geek-cafe-saas-sdk 0.6.0__py3-none-any.whl

geek_cafe_saas_sdk/lambda_handlers/_base/public_handler.py

@@ -0,0 +1,53 @@
+"""
+Lambda handler for public endpoints.
+
+Public handler with no authentication required.
+Useful for public APIs, health checks, and configuration endpoints.
+"""
+
+from typing import Dict, Any, Optional
+from .base_handler import BaseLambdaHandler
+
+
+class PublicLambdaHandler(BaseLambdaHandler):
+    """
+    Lambda handler for public endpoints (no authentication).
+    
+    Does not require any authentication or API keys.
+    Use for truly public endpoints like health checks or public configuration.
+    
+    Example:
+        handler = PublicLambdaHandler(
+            require_body=False,
+            convert_case=False
+        )
+        
+        def lambda_handler(event, context):
+            return handler.execute(event, context, get_config)
+        
+        def get_config(event, service, user_context):
+            return {
+                "version": "1.0",
+                "environment": os.getenv("ENVIRONMENT")
+            }
+    """
+    
+    def __init__(self, **kwargs):
+        """
+        Initialize public handler.
+        
+        Args:
+            **kwargs: Arguments passed to BaseLambdaHandler
+        """
+        # Public handlers don't require JWT auth
+        kwargs.setdefault('require_auth', False)
+        super().__init__(**kwargs)
+    
+    def _validate_security(self, event: Dict[str, Any]) -> Optional[Dict[str, Any]]:
+        """
+        Public endpoints have no security validation.
+        
+        Returns:
+            None (always valid)
+        """
+        return None

geek_cafe_saas_sdk/lambda_handlers/_base/secure_handler.py

@@ -0,0 +1,89 @@
+"""
+Secure Lambda handler that relies on API Gateway authorization.
+
+This handler assumes that API Gateway (or ALB) has already validated
+the request using AWS Cognito, IAM, or a custom authorizer.
+The handler trusts that the request has been authenticated.
+"""
+
+from typing import Dict, Any, Optional
+from aws_lambda_powertools import Logger
+
+from .base_handler import BaseLambdaHandler
+
+logger = Logger()
+
+
+class SecureLambdaHandler(BaseLambdaHandler):
+    """
+    Secure handler that relies on API Gateway/ALB authorization.
+    
+    Use this when:
+    - API Gateway has a Cognito authorizer configured
+    - API Gateway has a Lambda authorizer configured
+    - ALB has authentication configured
+    - Request is authenticated before reaching Lambda
+    
+    The handler does NOT perform its own authentication.
+    It trusts the upstream service (API Gateway/ALB).
+    
+    Example:
+        handler = SecureLambdaHandler(
+            service_class=VoteService,
+            require_body=True
+        )
+        
+        def lambda_handler(event, context):
+            return handler.execute(event, context, process_vote)
+        
+        def process_vote(event, service, user_context):
+            # user_context contains claims from API Gateway authorizer
+            payload = event["parsed_body"]
+            return service.create_vote(...)
+    """
+    
+    def __init__(
+        self,
+        require_authorizer_claims: bool = True,
+        **kwargs
+    ):
+        """
+        Initialize the secure handler.
+        
+        Args:
+            require_authorizer_claims: Whether to require authorizer claims in event
+            **kwargs: Arguments passed to BaseLambdaHandler
+        """
+        super().__init__(**kwargs)
+        self.require_authorizer_claims = require_authorizer_claims
+    
+    def _validate_security(self, event: Dict[str, Any]) -> Optional[Dict[str, Any]]:
+        """
+        Validate that request came through authorized API Gateway.
+        
+        Checks for requestContext.authorizer which is populated by
+        API Gateway when using Cognito or Lambda authorizers.
+        
+        Returns:
+            Error response if validation fails, None if valid
+        """
+        if not self.require_authorizer_claims:
+            return None
+        
+        # Check for API Gateway request context
+        request_context = event.get("requestContext", {})
+        authorizer = request_context.get("authorizer", {})
+        
+        # If no authorizer context, this might be a misconfiguration
+        if not authorizer:
+            logger.warning(
+                "SecureLambdaHandler: No authorizer context found. "
+                "Ensure API Gateway has an authorizer configured."
+            )
+            # You can choose to allow or deny here
+            # For now, we'll log a warning but allow (assuming local dev/testing)
+            # In production, you might want to return an error
+        
+        # The handler trusts API Gateway did the auth
+        # User claims are extracted in extract_user_context()
+        return None

geek_cafe_saas_sdk/lambda_handlers/_base/service_pool.py

@@ -0,0 +1,94 @@
+"""
+Service pooling manager for Lambda warm starts.
+
+Manages service initialization and caching to improve Lambda performance
+by reusing connections across invocations.
+"""
+
+from typing import Dict, Type, TypeVar, Generic, Optional
+
+T = TypeVar('T')
+
+
+class ServicePool(Generic[T]):
+    """
+    Manages service instances for Lambda warm starts.
+    
+    Lambda containers reuse the global scope between invocations, allowing
+    us to cache service instances (and their DB connections) to reduce 
+    cold start latency by 80-90%.
+    
+    Example:
+        # Module level
+        vote_service_pool = ServicePool(VoteService)
+        
+        # In handler
+        service = vote_service_pool.get()
+    """
+    
+    def __init__(self, service_class: Type[T]):
+        """
+        Initialize the service pool.
+        
+        Args:
+            service_class: The service class to instantiate
+        """
+        self.service_class = service_class
+        self._instance: Optional[T] = None
+    
+    def get(self) -> T:
+        """
+        Get or create the service instance.
+        
+        Returns:
+            Service instance (cached on warm starts)
+        """
+        if self._instance is None:
+            self._instance = self.service_class()
+        return self._instance
+    
+    def reset(self):
+        """Reset the pool (useful for testing)."""
+        self._instance = None
+
+
+class MultiServicePool:
+    """
+    Manages multiple service instances by class name.
+    
+    Example:
+        pool = MultiServicePool()
+        vote_service = pool.get(VoteService)
+        analytics_service = pool.get(WebsiteAnalyticsService)
+    """
+    
+    def __init__(self):
+        self._pools: Dict[Type, ServicePool] = {}
+    
+    def get(self, service_class: Type[T]) -> T:
+        """
+        Get or create a service instance.
+        
+        Args:
+            service_class: The service class to instantiate
+            
+        Returns:
+            Service instance (cached on warm starts)
+        """
+        if service_class not in self._pools:
+            self._pools[service_class] = ServicePool(service_class)
+        return self._pools[service_class].get()
+    
+    def reset(self, service_class: Optional[Type] = None):
+        """
+        Reset one or all service pools.
+        
+        Args:
+            service_class: Specific class to reset, or None for all
+        """
+        if service_class:
+            if service_class in self._pools:
+                self._pools[service_class].reset()
+        else:
+            for pool in self._pools.values():
+                pool.reset()

geek_cafe_saas_sdk/lambda_handlers/directories/create/app.py

@@ -0,0 +1,79 @@
+"""
+Lambda handler for creating directories.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.directory_service import DirectoryService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """Create directory handler."""
+    try:
+        if isinstance(event.get('body'), str):
+            body = json.loads(event['body'])
+        else:
+            body = event.get('body', {})
+        
+        tenant_id = body.get('tenant_id')
+        user_id = body.get('user_id')
+        directory_name = body.get('directory_name')
+        parent_directory_id = body.get('parent_directory_id')
+        description = body.get('description')
+        
+        if not all([tenant_id, user_id, directory_name]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required fields'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        dir_service = DirectoryService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = dir_service.create(
+            tenant_id=tenant_id,
+            user_id=user_id,
+            directory_name=directory_name,
+            parent_directory_id=parent_directory_id,
+            description=description
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 201,
+                'body': json.dumps({
+                    'success': True,
+                    'data': result.data.to_dictionary()
+                })
+            }
+        else:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/directories/delete/app.py

@@ -0,0 +1,76 @@
+"""
+Lambda handler for deleting directories.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.directory_service import DirectoryService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """Delete directory handler."""
+    try:
+        path_params = event.get('pathParameters', {})
+        query_params = event.get('queryStringParameters', {})
+        
+        directory_id = path_params.get('directory_id')
+        tenant_id = query_params.get('tenant_id')
+        user_id = query_params.get('user_id')
+        hard_delete = query_params.get('hard_delete', 'false').lower() == 'true'
+        
+        if not all([directory_id, tenant_id, user_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        dir_service = DirectoryService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = dir_service.delete(
+            resource_id=directory_id,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            hard_delete=hard_delete
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'message': 'Directory deleted successfully'
+                })
+            }
+        else:
+            status_code = 404 if result.error_code == 'NOT_FOUND' else 403
+            return {
+                'statusCode': status_code,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/directories/get/app.py

@@ -0,0 +1,74 @@
+"""
+Lambda handler for getting directory metadata.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.directory_service import DirectoryService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """Get directory handler."""
+    try:
+        path_params = event.get('pathParameters', {})
+        query_params = event.get('queryStringParameters', {})
+        
+        directory_id = path_params.get('directory_id')
+        tenant_id = query_params.get('tenant_id')
+        user_id = query_params.get('user_id')
+        
+        if not all([directory_id, tenant_id, user_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        dir_service = DirectoryService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = dir_service.get_by_id(
+            resource_id=directory_id,
+            tenant_id=tenant_id,
+            user_id=user_id
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'data': result.data.to_dictionary()
+                })
+            }
+        else:
+            status_code = 404 if result.error_code == 'NOT_FOUND' else 403
+            return {
+                'statusCode': status_code,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/directories/list/app.py

@@ -0,0 +1,75 @@
+"""
+Lambda handler for listing directories.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.directory_service import DirectoryService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """List directories handler."""
+    try:
+        query_params = event.get('queryStringParameters', {})
+        
+        tenant_id = query_params.get('tenant_id')
+        user_id = query_params.get('user_id')
+        parent_directory_id = query_params.get('parent_directory_id')
+        limit = int(query_params.get('limit', '100'))
+        
+        if not all([tenant_id, user_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        dir_service = DirectoryService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = dir_service.list_by_parent(
+            tenant_id=tenant_id,
+            parent_directory_id=parent_directory_id,
+            user_id=user_id,
+            limit=limit
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'data': [d.to_dictionary() for d in result.data],
+                    'count': len(result.data)
+                })
+            }
+        else:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/directories/move/app.py

@@ -0,0 +1,79 @@
+"""
+Lambda handler for moving directories.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.directory_service import DirectoryService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """Move directory handler."""
+    try:
+        path_params = event.get('pathParameters', {})
+        
+        if isinstance(event.get('body'), str):
+            body = json.loads(event['body'])
+        else:
+            body = event.get('body', {})
+        
+        directory_id = path_params.get('directory_id')
+        tenant_id = body.get('tenant_id')
+        user_id = body.get('user_id')
+        new_parent_id = body.get('new_parent_id')
+        
+        if not all([directory_id, tenant_id, user_id, new_parent_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        dir_service = DirectoryService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = dir_service.move(
+            directory_id=directory_id,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            new_parent_id=new_parent_id
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'data': result.data.to_dictionary()
+                })
+            }
+        else:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }