mainsequence 3.18.1__tar.gz → 3.18.2__tar.gz

{mainsequence-3.18.1 → mainsequence-3.18.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence
-Version: 3.18.1
+Version: 3.18.2
 Summary: Main Sequence SDK 
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License: MainSequence GmbH SDK License Agreement

{mainsequence-3.18.1 → mainsequence-3.18.2}/mainsequence/client/models_user.py

@@ -976,6 +976,53 @@ class User(UserApiBaseObjectOrm, BasePydanticModel):
     def effective_plan(self) -> Any | None:
         return self.plan if self.plan is not None else self.active_plan_type
 
+    @classmethod
+    def _build_request_bound_identity_user(
+        cls,
+        *,
+        normalized_headers: Mapping[str, Any],
+        user_id: int,
+    ):
+        username = str(
+            normalized_headers.get("X-Username")
+            or normalized_headers.get("x-username")
+            or normalized_headers.get("X-User-Email")
+            or normalized_headers.get("x-user-email")
+            or f"user-{user_id}"
+        ).strip() or f"user-{user_id}"
+        email = str(
+            normalized_headers.get("X-User-Email")
+            or normalized_headers.get("x-user-email")
+            or username
+        ).strip() or username
+
+        payload = {
+            "id": user_id,
+            "username": username,
+            "email": email,
+            "date_joined": None,
+            "is_active": True,
+            "last_login": None,
+            "api_request_limit": None,
+            "mfa_enabled": False,
+            "organization": None,
+            "phone_number": None,
+            "plan": None,
+            "active_plan_type": None,
+            "groups": [],
+            "user_permissions": [],
+            "organization_teams": [],
+            "is_verified": None,
+            "blocked_access": None,
+            "requires_password_change": None,
+            "identity_platform_uid": None,
+        }
+
+        model_construct = getattr(cls, "model_construct", None)
+        if callable(model_construct):
+            return model_construct(**payload)
+        return cls.construct(**payload)
+
     @classmethod
     def get_authenticated_user_details(cls):
         """
@@ -1082,6 +1129,15 @@ class User(UserApiBaseObjectOrm, BasePydanticModel):
             normalized_headers[key_str] = value
             normalized_headers[key_str.lower()] = value
 
+        authorization_value = (
+            normalized_headers.get("Authorization")
+            or normalized_headers.get("authorization")
+        )
+        has_bearer_authorization = bool(
+            authorization_value
+            and str(authorization_value).split(" ", 1)[0].lower() == "bearer"
+        )
+
         user_id_raw = (
             normalized_headers.get("X-User-ID")
             or normalized_headers.get("x-user-id")
@@ -1090,7 +1146,7 @@ class User(UserApiBaseObjectOrm, BasePydanticModel):
         )
 
         if user_id_raw in (None, ""):
-            if normalized_headers.get("authorization") and "Bearer" in normalized_headers.get("authorization"):
+            if has_bearer_authorization:
                 outgoing_authorization = None
                 outgoing_authorization_scheme = None
                 try:
@@ -1163,6 +1219,18 @@ class User(UserApiBaseObjectOrm, BasePydanticModel):
             )
             raise RuntimeError(f"Invalid X-User-ID value: {user_id_raw!r}") from exc
 
+        if not has_bearer_authorization:
+            user = cls._build_request_bound_identity_user(
+                normalized_headers=normalized_headers,
+                user_id=user_id,
+            )
+            _CURRENT_USER.set(user)
+            logger.info(
+                "User.get_logged_user resolved user_id=%s via request identity headers without backend auth",
+                user.id,
+            )
+            return user
+
         user = cls._get_request_bound_user(headers=headers, user_id=user_id)
         _CURRENT_USER.set(user)
         logger.info(

{mainsequence-3.18.1 → mainsequence-3.18.2}/mainsequence.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mainsequence
-Version: 3.18.1
+Version: 3.18.2
 Summary: Main Sequence SDK 
 Author-email: Main Sequence GmbH <dev@main-sequence.io>
 License: MainSequence GmbH SDK License Agreement

{mainsequence-3.18.1 → mainsequence-3.18.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mainsequence"
-version = "3.18.1"
+version = "3.18.2"
 description = "Main Sequence SDK "
 readme = "README.md"
 requires-python = ">=3.11"

{mainsequence-3.18.1 → mainsequence-3.18.2}/tests/test_models_user_request_bound_auth.py

@@ -73,6 +73,41 @@ def test_get_logged_user_uses_request_bound_headers_for_user_lookup(monkeypatch)
     assert "Host" not in captured["headers"]
 
 
+def test_get_logged_user_returns_header_identity_without_backend_auth(monkeypatch):
+    monkeypatch.delenv("MAINSEQUENCE_ACCESS_TOKEN", raising=False)
+    monkeypatch.delenv("MAINSEQUENCE_REFRESH_TOKEN", raising=False)
+
+    class _FakeSession:
+        def get(self, url, *, headers=None, params=None, timeout=None):
+            raise AssertionError("header-only identity should not trigger backend lookup")
+
+    monkeypatch.setattr(
+        models_user_mod.User,
+        "build_session",
+        classmethod(lambda cls: _FakeSession()),
+    )
+
+    auth_token = models_user_mod._CURRENT_AUTH_HEADERS.set(
+        {
+            "X-User-ID": "4",
+            "X-Username": "dashboard-user",
+            "X-Dashboard-ID": "dashboard-7",
+        }
+    )
+    user_token = models_user_mod._CURRENT_USER.set(None)
+    try:
+        user = models_user_mod.User.get_logged_user()
+    finally:
+        models_user_mod._CURRENT_USER.reset(user_token)
+        models_user_mod._CURRENT_AUTH_HEADERS.reset(auth_token)
+
+    assert user.id == 4
+    assert user.username == "dashboard-user"
+    assert user.email == "dashboard-user"
+    assert user.date_joined is None
+    assert user.api_request_limit is None
+
+
 def test_get_logged_user_bearer_fallback_uses_request_bound_headers(monkeypatch):
     monkeypatch.delenv("MAINSEQUENCE_ACCESS_TOKEN", raising=False)
     monkeypatch.delenv("MAINSEQUENCE_REFRESH_TOKEN", raising=False)