iatoolkit 0.59.2__py3-none-any.whl → 0.60.0__py3-none-any.whl

iatoolkit/common/routes.py

@@ -3,17 +3,9 @@
 #
 # IAToolkit is open source software.
 
-from flask import render_template, redirect, flash, url_for,send_from_directory, current_app, abort
-from iatoolkit.common.session_manager import SessionManager
+from flask import render_template, redirect, url_for,send_from_directory, current_app, abort
 from flask import jsonify
 from iatoolkit.views.history_api_view import HistoryApiView
-import os
-
-
-def logout(company_short_name: str):
-    SessionManager.clear()
-    flash("Has cerrado sesión correctamente", "info")
-    return redirect(url_for('index', company_short_name=company_short_name))
 
 
 # this function register all the views
@@ -22,8 +14,8 @@ def register_views(injector, app):
     from iatoolkit.views.index_view import IndexView
     from iatoolkit.views.init_context_api_view import InitContextApiView
     from iatoolkit.views.llmquery_api_view import LLMQueryApiView
-    from iatoolkit.views.tasks_view import TaskView
-    from iatoolkit.views.tasks_review_view import TaskReviewView
+    from iatoolkit.views.tasks_api_view import TaskApiView
+    from iatoolkit.views.tasks_review_api_view import TaskReviewApiView
     from iatoolkit.views.login_simulation_view import LoginSimulationView
     from iatoolkit.views.signup_view import SignupView
     from iatoolkit.views.verify_user_view import VerifyAccountView
@@ -32,9 +24,10 @@ def register_views(injector, app):
     from iatoolkit.views.file_store_api_view import FileStoreApiView
     from iatoolkit.views.user_feedback_api_view import UserFeedbackApiView
     from iatoolkit.views.prompt_api_view import PromptApiView
-    from iatoolkit.views.chat_token_request_view import ChatTokenRequestView
     from iatoolkit.views.login_view import LoginView, FinalizeContextView
     from iatoolkit.views.external_login_view import ExternalLoginView, RedeemTokenApiView
+    from iatoolkit.views.logout_api_view import LogoutApiView
+
 
     # iatoolkit home page
     app.add_url_rule('/<company_short_name>', view_func=IndexView.as_view('index'))
@@ -57,23 +50,21 @@ def register_views(injector, app):
         view_func=FinalizeContextView.as_view('finalize_with_token')
     )
 
+    # logout
+    app.add_url_rule('/<company_short_name>/api/logout',
+                     view_func=LogoutApiView.as_view('logout'))
+
     # this endpoint is called by the JS for changing the token for a session
     app.add_url_rule('/<string:company_short_name>/api/redeem_token',
                      view_func = RedeemTokenApiView.as_view('redeem_token'))
 
-    # this endpoint is for requesting a chat token for external users
-    app.add_url_rule('/auth/chat_token',
-                     view_func=ChatTokenRequestView.as_view('chat-token'))
-
-    # init (reset) the company context (with api-key)
+    # init (reset) the company context
     app.add_url_rule('/<company_short_name>/api/init-context',
                      view_func=InitContextApiView.as_view('init-context'),
                      methods=['POST', 'OPTIONS'])
 
     # register new user, account verification and forgot password
     app.add_url_rule('/<company_short_name>/signup',view_func=SignupView.as_view('signup'))
-    app.add_url_rule('/<company_short_name>/logout', 'logout', logout)
-    app.add_url_rule('/logout', 'logout', logout)
     app.add_url_rule('/<company_short_name>/verify/<token>', view_func=VerifyAccountView.as_view('verify_account'))
     app.add_url_rule('/<company_short_name>/forgot-password', view_func=ForgotPasswordView.as_view('forgot_password'))
     app.add_url_rule('/<company_short_name>/change-password/<token>', view_func=ChangePasswordView.as_view('change_password'))
@@ -90,8 +81,8 @@ def register_views(injector, app):
     app.add_url_rule('/<company_short_name>/api/history', view_func=HistoryApiView.as_view('history'))
 
     # tasks management endpoints: create task, and review answer
-    app.add_url_rule('/tasks', view_func=TaskView.as_view('tasks'))
-    app.add_url_rule('/tasks/review/<int:task_id>', view_func=TaskReviewView.as_view('tasks-review'))
+    app.add_url_rule('/tasks', view_func=TaskApiView.as_view('tasks'))
+    app.add_url_rule('/tasks/review/<int:task_id>', view_func=TaskReviewApiView.as_view('tasks-review'))
 
     # this endpoint is for upload documents into the vector store (api-key)
     app.add_url_rule('/api/load', view_func=FileStoreApiView.as_view('load_api'))

iatoolkit/iatoolkit.py

@@ -16,10 +16,10 @@ import os
 from typing import Optional, Dict, Any
 from iatoolkit.repositories.database_manager import DatabaseManager
 from werkzeug.middleware.proxy_fix import ProxyFix
-from injector import Binder, singleton, Injector
+from injector import Binder, Injector, singleton
 from importlib.metadata import version as _pkg_version, PackageNotFoundError
 
-IATOOLKIT_VERSION = "0.59.2"
+IATOOLKIT_VERSION = "0.60.0"
 
 # global variable for the unique instance of IAToolkit
 _iatoolkit_instance: Optional['IAToolkit'] = None
@@ -52,7 +52,7 @@ class IAToolkit:
         self.app = None
         self.db_manager = None
         self._injector = None
-        self.version = IATOOLKIT_VERSION
+        self.version = IATOOLKIT_VERSION    # default version
 
     @classmethod
     def get_instance(cls) -> 'IAToolkit':
@@ -324,8 +324,8 @@ class IAToolkit:
         from iatoolkit.services.auth_service import AuthService
         from iatoolkit.common.util import Utility
 
-        binder.bind(LLMProxy, to=LLMProxy, scope=singleton)
-        binder.bind(llmClient, to=llmClient, scope=singleton)
+        binder.bind(LLMProxy, to=LLMProxy)
+        binder.bind(llmClient, to=llmClient)
         binder.bind(GoogleChatApp, to=GoogleChatApp)
         binder.bind(MailApp, to=MailApp)
         binder.bind(AuthService, to=AuthService)

iatoolkit/services/auth_service.py

@@ -91,9 +91,10 @@ class AuthService:
             )
             return {'success': False, 'error': 'No se pudo crear la sesión del usuario'}
 
-    def verify(self) -> dict:
+    def verify(self, anonymous: bool = False) -> dict:
         """
         Verifies the current request and identifies the user.
+        If anonymous is True the non-presence of use_identifier is ignored
 
         Returns a dictionary with:
         - success: bool
@@ -118,31 +119,37 @@ class AuthService:
         if isinstance(auth, str) and auth.lower().startswith('bearer '):
             api_key =  auth.split(' ', 1)[1].strip()
 
-        if api_key:
-            api_key_entry = self.profile_service.get_active_api_key_entry(api_key)
-            if not api_key_entry:
-                logging.info(f"Invalid or inactive API Key {api_key}")
-                return {"success": False, "error_message": "Invalid or inactive API Key", "status_code": 401}
+        if not api_key:
+            # --- Failure: No valid credentials found ---
+            logging.info(f"Authentication required. No session cookie or API Key provided.")
+            return {"success": False,
+                    "error_message": "Authentication required. No session cookie or API Key provided.",
+                    "status_code": 401}
+
+        # check if the api-key is valid and active
+        api_key_entry = self.profile_service.get_active_api_key_entry(api_key)
+        if not api_key_entry:
+            logging.info(f"Invalid or inactive API Key {api_key}")
+            return {"success": False, "error_message": "Invalid or inactive API Key",
+                    "status_code": 402}
+
+        # get the company from the api_key_entry
+        company = api_key_entry.company
+
+        # For API calls, the external_user_id must be provided in the request.
+        data = request.get_json(silent=True) or {}
+        user_identifier = data.get('user_identifier', '')
+        if not anonymous and not user_identifier:
+            logging.info(f"No user_identifier provided for API call.")
+            return {"success": False, "error_message": "No user_identifier provided for API call.",
+                    "status_code": 403}
+
+        return {
+            "success": True,
+            "company_short_name": company.short_name,
+            "user_identifier": user_identifier
+        }
 
-            # obtain the company from the api_key_entry
-            company = api_key_entry.company
-
-            # For API calls, the external_user_id must be provided in the request.
-            user_identifier = ''
-            if request.is_json:
-                data = request.get_json() or {}
-                user_identifier = data.get('user_identifier', '')
-
-            return {
-                "success": True,
-                "company_short_name": company.short_name,
-                "user_identifier": user_identifier
-            }
-
-        # --- Failure: No valid credentials found ---
-        logging.info(f"Authentication required. No session cookie or API Key provided. session: {str(session_info)}")
-        return {"success": False, "error_message": "Authentication required. No session cookie or API Key provided.",
-                "status_code": 402}
 
     def log_access(self,
                    company_short_name: str,

iatoolkit/services/profile_service.py

@@ -131,6 +131,7 @@ class ProfileService:
             "profile": profile
         }
 
+
     def get_profile_by_identifier(self, company_short_name: str, user_identifier: str) -> dict:
         """
         Fetches a user profile directly by their identifier, bypassing the Flask session.

iatoolkit/static/js/{chat_feedback.js → chat_feedback_button.js}

@@ -42,14 +42,11 @@ $(document).ready(function () {
         submitButton.html('<i class="bi bi-send me-1 icon-spaced"></i>Enviando...');
 
         const response = await sendFeedback(feedbackText);
-
         $('#feedbackModal').modal('hide');
-
-        if (response) {
-            Swal.fire({ icon: 'success', title: 'Feedback enviado', text: 'Gracias por tu comentario.' });
-        } else {
-            Swal.fire({ icon: 'error', title: 'Error', text: 'No se pudo enviar el feedback, intente nuevamente.' });
-        }
+        if (response)
+            toastr.success('¡Gracias por tu comentario!', 'Feedback Enviado');
+        else
+            toastr.error('No se pudo enviar el feedback, por favor intente nuevamente.', 'Error');
     });
 
     // Evento para abrir el modal de feedback

iatoolkit/static/js/chat_main.js

@@ -1,7 +1,6 @@
 // Global variables for request management
 let isRequestInProgress = false;
 let abortController = null;
-
 let selectedPrompt = null; // Will hold a lightweight prompt object
 
 $(document).ready(function () {
@@ -325,13 +324,6 @@ const callToolkit = async function(apiPath, data, method, timeoutMs = 500000) {
         clearTimeout(timeoutId);
 
         if (!response.ok) {
-            if (response.status === 401) {
-                const errorMessage = `Tu sesión ha expirado. `;
-                const errorIcon = '<i class="bi bi-exclamation-triangle"></i>';
-                const infrastructureError = $('<div>').addClass('error-section').html(errorIcon + `<p>${errorMessage}</p>`);
-                displayBotMessage(infrastructureError);
-                return null;
-                }
             try {
                 // Intentamos leer el error como JSON, que es el formato esperado de nuestra API.
                 const errorData = await response.json();

iatoolkit/static/js/{chat_onboarding.js → chat_onboarding_button.js}

@@ -1,4 +1,3 @@
-// static/js/chat_onboarding.js
 (function (global) {
   function qs(root, sel) { return (typeof sel === 'string') ? root.querySelector(sel) : sel; }
 

iatoolkit/static/js/{chat_context_reload.js → chat_reload_button.js}

@@ -30,12 +30,10 @@ document.addEventListener('DOMContentLoaded', function() {
             // 4. Procesar la respuesta
             // callToolkit devuelve null si hubo un error que ya mostró en el chat.
             if (data) {
-                if (data.status === 'OK') {
+                if (data.status === 'OK')
                     toastr.success(data.message || 'Contexto recargado exitosamente.');
-                } else {
-                    // El servidor respondió 200 OK pero con un mensaje de error en el cuerpo
+                else
                     toastr.error(data.error_message || 'Ocurrió un error desconocido durante la recarga.');
-                }
             } else {
                 // Si data es null, callToolkit ya manejó el error (mostrando un mensaje en el chat).
                 // Añadimos un toast para notificar al usuario que algo falló.

iatoolkit/static/styles/chat_iatoolkit.css

@@ -455,3 +455,47 @@
 #send-button i {
     color: var(--brand-send-button-color);
 }
+
+/* Estilos personalizados para Toastr usando las variables de Branding */
+
+/* --- Toast de Información (Usa el color primario de la marca) --- */
+.toast-info {
+  /* ¡Importante! Usamos las variables CSS de tu BrandingService */
+  background-color: var(--brand-primary-color) !important;
+  color: var(--brand-text-on-primary) !important;
+  opacity: 0.95 !important;
+}
+.toast-info .toast-progress {
+  /* Usamos un color ligeramente más oscuro o una variante,
+     pero para simplificar, podemos empezar con el mismo */
+  background-color: rgba(0, 0, 0, 0.2) !important;
+}
+
+/* --- Toast de Éxito (Usa el verde por defecto o uno de marca si lo defines) --- */
+.toast-success {
+  background-color: #198754 !important; /* Puedes crear una variable --brand-success-color si quieres */
+  color: #ffffff !important;
+  opacity: 0.95 !important;
+}
+.toast-success .toast-progress {
+  background-color: rgba(0, 0, 0, 0.2) !important;
+}
+
+/* --- Toast de Error (Usa el color de peligro de la marca) --- */
+.toast-error {
+  background-color: var(--brand-danger-color) !important;
+  color: var(--brand-text-on-primary) !important; /* Asumimos texto blanco sobre el color de peligro */
+  opacity: 0.95 !important;
+}
+.toast-error .toast-progress {
+  background-color: rgba(0, 0, 0, 0.2) !important;
+}
+
+/* Opcional: Estilo para el botón de cierre para que contraste bien */
+.toast-close-button {
+    color: var(--brand-text-on-primary) !important;
+    text-shadow: none !important;
+}
+.toast-close-button:hover {
+    opacity: 0.8;
+}

iatoolkit/templates/chat.html

@@ -40,7 +40,8 @@
         <div class="vr mx-3"></div>
 
         <!-- 3. Iconos de Acción -->
-        <a href="javascript:void(0);" id="history-button"
+        <a href="javascript:void(0);"
+           id="history-button"
            class="action-icon-style" title="Historial con mis consultas" style="color: {{ branding.header_text_color }};">
             <i class="bi bi-clock-history"></i>
         </a>
@@ -51,19 +52,23 @@
            style="color: {{ branding.header_text_color }};">
             <i class="bi bi-arrow-clockwise"></i>
         </a>
-        <a href="javascript:void(0);" id="send-feedback-button"
+        <a href="javascript:void(0);"
+           id="send-feedback-button"
            class="ms-3 action-icon-style" title="Tu feedback es muy importante" style="color: {{ branding.header_text_color }};">
             <i class="bi bi-emoji-smile"></i>
         </a>
-        <a href="javascript:void(0);" id="onboarding-button"
+        <a href="javascript:void(0);"
+           id="onboarding-button"
            class="ms-3 action-icon-style" title="Ver onboarding"
            style="color: {{ branding.header_text_color }};">
             <i class="bi bi-lightbulb"></i>
         </a>
 
         <!-- Icono de cerrar sesión (al final) -->
-        <a href="{{ url_for('logout', company_short_name=company_short_name, _external=True) }}"
-           class="ms-3 action-icon-style" title="Cerrar sesión" style="color: {{ branding.header_text_color }} !important;">
+        <a href="javascript:void(0);"
+           id="logout-button"
+           class="ms-3 action-icon-style" title="Cerrar sesión"
+           style="color: {{ branding.header_text_color }}; !important;">
             <i class="bi bi-box-arrow-right"></i>
         </a>
     </div>
@@ -192,13 +197,16 @@
 </script>
 
 <!-- Carga de los scripts JS externos después de definir las variables globales -->
-<script src="{{ url_for('static', filename='js/chat_onboarding.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_onboarding_button.js', _external=True) }}"></script>
 <script src="{{ url_for('static', filename='js/chat_filepond.js', _external=True) }}"></script>
-<script src="{{ url_for('static', filename='js/chat_history.js', _external=True) }}"></script>
-<script src="{{ url_for('static', filename='js/chat_feedback.js', _external=True) }}"></script>
-    <script src="{{ url_for('static', filename='js/chat_context_reload.js', _external=True) }}"></script><script src="{{ url_for('static', filename='js/chat_main.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_history_button.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_feedback_button.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_reload_button.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_main.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_logout_button.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_main.js', _external=True) }}"></script>
 
-<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.css">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.css">
 <script src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js"></script>
 <script src="https://cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.js"></script>
 

iatoolkit/templates/onboarding_shell.html

@@ -71,7 +71,7 @@
 {% block scripts %}
 <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css">
 
-<script src="{{ url_for('static', filename='js/chat_onboarding.js', _external=True) }}"></script>
+<script src="{{ url_for('static', filename='js/chat_onboarding_button.js', _external=True) }}"></script>
 <script>
   (function() {
     const cardsData = {{ onboarding_cards | tojson }};

iatoolkit/views/change_password_view.py

@@ -37,8 +37,8 @@ class ChangePasswordView(MethodView):
             email = self.serializer.loads(token, salt='password-reset', max_age=3600)
         except SignatureExpired as e:
             return render_template('forgot_password.html',
-                                   branding=branding_data,
-                        alert_message="El enlace de cambio de contraseña ha expirado. Por favor, solicita uno nuevo.")
+                                branding=branding_data,
+                                alert_message="El enlace de cambio de contraseña ha expirado. Por favor, solicita uno nuevo.")
 
         return render_template('change_password.html',
                                company_short_name=company_short_name,

iatoolkit/views/external_login_view.py

@@ -15,22 +15,16 @@ class ExternalLoginView(BaseLoginView):
     Authenticates and then delegates the path decision (fast/slow) to the base class.
     """
     def post(self, company_short_name: str):
-        data = request.get_json()
-        if not data or 'user_identifier' not in data:
-            return jsonify({"error": "Falta user_identifier"}), 400
+        # Authenticate the API call.
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
 
         company = self.profile_service.get_company_by_short_name(company_short_name)
         if not company:
             return jsonify({"error": "Empresa no encontrada"}), 404
 
-        user_identifier = data.get('user_identifier')
-        if not user_identifier:
-            return jsonify({"error": "missing user_identifier"}), 404
-
-        # 1. Authenticate the API call.
-        auth_response = self.auth_service.verify()
-        if not auth_response.get("success"):
-            return jsonify(auth_response), 401
+        user_identifier = auth_result.get('user_identifier')
 
         # 2. Create the external user session.
         self.profile_service.create_external_user_profile_context(company, user_identifier)

iatoolkit/views/file_store_api_view.py

@@ -15,24 +15,27 @@ import base64
 class FileStoreApiView(MethodView):
     @inject
     def __init__(self,
-                 iauthentication: AuthService,
+                 auth_service: AuthService,
                  doc_service: LoadDocumentsService,
                  profile_repo: ProfileRepo,):
-        self.iauthentication = iauthentication
+        self.auth_service = auth_service
         self.doc_service = doc_service
         self.profile_repo = profile_repo
 
     def post(self):
         try:
-            req_data = request.get_json()
+            # 1. Authenticate the API request.
+            auth_result = self.auth_service.verify()
+            if not auth_result.get("success"):
+                return jsonify(auth_result), auth_result.get("status_code")
 
+            req_data = request.get_json()
             required_fields = ['company', 'filename', 'content']
             for field in required_fields:
                 if field not in req_data:
                     return jsonify({"error": f"El campo {field} es requerido"}), 400
 
             company_short_name = req_data.get('company', '')
-            requested_name = req_data.get('username', 'external_user')
             filename = req_data.get('filename', False)
             base64_content = req_data.get('content', '')
             metadata = req_data.get('metadata', {})
@@ -42,11 +45,6 @@ class FileStoreApiView(MethodView):
             if not company:
                 return jsonify({"error": f"La empresa {company_short_name} no existe"}), 400
 
-            # get access credentials
-            iaut = self.iauthentication.verify()
-            if not iaut.get("success"):
-                return jsonify(iaut), 401
-
             # get the file content from base64
             content = base64.b64decode(base64_content)
 

iatoolkit/views/history_api_view.py

@@ -6,7 +6,7 @@
 from flask import request, jsonify
 from flask.views import MethodView
 from iatoolkit.services.history_service import HistoryService
-from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.services.auth_service import AuthService
 from injector import inject
 import logging
 
@@ -19,18 +19,18 @@ class HistoryApiView(MethodView):
 
     @inject
     def __init__(self,
-                 profile_service: ProfileService,
+                 auth_service: AuthService,
                  history_service: HistoryService):
-        self.profile_service = profile_service
+        self.auth_service = auth_service
         self.history_service = history_service
 
     def post(self, company_short_name: str):
-        # 1. Get the authenticated user's info from the unified session.
-        session_info = self.profile_service.get_current_session_info()
-        user_identifier = session_info.get("user_identifier")
+        # 1. Get the authenticated user's
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
 
-        if not user_identifier:
-            return jsonify({'error_message': 'Usuario no autenticado o sesión inválida'}), 401
+        user_identifier = auth_result.get('user_identifier')
 
         try:
             # 2. Call the history service with the unified identifier.

iatoolkit/views/init_context_api_view.py

@@ -31,11 +31,9 @@ class InitContextApiView(MethodView):
         # 1. Authenticate the request. This handles both session and API Key.
         auth_result = self.auth_service.verify()
         if not auth_result.get("success"):
-            return jsonify({"error": auth_result.get("error_message")}), auth_result.get("status_code", 401)
+            return jsonify(auth_result), auth_result.get("status_code")
 
         user_identifier = auth_result.get('user_identifier')
-        if not user_identifier:
-            return jsonify({"error": "Could not identify user from session or payload"}), 400
 
         try:
             # 2. Execute the forced rebuild sequence using the unified identifier.
@@ -54,7 +52,7 @@ class InitContextApiView(MethodView):
             )
 
             # 3. Respond with JSON, as this is an API endpoint.
-            return jsonify({'status': 'OK', 'message': 'El context se ha recargado con éxito.'}), 200
+            return jsonify({'status': 'OK', 'message': 'El contexto se ha recargado con éxito.'}), 200
 
         except Exception as e:
             logging.exception(f"Error durante la recarga de contexto {user_identifier}: {e}")

iatoolkit/views/llmquery_api_view.py

@@ -21,12 +21,10 @@ class LLMQueryApiView(MethodView):
         # 1. Authenticate the API request.
         auth_result = self.auth_service.verify()
         if not auth_result.get("success"):
-            return jsonify({"error": auth_result.get("error_message")}), auth_result.get("status_code", 401)
+            return jsonify(auth_result), auth_result.get("status_code")
 
         # 2. Get the user identifier from the payload.
         user_identifier = auth_result.get('user_identifier')
-        if not user_identifier:
-            return jsonify({"error": "Payload must include 'user_identifier'"}), 400
 
         data = request.get_json()
         if not data:

iatoolkit/views/logout_api_view.py

@@ -0,0 +1,45 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+from flask.views import MethodView
+from flask import redirect, url_for, jsonify
+from injector import inject
+from iatoolkit.services.auth_service import AuthService
+from iatoolkit.services.profile_service import ProfileService
+from iatoolkit.common.session_manager import SessionManager
+
+
+class LogoutApiView(MethodView):
+    @inject
+    def __init__(self,
+                 profile_service: ProfileService,
+                 auth_service: AuthService):
+        self.profile_service = profile_service
+        self.auth_service = auth_service
+
+    def get(self, company_short_name: str = None):
+        # 1. Get the authenticated user's
+        auth_result = self.auth_service.verify(anonymous=True)
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code", 401)
+
+        company = self.profile_service.get_company_by_short_name(company_short_name)
+        if not company:
+            return jsonify({"error": "Empresa no encontrada"}), 404
+
+        # get URL for redirection
+        url_for_redirect = company.parameters.get('external_urls', {}).get('logout_url')
+        if not url_for_redirect:
+            url_for_redirect = url_for('index', company_short_name=company_short_name)
+
+        # clear de session cookie
+        SessionManager.clear()
+
+        return {
+            'status': 'success',
+            'url': url_for_redirect,
+        }
+
+

iatoolkit/views/prompt_api_view.py

@@ -14,16 +14,16 @@ import logging
 class PromptApiView(MethodView):
     @inject
     def __init__(self,
-                 iauthentication: AuthService,
+                 auth_service: AuthService,
                  prompt_service: PromptService ):
-        self.iauthentication = iauthentication
+        self.auth_service = auth_service
         self.prompt_service = prompt_service
 
     def get(self, company_short_name):
         # get access credentials
-        iaut = self.iauthentication.verify()
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
+        auth_result = self.auth_service.verify(anonymous=True)
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get('status_code')
 
         try:
             response = self.prompt_service.get_user_prompts(company_short_name)

iatoolkit/views/{tasks_view.py → tasks_api_view.py}

@@ -7,54 +7,28 @@ from flask.views import MethodView
 from flask import request, jsonify
 from iatoolkit.services.tasks_service import TaskService
 from iatoolkit.repositories.profile_repo import ProfileRepo
+from iatoolkit.services.auth_service import AuthService
 from injector import inject
 from datetime import datetime
 import logging
 from typing import Optional
 
 
-class TaskView(MethodView):
+class TaskApiView(MethodView):
     @inject
-    def __init__(self, task_service: TaskService, profile_repo: ProfileRepo):
+    def __init__(self,
+                 auth_service: AuthService,
+                 task_service: TaskService,
+                 profile_repo: ProfileRepo):
+        self.auth_service = auth_service
         self.task_service = task_service
         self.profile_repo = profile_repo
 
-    def _authenticate_requesting_company_via_api_key(self) -> tuple[
-        Optional[int], Optional[str], Optional[tuple[dict, int]]]:
-        """
-        Autentica a la compañía  usando su API Key.
-        Retorna (company_id, company_short_name, None) en éxito.
-        Retorna (None, None, (error_json, status_code)) en fallo.
-        """
-        api_key_header = request.headers.get('Authorization')
-        if not api_key_header or not api_key_header.startswith('Bearer '):
-            return None, None, ({"error": "API Key faltante o mal formada en el header Authorization"}, 401)
-
-        api_key_value = api_key_header.split('Bearer ')[1]
-        try:
-            api_key_entry = self.profile_repo.get_active_api_key_entry(api_key_value)
-            if not api_key_entry:
-                return None, None, ({"error": "API Key inválida o inactiva"}, 401)
-
-            # api_key_entry.company ya está cargado por joinedload en get_active_api_key_entry
-            if not api_key_entry.company:  # Sanity check
-                logging.error(
-                    f"ChatTokenRequest: API Key {api_key_value[:5]}... no tiene compañía asociada a pesar de ser válida.")
-                return None, None, ({"error": "Error interno del servidor al verificar API Key"}, 500)
-
-            return api_key_entry.company_id, api_key_entry.company.short_name, None
-
-        except Exception as e:
-            logging.exception(f"ChatTokenRequest: Error interno durante validación de API Key: {e}")
-            return None, None, ({"error": "Error interno del servidor al validar API Key"}, 500)
-
-
     def post(self):
         try:
-            # only requests with valid api-key are allowed
-            auth_company_id, auth_company_short_name, error = self._authenticate_requesting_company_via_api_key()
-            if error:
-                return jsonify(error[0]), error[1]
+            auth_result = self.auth_service.verify(anonymous=True)
+            if not auth_result.get("success"):
+                return jsonify(auth_result), auth_result.get("status_code")
 
             req_data = request.get_json()
             files = request.files.getlist('files')

iatoolkit/views/tasks_review_api_view.py

@@ -0,0 +1,55 @@
+# Copyright (c) 2024 Fernando Libedinsky
+# Product: IAToolkit
+#
+# IAToolkit is open source software.
+
+from flask.views import MethodView
+from flask import request, jsonify
+from iatoolkit.services.tasks_service import TaskService
+from iatoolkit.repositories.profile_repo import ProfileRepo
+from iatoolkit.services.auth_service import AuthService
+from injector import inject
+import logging
+from typing import Optional
+
+
+class TaskReviewApiView(MethodView):
+    @inject
+    def __init__(self,
+                 auth_service: AuthService,
+                 task_service: TaskService,
+                 profile_repo: ProfileRepo):
+        self.auth_service = auth_service
+        self.task_service = task_service
+        self.profile_repo = profile_repo
+
+    def post(self, task_id: int):
+        auth_result = self.auth_service.verify(anonymous=True)
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
+
+        try:
+            req_data = request.get_json()
+            required_fields = ['review_user', 'approved']
+            for field in required_fields:
+                if field not in req_data:
+                    return jsonify({"error": f"El campo {field} es requerido"}), 400
+
+            review_user = req_data.get('review_user', '')
+            approved = req_data.get('approved', False)
+            comment = req_data.get('comment', '')
+
+            new_task = self.task_service.review_task(
+                task_id=task_id,
+                review_user=review_user,
+                approved=approved,
+                comment=comment)
+
+            return jsonify({
+                "task_id": new_task.id,
+                "status": new_task.status.name
+            }), 200
+
+        except Exception as e:
+            logging.exception("Error al revisar la tarea: %s", str(e))
+            return jsonify({"error": str(e)}), 500

iatoolkit/views/user_feedback_api_view.py

@@ -14,20 +14,18 @@ import logging
 class UserFeedbackApiView(MethodView):
     @inject
     def __init__(self,
-                 iauthentication: AuthService,
+                 auth_service: AuthService,
                  user_feedback_service: UserFeedbackService ):
-        self.iauthentication = iauthentication
+        self.auth_service = auth_service
         self.user_feedback_service = user_feedback_service
 
     def post(self, company_short_name):
         # get access credentials
-        iaut = self.iauthentication.verify()
-        if not iaut.get("success"):
-            return jsonify(iaut), 401
+        auth_result = self.auth_service.verify()
+        if not auth_result.get("success"):
+            return jsonify(auth_result), auth_result.get("status_code")
 
-        user_identifier = iaut.get('user_identifier')
-        if not user_identifier:
-            return jsonify({"error": "Could not identify user from session or payload"}), 400
+        user_identifier = auth_result.get('user_identifier')
 
         data = request.get_json()
         if not data:

{iatoolkit-0.59.2.dist-info → iatoolkit-0.60.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: iatoolkit
-Version: 0.59.2
+Version: 0.60.0
 Summary: IAToolkit
 Author: Fernando Libedinsky
 License-Expression: MIT

{iatoolkit-0.59.2.dist-info → iatoolkit-0.60.0.dist-info}/RECORD

@@ -2,10 +2,10 @@ iatoolkit/__init__.py,sha256=4PWjMJjktixtrxF6BY405qyA50Sv967kEP2x-oil6qk,1120
 iatoolkit/base_company.py,sha256=vU4ki-wB3PWIn3_Bvehfh0TfBH_XNC614tRBKNmEd84,4718
 iatoolkit/cli_commands.py,sha256=G5L9xQXZ0lVFXQWBaE_KEZHyfuiT6PL1nTQRoSdnBzc,2302
 iatoolkit/company_registry.py,sha256=tduqt3oV8iDX_IB1eA7KIgvIxE4edTcy-3qZIXh3Lzw,2549
-iatoolkit/iatoolkit.py,sha256=N922fz-tHZYZSpu5_PupW8p4x1yi66wnRq7UUgpPCfs,17583
+iatoolkit/iatoolkit.py,sha256=FCFi1qcaTEMh3ZKqBB3LJTkjxc-JCvcGf79LYfYukKM,17570
 iatoolkit/common/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 iatoolkit/common/exceptions.py,sha256=EXx40n5htp7UiOM6P1xfJ9U6NMcADqm62dlFaKz7ICU,1154
-iatoolkit/common/routes.py,sha256=en9LNxQ3oj7wPUA19okmauGVqdA1yIB_YjPo_-CV-UQ,6195
+iatoolkit/common/routes.py,sha256=L8UTwbE-cNSYl5s09mMckO2J9on0N1F6p8ZXMFbjrDM,5738
 iatoolkit/common/session_manager.py,sha256=UeKfD15bcEA3P5e0WSURfotLqpsiIMp3AXxAMhtgHs0,471
 iatoolkit/common/util.py,sha256=w9dTd3csK0gKtFSp-a4t7XmCPZiYDhiON92uXRbTT8A,14624
 iatoolkit/infra/__init__.py,sha256=5JqK9sZ6jBuK83zDQokUhxQ0wuJJJ9DXB8pYCLkX7X4,102
@@ -34,7 +34,7 @@ iatoolkit/repositories/profile_repo.py,sha256=21am3GP7XCG0nq6i3pArQ7mfGsrRn8rdcW
 iatoolkit/repositories/tasks_repo.py,sha256=icVO_r2oPagGnnBhwVFzznnvEEU2EAx-2dlWuWvoDC4,1745
 iatoolkit/repositories/vs_repo.py,sha256=UkpmQQiocgM5IwRBmmWhw3HHzHP6zK1nN3J3TcQgjhc,5300
 iatoolkit/services/__init__.py,sha256=5JqK9sZ6jBuK83zDQokUhxQ0wuJJJ9DXB8pYCLkX7X4,102
-iatoolkit/services/auth_service.py,sha256=1_YfoEflzV7UboOO9xIduwXuwb4I8XHC8mZLgYyDEyw,7171
+iatoolkit/services/auth_service.py,sha256=PPaa_zB0L2i574O6VQzKvTmzHbmzlWK3vvMQl2TYjOA,7494
 iatoolkit/services/benchmark_service.py,sha256=CdbFYyS3FHFhNzWQEa9ZNjUlmON10DT1nKNbZQ1EUi8,5880
 iatoolkit/services/branding_service.py,sha256=gXj9Lj6EIFNIHT6wAHia5lr4_2a2sD-ExMbewno5YD8,7505
 iatoolkit/services/dispatcher_service.py,sha256=Qdn2x4cozpgpKg2448sUxkhO6tuplzb8xPWUxdTTFBE,12772
@@ -46,7 +46,7 @@ iatoolkit/services/jwt_service.py,sha256=W2kQVNQheQSLkNLS7RZ4jd3hmySBPLbHAS5hvBr
 iatoolkit/services/load_documents_service.py,sha256=ZpB0BZ3qX1fGJGBtZtMLbFdWWx0hkPoeCS3OqJKwCTs,7291
 iatoolkit/services/mail_service.py,sha256=2h-fcF3swZDya_o7IpgXkmuj3iEVHVCiHi7oVxU99sQ,2182
 iatoolkit/services/onboarding_service.py,sha256=cMO2Ho1-G3wAeVNl-j25LwCMJjRwj3yKHpYKnZUFLDE,2001
-iatoolkit/services/profile_service.py,sha256=TuWV5wVR7gUYylOPKcUR0KdxHAglRv0cXxO18kCgng0,20300
+iatoolkit/services/profile_service.py,sha256=cOjGJvrH9f3DRoXrhs4vZEqG7dzwrl_GnOcwxyaSX18,20301
 iatoolkit/services/prompt_manager_service.py,sha256=U-XmSpkeXvv1KRN4dytdMxSYBMRSB7y-UHcb18mk0nA,8342
 iatoolkit/services/query_service.py,sha256=gtMEAQ7IRVrFAMq4h_Pc_lHlMlXFI6heLSuBYHenkfs,17502
 iatoolkit/services/search_service.py,sha256=i1xGWu7ORKIIDH0aAQBkF86dVVbLQ0Yrooz5TiZ6aGo,1823
@@ -55,13 +55,13 @@ iatoolkit/services/tasks_service.py,sha256=itREO5rDnUIgsqtyCOBKDtH30QL5v1egs4qPT
 iatoolkit/services/user_feedback_service.py,sha256=Bb6PVWcxzoQ3awev_k4MI0BQhkMh6iLPGC8_CK02t5g,4986
 iatoolkit/services/user_session_context_service.py,sha256=vYF_vWM37tPB_ZyPBJ6f6WTJVjT2j-4L8JfZbqbI93k,6775
 iatoolkit/static/images/fernando.jpeg,sha256=W68TYMuo5hZVpbP-evwH6Nu4xWFv2bc8pJzSKDoLTeQ,100612
-iatoolkit/static/js/chat_context_reload.js,sha256=DCOGEf7-t_YLw9wuqkP-kFpiFHt3UyaesFfePp9Cs_k,2512
-iatoolkit/static/js/chat_feedback.js,sha256=j2LieutME4RrtMmHbyi3ptfRLefcxechule2NLxzCm8,4284
+iatoolkit/static/js/chat_feedback_button.js,sha256=j3BIyxcgyDuDDBn3vxxe0DV4evQabj3xb6XF28OWwCs,4220
 iatoolkit/static/js/chat_filepond.js,sha256=mzXafm7a506EpM37KATTK3zvAswO1E0KSUY1vKbwuRc,3163
-iatoolkit/static/js/chat_history.js,sha256=4h6ldU7cDvgkW84fMKB8JReoxCX0NKSQAir_4CzAF9I,4382
-iatoolkit/static/js/chat_main.js,sha256=o1ZNkeaBgGG9d07e5BxTL9OI0aJ26z1bvca1lGoQ-Uo,18535
-iatoolkit/static/js/chat_onboarding.js,sha256=b6ofiFcPhuCaPmSFIvDQZqcMUVvbI7LpIsjZOZJUSAU,3185
-iatoolkit/static/styles/chat_iatoolkit.css,sha256=aA-PZ2TGl_k82JSVVBC2-CJT0NiZAuLOGoiaJhdeVUU,11416
+iatoolkit/static/js/chat_history_button.js,sha256=4h6ldU7cDvgkW84fMKB8JReoxCX0NKSQAir_4CzAF9I,4382
+iatoolkit/static/js/chat_main.js,sha256=GPPM3euqT_cGcrmsb7DGr0Aa6BpeQRTpuf2zW2VEvMM,18118
+iatoolkit/static/js/chat_onboarding_button.js,sha256=vjvEloJ9PA9D7jOGca0QjS3J_7bU97R71L7kSyY3wOI,3153
+iatoolkit/static/js/chat_reload_button.js,sha256=f8f_qRnZTNr_DwbcmafTHIuBLmiCoypYAKGQc472AOs,2393
+iatoolkit/static/styles/chat_iatoolkit.css,sha256=w9O_4slQuls3R5UH30oUrgA5BetA5BVctzSPpelMN4Y,12934
 iatoolkit/static/styles/chat_info.css,sha256=17DbgoNYE21VYWfb5L9-QLCpD2R1idK4imKRLwXtJLY,1058
 iatoolkit/static/styles/chat_modal.css,sha256=mdfjrJtmUn3O9rKwIGjJc-oSNmJGnzUY1aAJqEfPh38,4301
 iatoolkit/static/styles/landing_page.css,sha256=5MHlXkmgZVv9uHE7rZTGYzZeynya3ONY4hp7e2uPXwk,4898
@@ -76,36 +76,36 @@ iatoolkit/templates/_navbar.html,sha256=o1PvZE5ueLmVpGUAmsjtu-vS_WPROTlJc2sTXl6A
 iatoolkit/templates/about.html,sha256=ciC08grUVz5qLzdzDDqDX31xirg5PrJIRYabWpV9oA8,294
 iatoolkit/templates/base.html,sha256=hHfBqZJsPcZGlb4BxAbHvpJFcSjckLIAVTYTmoyXrz0,2323
 iatoolkit/templates/change_password.html,sha256=G5a3hYLTpz_5Q_eZ4LNcYSqLeW-CuT4NCHD8bkhAd9k,3573
-iatoolkit/templates/chat.html,sha256=NdKj1cDqQWSLrjMjfne32IZcwBdg_DV9apm8BMeTQDI,11952
+iatoolkit/templates/chat.html,sha256=kq9juQ1LhXxG-uERr8FdK80KtwI43DABmSS3z66qNfQ,12182
 iatoolkit/templates/chat_modals.html,sha256=NwwgPoOmVbjy4aO2eHsy1TUMXRiOfTOC5Jx_F2ehhcs,6947
 iatoolkit/templates/error.html,sha256=c3dxieMygsvdjQMiQu_sn6kqqag9zFtVu-z5FunX6so,580
 iatoolkit/templates/forgot_password.html,sha256=NRZqbNHJXSLNArF_KLbzuem-U57v07awS0ikI_DJbfM,2360
 iatoolkit/templates/header.html,sha256=179agI7rnYwP_rvJNXIiVde5E8Ec5649_XKq6eew2Hk,1263
 iatoolkit/templates/index.html,sha256=ZeDBmZGZ_GlxQ8p_NA2Fdf4syTU5kXrJBO6q2P77wKY,7907
 iatoolkit/templates/login_simulation.html,sha256=1svwCBPrJ3Gy6bD9WMuz25NBSdFgZt4j8_sC7HE6MFU,1270
-iatoolkit/templates/onboarding_shell.html,sha256=r1ivSR2ci8GrDSm1uaD-cf78rfO1bKT5gXa-v5aHLAk,4659
+iatoolkit/templates/onboarding_shell.html,sha256=exSGckoPeE-ID9ym3B4TLh5hULpR7N1X6LeuSNmiUL0,4666
 iatoolkit/templates/signup.html,sha256=9ArDvcNQgHFR2dwxy-37AXzGUOeOsT7Nz5u0y6fAB3U,4385
 iatoolkit/templates/test.html,sha256=rwNtxC83tbCl5COZFXYvmRBxxmgFJtPNuVBd_nq9KWY,133
 iatoolkit/views/__init__.py,sha256=5JqK9sZ6jBuK83zDQokUhxQ0wuJJJ9DXB8pYCLkX7X4,102
 iatoolkit/views/base_login_view.py,sha256=qoMMrAezCJvzjcfNzIbd2vwHhksALIQfNK8f_9E8m0o,3241
-iatoolkit/views/change_password_view.py,sha256=tM0woZyKdhY4XYjS_YXg2sKq3RYkXGfcq_eVAKrNvNM,4498
-iatoolkit/views/chat_token_request_view.py,sha256=wf32_A2Sq8NHYWshCwL10Tovd1znLoD0jQjzutR3sVE,4408
-iatoolkit/views/external_login_view.py,sha256=U_1k8AB1u6hB7twsdtQr6yS0xcihDxksstg-IiMZB30,3087
-iatoolkit/views/file_store_api_view.py,sha256=Uz9f6sey3_F5K8zuyQz6SwYRKAalCjD1ekf-Mkl_Kfo,2326
+iatoolkit/views/change_password_view.py,sha256=DRfyvD-zgX-zidoIrvYnWg6V0LOeeugCZTxgk7wNntM,4503
+iatoolkit/views/external_login_view.py,sha256=d4gUQbxFsThGbbAUdtFn7AMgPJjeb7_8KFFoH3vspVA,2853
+iatoolkit/views/file_store_api_view.py,sha256=UvtZWOG-rLQMLfs8igOIYoQ-tkkEg5baMjqCJdKxaRQ,2300
 iatoolkit/views/forgot_password_view.py,sha256=-qKJeeOBqJFdvDUk7rCNg1E1cDQnJQkozPpb0T0FgwA,3159
-iatoolkit/views/history_api_view.py,sha256=x-tZhB8UzqrD2n-WDIfmHK9iVhGZ9f0yncsGs9mxwt0,1953
+iatoolkit/views/history_api_view.py,sha256=0YChbss0ae05KHzni2p3d4bGS2_yKAbjALk1OBeQk50,1867
 iatoolkit/views/index_view.py,sha256=P5aVdEWxsYOZGbzcXd6WFE733qZ7YXIoeqriUMAM6V8,1527
-iatoolkit/views/init_context_api_view.py,sha256=NbJdGD4BDTkmDhGO5jkrGihdkpdIvuqUsl_Qg7MDZvA,2878
-iatoolkit/views/llmquery_api_view.py,sha256=ihRtZygDLAamz8DIJ0UEN73MG_SHzjgvQIznXvCPyxg,1816
+iatoolkit/views/init_context_api_view.py,sha256=YTjpT4xdtm1knUhelDj-VbV4EK6o_qGAgwwDhFmIOlg,2716
+iatoolkit/views/llmquery_api_view.py,sha256=v_KxR6w-TrCVR2fMFHZCz3_v4o42CXb1Yvd-R1hSJHg,1662
 iatoolkit/views/login_simulation_view.py,sha256=0Qt-puRnltI2HZxlfdyJmOf26-hQp3xjknGV_jkwV7E,3484
 iatoolkit/views/login_view.py,sha256=ESJLKHGUKQw71STHK2AoxugQUJmxnPYlI13n7ZawLLg,5663
-iatoolkit/views/prompt_api_view.py,sha256=MP0r-MiswwKcbNc_5KY7aVbHkrR218I8XCiCX1D0yTA,1244
+iatoolkit/views/logout_api_view.py,sha256=V1HkfUfTQr_IrHFqjmeA0-qN2qugk3bmtLRHtZd7VE8,1506
+iatoolkit/views/prompt_api_view.py,sha256=S_4-qAD5knh8Esae1AczEYGdXy_AuU7LMOmnUPej4jQ,1294
 iatoolkit/views/signup_view.py,sha256=BCjhM2lMiDPwYrlW_eEwPl-ZLupblbFfsonWtq0E4vU,3922
-iatoolkit/views/tasks_review_view.py,sha256=keLsLCyOTTlcoIapnB_lbuSvLwrPVZVpBiFC_7ChbLg,3388
-iatoolkit/views/tasks_view.py,sha256=a3anTXrJTTvbQuc6PSpOzidLKQFL4hWa7PI2Cppcz8w,4110
-iatoolkit/views/user_feedback_api_view.py,sha256=PNtXs3G26COw3QeZ9WlX14lYizualGMZ4wVfv77IUoU,2075
+iatoolkit/views/tasks_api_view.py,sha256=wGnuwuuL83ByQ1Yre6ytRVztA0OGQjGrwMjB1_G830U,2630
+iatoolkit/views/tasks_review_api_view.py,sha256=wsCpzqyRyUdCXWAhyGlBe3eNZZ6A1DQG7TblN_GZNfM,1894
+iatoolkit/views/user_feedback_api_view.py,sha256=-Ngex8SPf0mPvPNqwE_GUcRErLpOL49yJ43o5Y4Qhqo,1992
 iatoolkit/views/verify_user_view.py,sha256=7XLSaxvs8LjBr3cYOUDa9B8DqW_50IGlq0IvmOQcD0Y,2340
-iatoolkit-0.59.2.dist-info/METADATA,sha256=XUACxsD5jRzps23Y-avo13tfLAXlF23w7v2jrq-Pr4Q,9301
-iatoolkit-0.59.2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-iatoolkit-0.59.2.dist-info/top_level.txt,sha256=V_w4QvDx0b1RXiy8zTCrD1Bp7AZkFe3_O0-9fMiwogg,10
-iatoolkit-0.59.2.dist-info/RECORD,,
+iatoolkit-0.60.0.dist-info/METADATA,sha256=OHgf546tocA5arbQL9wnzreenlXGvfD52xko9xBi9kM,9301
+iatoolkit-0.60.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+iatoolkit-0.60.0.dist-info/top_level.txt,sha256=V_w4QvDx0b1RXiy8zTCrD1Bp7AZkFe3_O0-9fMiwogg,10
+iatoolkit-0.60.0.dist-info/RECORD,,

iatoolkit/views/chat_token_request_view.py

@@ -1,98 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-from flask import request, jsonify, current_app
-from flask.views import MethodView
-from injector import inject
-import logging
-from iatoolkit.repositories.profile_repo import ProfileRepo
-from iatoolkit.services.jwt_service import JWTService
-from typing import Optional
-
-
-# Necesitaremos JWT_EXPIRATION_SECONDS_CHAT de la configuración de la app
-# Se podría inyectar o acceder globalmente.
-
-class ChatTokenRequestView(MethodView):
-    @inject
-    def __init__(self, profile_repo: ProfileRepo, jwt_service: JWTService):
-        self.profile_repo = profile_repo
-        self.jwt_service = jwt_service
-
-    def _authenticate_requesting_company_via_api_key(self) -> tuple[
-        Optional[int], Optional[str], Optional[tuple[dict, int]]]:
-        """
-        Autentica a la compañía que solicita el token JWT usando su API Key.
-        Retorna (company_id, company_short_name, None) en éxito.
-        Retorna (None, None, (error_json, status_code)) en fallo.
-        """
-        api_key_header = request.headers.get('Authorization')
-        if not api_key_header or not api_key_header.startswith('Bearer '):
-            return None, None, ({"error": "API Key faltante o mal formada en el header Authorization"}, 401)
-
-        api_key_value = api_key_header.split('Bearer ')[1]
-        try:
-            api_key_entry = self.profile_repo.get_active_api_key_entry(api_key_value)
-            if not api_key_entry:
-                return None, None, ({"error": "API Key inválida o inactiva"}, 401)
-
-            # api_key_entry.company ya está cargado por joinedload en get_active_api_key_entry
-            if not api_key_entry.company:  # Sanity check
-                logging.error(
-                    f"ChatTokenRequest: API Key {api_key_value[:5]}... no tiene compañía asociada a pesar de ser válida.")
-                return None, None, ({"error": "Error interno del servidor al verificar API Key"}, 500)
-
-            return api_key_entry.company_id, api_key_entry.company.short_name, None
-
-        except Exception as e:
-            logging.exception(f"ChatTokenRequest: Error interno durante validación de API Key: {e}")
-            return None, None, ({"error": "Error interno del servidor al validar API Key"}, 500)
-
-    def post(self):
-        """
-        Genera un JWT para una sesión de chat.
-        Autenticado por API Key de la empresa.
-        Requiere JSON body:
-                {"company_short_name": "target_company_name",
-                "external_user_id": "user_abc"
-                }
-        """
-        # only requests with valid api-key are allowed
-        auth_company_id, auth_company_short_name, error = self._authenticate_requesting_company_via_api_key()
-        if error:
-            return jsonify(error[0]), error[1]
-
-        # get the json fields from the request body
-        data = request.get_json()
-        if not data:
-            return jsonify({"error": "Cuerpo de la solicitud JSON faltante"}), 400
-
-        target_company_short_name = data.get('company_short_name')
-        external_user_id = data.get('external_user_id')
-
-        if not target_company_short_name or not external_user_id:
-            return jsonify(
-                {"error": "Faltan 'company_short_name' o 'external_user_id' en el cuerpo de la solicitud"}), 401
-
-        # Verificar que la API Key usada pertenezca a la empresa para la cual se solicita el token
-        if auth_company_short_name != target_company_short_name:
-            return jsonify({
-                    "error": f"API Key no autorizada para generar tokens para la compañía '{target_company_short_name}'"}), 403
-
-        jwt_expiration_seconds = current_app.config.get('JWT_EXPIRATION_SECONDS_CHAT', 3600)
-
-        # Aquí, auth_company_id es el ID de la compañía para la que se generará el token.
-        # auth_company_short_name es su nombre corto.
-        token = self.jwt_service.generate_chat_jwt(
-            company_id=auth_company_id,
-            company_short_name=auth_company_short_name,  # Usamos el short_name autenticado
-            external_user_id=external_user_id,
-            expires_delta_seconds=jwt_expiration_seconds
-        )
-
-        if token:
-            return jsonify({"chat_jwt": token}), 200
-        else:
-            return jsonify({"error": "No se pudo generar el token de chat"}), 500

iatoolkit/views/tasks_review_view.py

@@ -1,83 +0,0 @@
-# Copyright (c) 2024 Fernando Libedinsky
-# Product: IAToolkit
-#
-# IAToolkit is open source software.
-
-from flask.views import MethodView
-from flask import request, jsonify
-from iatoolkit.services.tasks_service import TaskService
-from iatoolkit.repositories.profile_repo import ProfileRepo
-from injector import inject
-import logging
-from typing import Optional
-
-
-class TaskReviewView(MethodView):
-    @inject
-    def __init__(self, task_service: TaskService, profile_repo: ProfileRepo):
-        self.task_service = task_service
-        self.profile_repo = profile_repo
-
-
-    def _authenticate_requesting_company_via_api_key(self) -> tuple[
-        Optional[int], Optional[str], Optional[tuple[dict, int]]]:
-        """
-        Autentica a la compañía  usando su API Key.
-        Retorna (company_id, company_short_name, None) en éxito.
-        Retorna (None, None, (error_json, status_code)) en fallo.
-        """
-        api_key_header = request.headers.get('Authorization')
-        if not api_key_header or not api_key_header.startswith('Bearer '):
-            return None, None, ({"error": "API Key faltante o mal formada en el header Authorization"}, 401)
-
-        api_key_value = api_key_header.split('Bearer ')[1]
-        try:
-            api_key_entry = self.profile_repo.get_active_api_key_entry(api_key_value)
-            if not api_key_entry:
-                return None, None, ({"error": "API Key inválida o inactiva"}, 401)
-
-            # api_key_entry.company ya está cargado por joinedload en get_active_api_key_entry
-            if not api_key_entry.company:  # Sanity check
-                logging.error(
-                    f"ChatTokenRequest: API Key {api_key_value[:5]}... no tiene compañía asociada a pesar de ser válida.")
-                return None, None, ({"error": "Error interno del servidor al verificar API Key"}, 500)
-
-            return api_key_entry.company_id, api_key_entry.company.short_name, None
-
-        except Exception as e:
-            logging.exception(f"ChatTokenRequest: Error interno durante validación de API Key: {e}")
-            return None, None, ({"error": "Error interno del servidor al validar API Key"}, 500)
-
-
-    def post(self, task_id: int):
-        try:
-            # only requests with valid api-key are allowed
-            auth_company_id, auth_company_short_name, error = self._authenticate_requesting_company_via_api_key()
-            if error:
-                return jsonify(error[0]), error[1]
-
-            req_data = request.get_json()
-
-            required_fields = ['review_user', 'approved']
-            for field in required_fields:
-                if field not in req_data:
-                    return jsonify({"error": f"El campo {field} es requerido"}), 400
-
-            review_user = req_data.get('review_user', '')
-            approved = req_data.get('approved', False)
-            comment = req_data.get('comment', '')
-
-            new_task = self.task_service.review_task(
-                task_id=task_id,
-                review_user=review_user,
-                approved=approved,
-                comment=comment)
-
-            return jsonify({
-                "task_id": new_task.id,
-                "status": new_task.status.name
-            }), 200
-
-        except Exception as e:
-            logging.exception("Error al revisar la tarea: %s", str(e))
-            return jsonify({"error": str(e)}), 500