)
         user = await user_service.get_by_id(UUID(user_id))
+
+        if not user.is_active:
+            await websocket.close(code=4001, reason="User account is disabled")
+            raise AuthenticationError(message="User account is disabled")
+
+        # Eagerly load all columns, then detach from session to avoid
+        # "instance not bound to a Session" errors after the context manager exits
+        await db.refresh(user)
+        db.expunge(user)
+        return user
 {%- elif cookiecutter.use_mongodb %}
 
     user_service = UserService()
     user = await user_service.get_by_id(user_id)
+
+    if not user.is_active:
+        await websocket.close(code=4001, reason="User account is disabled")
+        raise AuthenticationError(message="User account is disabled")
+
+    return user
 {%- elif cookiecutter.use_sqlite %}
 
     from contextlib import contextmanager
@@ -569,13 +630,17 @@ async def get_current_user_ws(
     with contextmanager(get_db_session)() as db:
         user_service = UserService(db)
         user = user_service.get_by_id(user_id)
-{%- endif %}
 
-    if not user.is_active:
-        await websocket.close(code=4001, reason="User account is disabled")
-        raise AuthenticationError(message="User account is disabled")
+        if not user.is_active:
+            await websocket.close(code=4001, reason="User account is disabled")
+            raise AuthenticationError(message="User account is disabled")
 
-    return user
+        # Eagerly load all columns, then detach from session for
+        # consistency with async behavior
+        db.refresh(user)
+        db.expunge(user)
+        return user
+{%- endif %}
 {%- endif %}
 
 {%- if cookiecutter.use_api_key %}

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/backend/app/api/exception_handlers.py

@@ -4,9 +4,8 @@ These handlers convert domain exceptions to proper HTTP responses.
 """
 
 import logging
-from typing import Union
 
-from fastapi import FastAPI, Request, WebSocket
+from fastapi import FastAPI, Request
 from fastapi.responses import JSONResponse
 
 from app.core.exceptions import AppException
@@ -15,25 +14,19 @@ logger = logging.getLogger(__name__)
 
 
 async def app_exception_handler(
-    request: Union[Request, WebSocket], exc: AppException
+    request: Request, exc: AppException
 ) -> JSONResponse:
     """Handle application exceptions.
 
     Logs 5xx errors as errors and 4xx as warnings.
     Returns a standardized JSON error response.
-
-    Note: For WebSocket connections, this handler may not be able to return
-    a response if the connection was already closed.
     """
-    # WebSocket objects don't have a method attribute
-    method = getattr(request, "method", "WEBSOCKET")
-
     log_extra = {
         "error_code": exc.code,
         "status_code": exc.status_code,
         "details": exc.details,
         "path": request.url.path,
-        "method": method,
+        "method": request.method,
     }
 
     if exc.status_code >= 500:
@@ -59,20 +52,18 @@ async def app_exception_handler(
 
 
 async def unhandled_exception_handler(
-    request: Union[Request, WebSocket], exc: Exception
+    request: Request, exc: Exception
 ) -> JSONResponse:
     """Handle unexpected exceptions.
 
     Logs the full exception but returns a generic error to the client
     to avoid leaking sensitive information.
     """
-    method = getattr(request, "method", "WEBSOCKET")
-
     logger.exception(
         "Unhandled exception",
         extra={
             "path": request.url.path,
-            "method": method,
+            "method": request.method,
         },
     )
 
@@ -93,6 +84,6 @@ def register_exception_handlers(app: FastAPI) -> None:
 
     Call this after creating the FastAPI application instance.
     """
-    app.add_exception_handler(AppException, app_exception_handler)  # type: ignore[arg-type]
+    app.add_exception_handler(AppException, app_exception_handler)
     # Uncomment to catch all unhandled exceptions:
     # app.add_exception_handler(Exception, unhandled_exception_handler)

{fastapi_fullstack-0.2.5 → fastapi_fullstack-0.2.7}/template/{{cookiecutter.project_slug}}/backend/app/api/routes/v1/__init__.py

@@ -7,7 +7,7 @@ from fastapi import APIRouter
 
 from app.api.routes.v1 import health
 {%- if cookiecutter.use_jwt %}
-from app.api.routes.v1 import auth, users
+from app.api.routes.v1 import admin_ratings, auth, users
 {%- endif %}
 {%- if cookiecutter.enable_oauth %}
 from app.api.routes.v1 import oauth
@@ -56,6 +56,9 @@ v1_router.include_router(auth.router, prefix="/auth", tags=["auth"])
 
 # User routes
 v1_router.include_router(users.router, prefix="/users", tags=["users"])
+
+# Admin routes
+v1_router.include_router(admin_ratings.router, prefix="/admin/ratings", tags=["admin:ratings"])
 {%- endif %}
 
 {%- if cookiecutter.enable_oauth %}