fastapi-guard 7.2.2__tar.gz → 7.3.0__tar.gz

{fastapi_guard-7.2.2 → fastapi_guard-7.3.0}/.mike.yml

@@ -2,6 +2,7 @@ version_selector: true
 title_switch: true
 versions_file: docs/versions/versions.json
 versions:
+  - 7.3.0
   - 7.2.2
   - 7.2.1
   - 7.2.0
@@ -48,4 +49,4 @@ versions:
   - 0.3.2
   - latest
 aliases:
-  latest: 7.2.2
+  latest: 7.3.0

{fastapi_guard-7.2.2 → fastapi_guard-7.3.0}/CHANGELOG.md

@@ -3,6 +3,19 @@ Release Notes
 
 ___
 
+v7.3.0 (2026-07-15)
+-------------------
+
+Security pipeline assembly delegated to guard-core's check factory (v7.3.0)
+---------------------------------------------------------------------------------
+
+- **Changed** — The security pipeline is now assembled by guard-core's `build_default_pipeline()`. New guard-core checks are picked up automatically; the middleware no longer hand-lists check classes.
+- **Compatibility (behavior change from guard-core 3.5.0)** — Global IP whitelist/blacklist and country rules now apply on routes carrying per-route decorator config; previously any decorated route silently bypassed every global IP and country rule. A client outside a configured global `whitelist` now receives `403` on decorated routes that previously served it. A route-level `@ip_whitelist` now grants access only, not trust: the matched request is still rate-limited, user-agent-filtered, cloud-provider-checked, attack-scanned, and country-checked, while global `whitelist` membership still confers full trust. The IP and country aspects are evaluated independently — a route `@ip_whitelist` match does not bypass country rules; only a route `@whitelist_countries` match overrides the global country gate. See the guard-core 3.5.0 changelog for the full description and migration guidance.
+- **Tests** — The decorator test suite now exercises the rate-limiting, user-agent, and suspicious-activity decorators through the enforced security pipeline using a non-whitelisted client, with explicit coverage for the new decorated-route `403` behavior and for a route `@ip_whitelist` client still being rate-limited. Previously these tests sent requests from a globally-whitelisted address, so the security pipeline short-circuited and the decorator logic was never exercised.
+- **Requires** — `guard-core>=3.5.0` (declared as unconstrained `guard-core` in pyproject; documented here for upgrade guidance). The pipeline factory (`build_default_pipeline`) and the decorated-route IP/country enforcement this release relies on ship in guard-core 3.5.0; installing against an older guard-core fails at middleware initialization with an `ImportError`.
+
+___
+
 v7.2.2 (2026-07-01)
 -------------------
 

{fastapi_guard-7.2.2 → fastapi_guard-7.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi_guard
-Version: 7.2.2
+Version: 7.3.0
 Summary: Production-ready security middleware for FastAPI — IP filtering, rate limiting, penetration detection, and 20+ per-route security decorators.
 Project-URL: Homepage, https://guard-core.com
 Project-URL: Documentation, https://rennf93.github.io/fastapi-guard/latest/

{fastapi_guard-7.2.2 → fastapi_guard-7.3.0}/guard/middleware.py

@@ -242,51 +242,13 @@ class SecurityMiddleware(BaseHTTPMiddleware):
         return {"enabled": True, "degraded": self.agent_degraded, **handler_stats}
 
     def _build_security_pipeline(self) -> None:
-        from guard_core.core.checks import (
-            AuthenticationCheck,
-            CloudIpRefreshCheck,
-            CloudProviderCheck,
-            CustomRequestCheck,
-            CustomValidatorsCheck,
-            EmergencyModeCheck,
-            HttpsEnforcementCheck,
-            IpSecurityCheck,
-            RateLimitCheck,
-            ReferrerCheck,
-            RequestLoggingCheck,
-            RequestSizeContentCheck,
-            RequiredHeadersCheck,
-            RouteConfigCheck,
-            SecurityCheckPipeline,
-            SuspiciousActivityCheck,
-            TimeWindowCheck,
-            UserAgentCheck,
-        )
+        from guard_core.core.checks import build_default_pipeline
 
-        checks = [
-            RouteConfigCheck(self),
-            EmergencyModeCheck(self),
-            HttpsEnforcementCheck(self),
-            RequestLoggingCheck(self),
-            RequestSizeContentCheck(self),
-            RequiredHeadersCheck(self),
-            AuthenticationCheck(self),
-            ReferrerCheck(self),
-            CustomValidatorsCheck(self),
-            TimeWindowCheck(self),
-            CloudIpRefreshCheck(self),
-            IpSecurityCheck(self),
-            CloudProviderCheck(self),
-            UserAgentCheck(self),
-            RateLimitCheck(self),
-            SuspiciousActivityCheck(self),
-            CustomRequestCheck(self),
-        ]
-
-        self.security_pipeline = SecurityCheckPipeline(checks)
+        pipeline = build_default_pipeline(self)
+        self.security_pipeline = pipeline
         self.logger.info(
-            f"Security pipeline initialized with {len(checks)} checks: "
-            f"{self.security_pipeline.get_check_names()}"
+            f"Security pipeline initialized with {len(pipeline)} "
+            f"checks: {pipeline.get_check_names()}"
         )
 
     def _configure_security_headers(self, config: SecurityConfig) -> None:

{fastapi_guard-7.2.2 → fastapi_guard-7.3.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fastapi_guard"
-version = "7.2.2"
+version = "7.3.0"
 description = "Production-ready security middleware for FastAPI — IP filtering, rate limiting, penetration detection, and 20+ per-route security decorators."
 authors = [
     {name = "Renzo Franceschini", email = "rennf93@users.noreply.github.com"}