geek-cafe-saas-sdk 0.6.0__py3-none-any.whl

geek_cafe_saas_sdk/lambda_handlers/files/shares/list/app.py

@@ -0,0 +1,84 @@
+"""
+Lambda handler for listing file shares.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.file_share_service import FileShareService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """List shares handler."""
+    try:
+        query_params = event.get('queryStringParameters', {})
+        
+        tenant_id = query_params.get('tenant_id')
+        user_id = query_params.get('user_id')
+        file_id = query_params.get('file_id')
+        limit = int(query_params.get('limit', '50'))
+        
+        if not all([tenant_id, user_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        share_service = FileShareService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        if file_id:
+            # List shares for a specific file
+            result = share_service.list_shares_by_file(
+                tenant_id=tenant_id,
+                file_id=file_id,
+                user_id=user_id,
+                limit=limit
+            )
+        else:
+            # List shares with current user
+            result = share_service.list_shares_with_user(
+                tenant_id=tenant_id,
+                user_id=user_id,
+                limit=limit
+            )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'data': [s.to_dictionary() for s in result.data],
+                    'count': len(result.data)
+                })
+            }
+        else:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/files/shares/revoke/app.py

@@ -0,0 +1,76 @@
+"""
+Lambda handler for revoking file shares.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from geek_cafe_saas_sdk.domains.files.services.file_share_service import FileShareService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """Revoke share handler."""
+    try:
+        path_params = event.get('pathParameters', {})
+        query_params = event.get('queryStringParameters', {})
+        
+        share_id = path_params.get('share_id')
+        tenant_id = query_params.get('tenant_id')
+        user_id = query_params.get('user_id')
+        file_id = query_params.get('file_id')
+        
+        if not all([share_id, tenant_id, user_id, file_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters'
+                })
+            }
+        
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        db = DynamoDB()
+        
+        share_service = FileShareService(
+            dynamodb=db,
+            table_name=table_name
+        )
+        
+        result = share_service.delete(
+            resource_id=share_id,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            file_id=file_id
+        )
+        
+        if result.success:
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'message': 'Share revoked successfully'
+                })
+            }
+        else:
+            status_code = 404 if result.error_code == 'NOT_FOUND' else 403
+            return {
+                'statusCode': status_code,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': str(e)
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/files/update/app.py

@@ -0,0 +1,143 @@
+"""
+Lambda handler for updating file metadata.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from boto3_assist.s3.s3_connection import S3Connection
+from boto3_assist.s3.s3_object import S3Object
+from boto3_assist.s3.s3_bucket import S3Bucket
+
+from geek_cafe_saas_sdk.domains.files.services.file_system_service import FileSystemService
+from geek_cafe_saas_sdk.domains.files.services.s3_file_service import S3FileService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """
+    Update file metadata handler.
+    
+    Expected Event:
+    {
+        "pathParameters": {
+            "file_id": "file-123"
+        },
+        "body": {
+            "tenant_id": "tenant-456",
+            "user_id": "user-789",
+            "updates": {
+                "file_name": "Updated Name.pdf",
+                "description": "New description",
+                "tags": ["updated", "tags"],
+                "directory_id": "new-dir-id"
+            }
+        }
+    }
+    
+    Returns:
+    {
+        "statusCode": 200,
+        "body": {
+            "success": true,
+            "data": {
+                "file_id": "file-123",
+                "file_name": "Updated Name.pdf",
+                ...
+            }
+        }
+    }
+    """
+    try:
+        # Parse request
+        path_params = event.get('pathParameters', {})
+        
+        if isinstance(event.get('body'), str):
+            body = json.loads(event['body'])
+        else:
+            body = event.get('body', {})
+        
+        file_id = path_params.get('file_id')
+        tenant_id = body.get('tenant_id')
+        user_id = body.get('user_id')
+        updates = body.get('updates', {})
+        
+        # Validate required fields
+        if not all([file_id, tenant_id, user_id]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required parameters: file_id, tenant_id, user_id'
+                })
+            }
+        
+        if not updates:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'No updates provided'
+                })
+            }
+        
+        # Initialize services
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        bucket_name = os.environ.get('S3_BUCKET_NAME', 'files-bucket')
+        
+        db = DynamoDB()
+        connection = S3Connection()
+        
+        s3_service = S3FileService(
+            s3_object=S3Object(connection=connection),
+            s3_bucket=S3Bucket(connection=connection),
+            default_bucket=bucket_name
+        )
+        
+        file_service = FileSystemService(
+            dynamodb=db,
+            table_name=table_name,
+            s3_service=s3_service,
+            default_bucket=bucket_name
+        )
+        
+        # Update file
+        result = file_service.update(
+            resource_id=file_id,
+            tenant_id=tenant_id,
+            user_id=user_id,
+            updates=updates
+        )
+        
+        if result.success:
+            file = result.data
+            return {
+                'statusCode': 200,
+                'body': json.dumps({
+                    'success': True,
+                    'data': file.to_dictionary()
+                })
+            }
+        else:
+            status_code = 404 if result.error_code == 'NOT_FOUND' else 403
+            return {
+                'statusCode': status_code,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message,
+                    'error_code': result.error_code
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': f'Internal server error: {str(e)}'
+            })
+        }

geek_cafe_saas_sdk/lambda_handlers/files/upload/app.py

@@ -0,0 +1,151 @@
+"""
+Lambda handler for file upload.
+
+Geek Cafe, LLC
+MIT License. See Project Root for the license information.
+"""
+
+import json
+import base64
+import os
+from typing import Dict, Any
+
+from boto3_assist.dynamodb.dynamodb import DynamoDB
+from boto3_assist.s3.s3_connection import S3Connection
+from boto3_assist.s3.s3_object import S3Object
+from boto3_assist.s3.s3_bucket import S3Bucket
+
+from geek_cafe_saas_sdk.domains.files.services.file_system_service import FileSystemService
+from geek_cafe_saas_sdk.domains.files.services.s3_file_service import S3FileService
+
+
+def lambda_handler(event: Dict[str, Any], context: Any) -> Dict[str, Any]:
+    """
+    Upload file handler.
+    
+    Expected Event:
+    {
+        "body": {
+            "tenant_id": "tenant-123",
+            "user_id": "user-456",
+            "file_name": "document.pdf",
+            "file_data": "base64_encoded_content",
+            "mime_type": "application/pdf",
+            "directory_id": "dir-789",  # Optional
+            "versioning_strategy": "explicit",  # Optional
+            "description": "Monthly report",  # Optional
+            "tags": ["report", "monthly"]  # Optional
+        }
+    }
+    
+    Returns:
+    {
+        "statusCode": 201,
+        "body": {
+            "success": true,
+            "data": {
+                "file_id": "file-123",
+                "file_name": "document.pdf",
+                "s3_key": "tenant-123/files/...",
+                "file_size": 12345
+            }
+        }
+    }
+    """
+    try:
+        # Parse request body
+        if isinstance(event.get('body'), str):
+            body = json.loads(event['body'])
+        else:
+            body = event.get('body', {})
+        
+        # Extract parameters
+        tenant_id = body.get('tenant_id')
+        user_id = body.get('user_id')
+        file_name = body.get('file_name')
+        file_data_b64 = body.get('file_data')
+        mime_type = body.get('mime_type', 'application/octet-stream')
+        directory_id = body.get('directory_id')
+        versioning_strategy = body.get('versioning_strategy', 's3_native')
+        description = body.get('description')
+        tags = body.get('tags', [])
+        
+        # Validate required fields
+        if not all([tenant_id, user_id, file_name, file_data_b64]):
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': 'Missing required fields: tenant_id, user_id, file_name, file_data'
+                })
+            }
+        
+        # Decode file data
+        file_data = base64.b64decode(file_data_b64)
+        
+        # Initialize services
+        table_name = os.environ.get('DYNAMODB_TABLE_NAME', 'files-table')
+        bucket_name = os.environ.get('S3_BUCKET_NAME', 'files-bucket')
+        
+        db = DynamoDB()
+        connection = S3Connection()
+        
+        s3_service = S3FileService(
+            s3_object=S3Object(connection=connection),
+            s3_bucket=S3Bucket(connection=connection),
+            default_bucket=bucket_name
+        )
+        
+        file_service = FileSystemService(
+            dynamodb=db,
+            table_name=table_name,
+            s3_service=s3_service,
+            default_bucket=bucket_name
+        )
+        
+        # Upload file
+        result = file_service.create(
+            tenant_id=tenant_id,
+            user_id=user_id,
+            file_name=file_name,
+            file_data=file_data,
+            mime_type=mime_type,
+            directory_id=directory_id,
+            versioning_strategy=versioning_strategy,
+            description=description,
+            tags=tags
+        )
+        
+        if result.success:
+            file = result.data
+            return {
+                'statusCode': 201,
+                'body': json.dumps({
+                    'success': True,
+                    'data': {
+                        'file_id': file.file_id,
+                        'file_name': file.file_name,
+                        's3_key': file.s3_key,
+                        'file_size': file.file_size,
+                        'created_utc_ts': file.created_utc_ts
+                    }
+                })
+            }
+        else:
+            return {
+                'statusCode': 400,
+                'body': json.dumps({
+                    'success': False,
+                    'message': result.message,
+                    'error_code': result.error_code
+                })
+            }
+    
+    except Exception as e:
+        return {
+            'statusCode': 500,
+            'body': json.dumps({
+                'success': False,
+                'message': f'Internal server error: {str(e)}'
+            })
+        }

geek_cafe_saas_sdk/middleware/__init__.py

@@ -0,0 +1,36 @@
+"""
+Middleware decorators for Lambda functions.
+"""
+
+from .auth import require_auth, extract_user_context
+from .cors import handle_cors
+from .error_handling import handle_errors
+from .validation import validate_request_body
+from .authorization import (
+    require_authorization,
+    Permission,
+    Operation,
+    AuthContext,
+    ResourceContext,
+    AuthorizationResult,
+    AuthorizationMiddleware,
+    extract_auth_context,
+    extract_resource_context
+)
+
+__all__ = [
+    "require_auth",
+    "extract_user_context",
+    "handle_cors",
+    "handle_errors",
+    "validate_request_body",
+    "require_authorization",
+    "Permission",
+    "Operation",
+    "AuthContext",
+    "ResourceContext",
+    "AuthorizationResult",
+    "AuthorizationMiddleware",
+    "extract_auth_context",
+    "extract_resource_context"
+]

geek_cafe_saas_sdk/middleware/auth.py

@@ -0,0 +1,85 @@
+"""
+Authentication middleware for Lambda handlers.
+"""
+import json
+import functools
+from typing import Dict, Any, Callable
+
+
+def require_auth(handler: Callable) -> Callable:
+    """
+    Decorator that ensures the request has valid authentication.
+    Expects API Gateway authorizer to populate requestContext.authorizer.
+    """
+    @functools.wraps(handler)
+    def wrapper(event: Dict[str, Any], context: Any, *args, **kwargs) -> Dict[str, Any]:
+        # Check if authorizer context exists
+        request_context = event.get('requestContext', {})
+        authorizer = request_context.get('authorizer', {})
+        
+        if not authorizer:
+            return {
+                'statusCode': 401,
+                'headers': {
+                    'Content-Type': 'application/json',
+                    'Access-Control-Allow-Origin': '*'
+                },
+                'body': json.dumps({
+                    'error': 'Unauthorized',
+                    'error_code': 'AUTH_REQUIRED',
+                    'message': 'Missing authorizer context'
+                })
+            }
+        
+        # Validate required auth fields
+        claims = authorizer.get('claims', {})
+        required_fields = ['custom:user_id', 'custom:tenant_id']
+        for field in required_fields:
+            if not claims.get(field):
+                return {
+                    'statusCode': 401,
+                    'headers': {
+                        'Content-Type': 'application/json',
+                        'Access-Control-Allow-Origin': '*'
+                    },
+                    'body': json.dumps({
+                        'error': f'Missing required auth field: {field}',
+                        'error_code': 'AUTH_INVALID',
+                        'message': 'Missing required auth field'
+                    })
+                }
+        
+        # Call the original handler
+        return handler(event, context, *args, **kwargs)
+    
+    return wrapper
+
+
+def extract_user_context(event: Dict[str, Any]) -> Dict[str, str]:
+    """
+    Extract user context from API Gateway authorizer.
+    
+    Returns:
+        Dict containing user_id, tenant_id, roles, permissions, inboxes, and other claims
+    """
+    authorizer = event.get('requestContext', {}).get('authorizer', {})
+    claims = authorizer.get('claims', {})
+    
+    # Parse comma-separated custom claims (strip whitespace and filter empty)
+    def parse_csv_claim(claim_value: str) -> list:
+        """Parse comma-separated claim value into list."""
+        if not claim_value:
+            return []
+        return [item.strip() for item in claim_value.split(',') if item.strip()]
+    
+    return {
+        'user_id': claims.get('custom:user_id'),
+        'tenant_id': claims.get('custom:tenant_id'),
+        'roles': parse_csv_claim(claims.get('custom:roles', '')),
+        'permissions': parse_csv_claim(claims.get('custom:permissions', '')),
+        'inboxes': parse_csv_claim(claims.get('custom:inboxes', '')),
+        'shared_tenants': parse_csv_claim(claims.get('custom:shared_tenants', '')),
+        'email': claims.get('email'),
+        'name': claims.get('name'),
+        'sub': claims.get('sub')  # Cognito user ID
+    }