maquinaweb-shared-auth 0.1.6__py3-none-any.whl → 0.1.8__py3-none-any.whl

{maquinaweb_shared_auth-0.1.6.dist-info → maquinaweb_shared_auth-0.1.8.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maquinaweb-shared-auth
-Version: 0.1.6
+Version: 0.1.8
 Summary: Models read-only para autenticação compartilhada entre projetos Django.
 Author-email: Seu Nome <seuemail@dominio.com>
 License: MIT

maquinaweb_shared_auth-0.1.8.dist-info/RECORD

@@ -0,0 +1,18 @@
+shared_auth/__init__.py,sha256=Ta8lIbyn22J6wU-TgWeSvdDHS4NBRf4Sv1Ag8VtY-bE,152
+shared_auth/app.py,sha256=EHoLKlpW41o6ZxcH184aMhnWQxkVp9fH2_-89RjMz-4,215
+shared_auth/authentication.py,sha256=btrTjBszPrKKfKA4F0pOOzaxnfASgXb1y2cxQwOWbnk,1515
+shared_auth/conf.py,sha256=-jdnCokMvWvVKllfsxNYCsPk1Vo3MDRq4Y1MsO16oeA,411
+shared_auth/decorators.py,sha256=k1GurkcJUL_WKK1wNEfFNfjo5Td_S7v5YI_3E-zi9kc,3336
+shared_auth/exceptions.py,sha256=eiII-REupK6GeFinisteYO3FsGUDAN5zAajXPhTREm8,404
+shared_auth/fields.py,sha256=RAcmFh1D_nkbai_7t_OrPZhfhAipesy5kKnEj4LUvvM,1254
+shared_auth/managers.py,sha256=ykfa11rMR3axuc_Kl_ab_SJ_R6pufwJS2h3SVr318-w,7089
+shared_auth/middleware.py,sha256=4IUr5qWEpJfhwCkUTxv8jkcltasn2ZFuCWL93qrK6jI,6270
+shared_auth/mixins.py,sha256=3ARghQ4TvtENKoA5UTOHTrRHa6ufMRVJJHGFkV8-BL8,7550
+shared_auth/models.py,sha256=tMT84SA99V7lt-nfvP73fklN6pAidWxgHO04NgEZh3M,5342
+shared_auth/permissions.py,sha256=t1YVLBKnpAo4pmSNvqC9mW08CdOE99q2fpf-Heuo_Bs,2712
+shared_auth/router.py,sha256=SbM5YEoxxg2zMns1kfFmsK9YrgqqVfc4-riniYY7rbQ,651
+shared_auth/serializers.py,sha256=TDpuZVsOL-6igINSOOOyELWbTUeet4XWRoBkvcMGjW4,4290
+maquinaweb_shared_auth-0.1.8.dist-info/METADATA,sha256=WMNJObfGD6DhTXlqScKnEBlL68x8qlWOPhEeJrNhuig,27150
+maquinaweb_shared_auth-0.1.8.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+maquinaweb_shared_auth-0.1.8.dist-info/top_level.txt,sha256=msyYRy02ZV7zz7GR1raUI5LXGFIFn2TIkgkeKZqKufE,12
+maquinaweb_shared_auth-0.1.8.dist-info/RECORD,,

shared_auth/__init__.py

@@ -1,21 +1,6 @@
 """
 Biblioteca compartilhada para acesso aos models de autenticação
 """
-from .models import (
-    SharedOrganization,
-    SharedUser,
-    SharedMember,
-)
-from .exceptions import (
-    OrganizationNotFoundError,
-    UserNotFoundError,
-)
 
 __version__ = '1.0.0'
-__all__ = [
-    'SharedOrganization',
-    'SharedUser',
-    'SharedMember',
-    'OrganizationNotFoundError',
-    'UserNotFoundError',
-]
+default_app_config = "shared_auth.app.SharedAuthConfig"

shared_auth/app.py

@@ -3,4 +3,7 @@ from django.apps import AppConfig
 
 class SharedAuthConfig(AppConfig):
     default_auto_field = "django.db.models.BigAutoField"
-    name = "shared_auth"
+    name = "shared_auth"
+
+    def ready(self):
+        from . import models, exceptions

shared_auth/decorators.py

@@ -3,8 +3,10 @@ Decorators para views funcionais
 """
 
 from functools import wraps
+
 from django.http import JsonResponse
-from .models import SharedToken, SharedUser, SharedOrganization
+
+from .models import SharedOrganization, SharedToken, SharedUser
 
 
 def require_auth(view_func):
@@ -52,16 +54,13 @@ def require_organization(view_func):
     @wraps(view_func)
     @require_auth
     def wrapped_view(request, *args, **kwargs):
-        if (
-            not hasattr(request.user, "logged_organization_id")
-            or not request.user.logged_organization_id
-        ):
+        if not hasattr(request, "organization_id") or not request.organization_id:
             return JsonResponse({"error": "Organização não definida"}, status=403)
 
         # Buscar organização
         try:
             org = SharedOrganization.objects.using("auth_db").get(
-                pk=request.user.logged_organization_id
+                pk=request.organization_id
             )
 
             if not org.is_active():
@@ -94,8 +93,6 @@ def require_same_organization(view_func):
 
         # Aqui você precisa buscar o objeto e verificar
         # Exemplo genérico - adapte conforme seu model
-        from django.apps import apps
-
         # Tentar identificar o model pelo path
         # Esta é uma implementação básica
         # Em produção, você pode passar o model como parâmetro

shared_auth/managers.py

@@ -3,6 +3,7 @@ Managers customizados para os models compartilhados
 """
 
 from django.db import models
+from django.contrib.auth.models import UserManager
 from .exceptions import OrganizationNotFoundError, UserNotFoundError
 
 
@@ -43,7 +44,7 @@ class SharedOrganizationManager(models.Manager):
         return self.filter(cnpj__contains=clean_cnpj).first()
 
 
-class SharedUserManager(models.Manager):
+class SharedUserManager(UserManager):
     """Manager para SharedUser"""
 
     def get_or_fail(self, user_id):

shared_auth/middleware.py

@@ -2,12 +2,11 @@
 Middlewares para autenticação compartilhada
 """
 
-from django.utils.deprecation import MiddlewareMixin
 from django.http import JsonResponse
+from django.utils.deprecation import MiddlewareMixin
 
-from . import SharedMember
 from .authentication import SharedTokenAuthentication
-from .models import SharedToken, SharedUser, SharedOrganization
+from .models import SharedMember, SharedOrganization, SharedToken, SharedUser
 
 
 class SharedAuthMiddleware(MiddlewareMixin):
@@ -46,7 +45,7 @@ class SharedAuthMiddleware(MiddlewareMixin):
         token = self._get_token_from_request(request)
 
         if not token:
-            request.user = None
+            # request.user = None
             request.auth = None
             return None
 
@@ -56,16 +55,16 @@ class SharedAuthMiddleware(MiddlewareMixin):
             user = SharedUser.objects.using("auth_db").get(pk=token_obj.user_id)
 
             if not user.is_active or user.deleted_at is not None:
-                request.user = None
+                # request.user = None
                 request.auth = None
                 return None
 
             # Adicionar ao request
-            request.user = user
+            # request.user = user
             request.auth = token_obj
 
         except (SharedToken.DoesNotExist, SharedUser.DoesNotExist):
-            request.user = None
+            # request.user = None
             request.auth = None
 
         return None
@@ -149,6 +148,9 @@ class OrganizationMiddleware(MiddlewareMixin):
         organization_id = self._determine_organization_id(request)
         user = self._authenticate_user(request)
 
+        if not organization_id and not user:
+            return
+
         if organization_id and user:
             organization_id = self._validate_organization_membership(
                 user, organization_id
@@ -157,9 +159,12 @@ class OrganizationMiddleware(MiddlewareMixin):
                 return
 
         request.organization_id = organization_id
-        request.organization = SharedOrganization.objects.get_or_fail(organization_id)
-        request.user.logged_organization_id = organization_id
-        request.user.save()
+        request.organization = (
+            SharedOrganization.objects.using("auth_db")
+            .filter(pk=organization_id)
+            .first()
+        )
+
     @staticmethod
     def _authenticate_user(request):
         data = SharedTokenAuthentication().authenticate(request)
@@ -172,6 +177,7 @@ class OrganizationMiddleware(MiddlewareMixin):
             return org_id
 
         return self._get_organization_from_user(request)
+
     @staticmethod
     def _get_organization_from_header(request):
         if header_value := request.headers.get("X-Organization"):
@@ -180,22 +186,26 @@ class OrganizationMiddleware(MiddlewareMixin):
             except (ValueError, TypeError):
                 pass
         return None
+
     @staticmethod
     def _get_organization_from_user(request):
+        """
+        Retorna a primeira organização do usuário autenticado
+        """
         if not request.user.is_authenticated:
             return None
 
-        if (
-            hasattr(request.user, "logged_organization")
-            and request.user.logged_organization
-        ):
-            return request.user.logged_organization.id
+        # Buscar a primeira organização que o usuário pertence
+        member = (
+            SharedMember.objects.using("auth_db")
+            .filter(user_id=request.user.pk)
+            .first()
+        )
+
+        return member.organization_id if member else None
 
-        return None
     @staticmethod
-    def _validate_organization_membership(
-        user, organization_id
-    ):
+    def _validate_organization_membership(user, organization_id):
         try:
             member = get_member(user, organization_id)
             if not member and not user.is_superuser:
@@ -204,5 +214,8 @@ class OrganizationMiddleware(MiddlewareMixin):
         except Exception:
             return None
 
+
 def get_member(user, organization_id):
-    return SharedMember.objects.filter(user_id=user.pk, organization_id=organization_id).first()
+    return SharedMember.objects.filter(
+        user_id=user.pk, organization_id=organization_id
+    ).first()

shared_auth/models.py

@@ -3,12 +3,14 @@ Models READ-ONLY para acesso aos dados de autenticação
 ATENÇÃO: Estes models NÃO devem ser usados para criar migrations
 """
 
+from django.contrib.auth.models import AbstractUser
 from django.db import models
-from .conf import ORGANIZATION_TABLE, USER_TABLE, MEMBER_TABLE
+
+from .conf import MEMBER_TABLE, ORGANIZATION_TABLE, USER_TABLE
 from .managers import (
+    SharedMemberManager,
     SharedOrganizationManager,
     SharedUserManager,
-    SharedMemberManager,
 )
 
 
@@ -132,23 +134,15 @@ class SharedOrganization(models.Model):
         return self.deleted_at is None
 
 
-class SharedUser(models.Model):
+class SharedUser(AbstractUser):
     """
     Model READ-ONLY da tabela auth_user
     """
 
-    username = models.CharField(max_length=150)
-    first_name = models.CharField(max_length=150, blank=True)
-    last_name = models.CharField(max_length=150, blank=True)
-    email = models.EmailField()
-    is_staff = models.BooleanField(default=False)
-    is_active = models.BooleanField(default=True)
-    is_superuser = models.BooleanField(default=False)
     date_joined = models.DateTimeField()
     last_login = models.DateTimeField(null=True, blank=True)
 
     # Campos customizados
-    logged_organization_id = models.IntegerField(null=True, blank=True)
     createdat = models.DateTimeField()
     updatedat = models.DateTimeField()
     deleted_at = models.DateTimeField(null=True, blank=True)
@@ -160,51 +154,6 @@ class SharedUser(models.Model):
         db_table = USER_TABLE
         app_label = "shared_auth"
 
-    def __str__(self):
-        return self.get_full_name() or self.username
-
-    def get_full_name(self):
-        """Retorna nome completo"""
-        return f"{self.first_name} {self.last_name}".strip()
-
-    @property
-    def logged_organization(self):
-        """
-        Acessa organização logada (lazy loading)
-
-        Usage:
-            user = SharedUser.objects.get(pk=1)
-            org = user.logged_organization
-            print(org.name)
-        """
-        if self.logged_organization_id:
-            return SharedOrganization.objects.get_or_fail(self.logged_organization_id)
-        return None
-
-    @property
-    def organizations(self):
-        """
-        Retorna todas as organizações do usuário
-
-        Usage:
-            orgs = user.organizations
-        """
-        member_orgs = SharedMember.objects.for_user(self.pk)
-        org_ids = member_orgs.values_list("organization_id", flat=True)
-        return SharedOrganization.objects.filter(pk__in=org_ids)
-
-    @property
-    def memberships(self):
-        """
-        Retorna memberships do usuário
-
-        Usage:
-            memberships = user.memberships
-            for m in memberships:
-                print(m.organization.name)
-        """
-        return SharedMember.objects.for_user(self.pk)
-
 
 class SharedMember(models.Model):
     """

shared_auth/permissions.py

@@ -4,6 +4,8 @@ Permissões customizadas para DRF
 
 from rest_framework import permissions
 
+from shared_auth.middleware import get_member
+
 
 class IsAuthenticated(permissions.BasePermission):
     """
@@ -26,10 +28,10 @@ class HasActiveOrganization(permissions.BasePermission):
     message = "Organização ativa necessária."
 
     def has_permission(self, request, view):
-        if not request.user or not hasattr(request.user, "logged_organization_id"):
+        if not request.user or not hasattr(request, "organization_id"):
             return False
 
-        if not request.user.logged_organization_id:
+        if not request.organization_id:
             return False
 
         # Verificar se organização está ativa
@@ -37,7 +39,7 @@ class HasActiveOrganization(permissions.BasePermission):
 
         try:
             org = SharedOrganization.objects.using("auth_db").get(
-                pk=request.user.logged_organization_id
+                pk=request.organization_id
             )
             return org.is_active()
         except SharedOrganization.DoesNotExist:
@@ -54,13 +56,17 @@ class IsSameOrganization(permissions.BasePermission):
     message = "Você não tem permissão para acessar este recurso."
 
     def has_object_permission(self, request, view, obj):
-        if not hasattr(request.user, "logged_organization_id"):
+        if not hasattr(request, "organization_id"):
             return False
 
         if not hasattr(obj, "organization_id"):
             return True  # Se objeto não tem org, permite
 
-        return obj.organization_id == request.user.logged_organization_id
+        # Verifica se o usuário é membro da organização do objeto
+        if not get_member(request.user, obj.organization_id):
+            return False
+
+        return obj.organization_id == request.organization_id
 
 
 class IsOwnerOrSameOrganization(permissions.BasePermission):
@@ -78,9 +84,9 @@ class IsOwnerOrSameOrganization(permissions.BasePermission):
             return True
 
         # Verificar se é da mesma organização
-        if hasattr(obj, "organization_id") and hasattr(
-            request.user, "logged_organization_id"
-        ):
-            return obj.organization_id == request.user.logged_organization_id
+        if hasattr(obj, "organization_id") and hasattr(request, "organization_id"):
+            # Verifica se o usuário é membro da organização do objeto
+            if get_member(request.user, obj.organization_id):
+                return obj.organization_id == request.organization_id
 
         return False

maquinaweb_shared_auth-0.1.6.dist-info/RECORD

@@ -1,18 +0,0 @@
-shared_auth/__init__.py,sha256=WbDmRRdOp0nn5I_ksYjhAa2HRtXe0wxtGY6qnaiPlB8,397
-shared_auth/app.py,sha256=aOgzojmmabOvWfNqw7YFaM6L_dB8lsnF_No5HiRTFPk,152
-shared_auth/authentication.py,sha256=btrTjBszPrKKfKA4F0pOOzaxnfASgXb1y2cxQwOWbnk,1515
-shared_auth/conf.py,sha256=-jdnCokMvWvVKllfsxNYCsPk1Vo3MDRq4Y1MsO16oeA,411
-shared_auth/decorators.py,sha256=LTDHiVX36O65jbcCUqtoNPNkQ1suDH4fICXVyduZ1BM,3444
-shared_auth/exceptions.py,sha256=eiII-REupK6GeFinisteYO3FsGUDAN5zAajXPhTREm8,404
-shared_auth/fields.py,sha256=RAcmFh1D_nkbai_7t_OrPZhfhAipesy5kKnEj4LUvvM,1254
-shared_auth/managers.py,sha256=yPv40NxoOWyrJygLt6xYAHGAlKcvOYGRoUb6zKqLm4Y,7041
-shared_auth/middleware.py,sha256=y2blhI44nJL39UqyOxBgJjiafwuZEb7G0Zlvfge6rlo,6068
-shared_auth/mixins.py,sha256=3ARghQ4TvtENKoA5UTOHTrRHa6ufMRVJJHGFkV8-BL8,7550
-shared_auth/models.py,sha256=iszFHOhpD78tqcXaxxZ9_57wLdRq9i_ZsHWrfy5W9Nc,6997
-shared_auth/permissions.py,sha256=kkEMtClmV9VB3EOhKDyinSr4r5v9g-3DCCKNtqpaTz8,2473
-shared_auth/router.py,sha256=SbM5YEoxxg2zMns1kfFmsK9YrgqqVfc4-riniYY7rbQ,651
-shared_auth/serializers.py,sha256=TDpuZVsOL-6igINSOOOyELWbTUeet4XWRoBkvcMGjW4,4290
-maquinaweb_shared_auth-0.1.6.dist-info/METADATA,sha256=5iR99adsbbr8A5lCgPUrMDsfACRDdJyUnq1E48Jlc7w,27150
-maquinaweb_shared_auth-0.1.6.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-maquinaweb_shared_auth-0.1.6.dist-info/top_level.txt,sha256=msyYRy02ZV7zz7GR1raUI5LXGFIFn2TIkgkeKZqKufE,12
-maquinaweb_shared_auth-0.1.6.dist-info/RECORD,,