fastapi-mongo-base 1.3.7__tar.gz → 1.3.8__tar.gz

{fastapi_mongo_base-1.3.7/src/fastapi_mongo_base.egg-info → fastapi_mongo_base-1.3.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-mongo-base
-Version: 1.3.7
+Version: 1.3.8
 Summary: A simple boilerplate application, including models and schemas and abstract router, for FastAPI with MongoDB
 Author-email: Mahdi Kiani <mahdikiany@gmail.com>
 Maintainer-email: Mahdi Kiani <mahdikiany@gmail.com>

{fastapi_mongo_base-1.3.7 → fastapi_mongo_base-1.3.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fastapi-mongo-base"
-version = "1.3.7"
+version = "1.3.8"
 description = "A simple boilerplate application, including models and schemas and abstract router, for FastAPI with MongoDB"
 readme = "README.md"
 requires-python = ">=3.10"

{fastapi_mongo_base-1.3.7 → fastapi_mongo_base-1.3.8}/src/fastapi_mongo_base/core/errors/resource_errors.py

@@ -13,6 +13,7 @@ class ResourceError(BaseHTTPException):
 
     def __init__(
         self,
+        error_code: str | None = None,
         detail: str | None = None,
         message: dict | None = None,
         **kwargs: object,
@@ -20,7 +21,7 @@ class ResourceError(BaseHTTPException):
         """Initialize ResourceError with optional detail, message, and data."""
         super().__init__(
             status_code=self.status_code,
-            error_code=self.error_code,
+            error_code=error_code or self.error_code,
             detail=detail or self.message_en,
             message=message,
             **kwargs,

{fastapi_mongo_base-1.3.7 → fastapi_mongo_base-1.3.8}/src/fastapi_mongo_base/utils/usso_routes.py

@@ -420,7 +420,8 @@ class AbstractOwnedUSSORouter(AbstractUSSORouterBase):
         self_action: The action for owned resource (default "owner").
         self_access: Allow list access to own resources (default True).
         workspace_only: When True, owner_id must be a workspace_id;
-                        raises 400 if user has no workspace (default False).
+                        raises 400 if user has no workspace and no broad
+                        resource scope (default False).
     """
 
     owner_attr: str = "owner_id"
@@ -438,6 +439,20 @@ class AbstractOwnedUSSORouter(AbstractUSSORouterBase):
         Callable[[type["AbstractOwnedUSSORouter"], UserData], str] | None
     ) = None  # same as get_owner_id
 
+    def _has_broad_resource_access(self, user: UserData) -> bool:
+        """
+        Return True when the user has an unfiltered scope on this resource.
+
+        Users with e.g. ``*:*`` or ``create:ns/service/resource`` (no query
+        filters) may operate without ``workspace_id`` in their JWT.
+        """
+        return authorization.check_access(
+            user_scopes=user.scopes or [],
+            resource_path=self.resource_path,
+            action="read",
+            filters=None,
+        )
+
     def _resolve_owner_id(self, user: UserData) -> str:
         """Resolve owner_id, raising a clear error if workspace is missing."""
         owner_id = self.get_owner_id(user)
@@ -445,6 +460,7 @@ class AbstractOwnedUSSORouter(AbstractUSSORouterBase):
             self.workspace_only
             and user.claims.get("sub_type") != "agent"
             and not owner_id
+            and not self._has_broad_resource_access(user)
         ):
             raise exceptions.BaseHTTPException(
                 status_code=400,

{fastapi_mongo_base-1.3.7 → fastapi_mongo_base-1.3.8/src/fastapi_mongo_base.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fastapi-mongo-base
-Version: 1.3.7
+Version: 1.3.8
 Summary: A simple boilerplate application, including models and schemas and abstract router, for FastAPI with MongoDB
 Author-email: Mahdi Kiani <mahdikiany@gmail.com>
 Maintainer-email: Mahdi Kiani <mahdikiany@gmail.com>