oxutils 0.4.1__tar.gz → 0.4.2__tar.gz

{oxutils-0.4.1 → oxutils-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: oxutils
-Version: 0.4.1
+Version: 0.4.2
 Summary: Production-ready utilities for Django applications in the Oxiliere ecosystem
 Keywords: django,utilities,jwt,audit,logging,celery,structlog
 Author: Edimedia Mutoke

{oxutils-0.4.1 → oxutils-0.4.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "oxutils"
-version = "0.4.1"
+version = "0.4.2"
 description = "Production-ready utilities for Django applications in the Oxiliere ecosystem"
 readme = "README.md"
 license = "LGPL-3.0-only"

{oxutils-0.4.1 → oxutils-0.4.2}/src/oxutils/__init__.py

@@ -15,7 +15,7 @@ This package provides:
 - Custom exceptions, enums, and type definitions
 """
 
-__version__ = "0.4.1"
+__version__ = "0.4.2"
 
 from oxutils.conf import AUDIT_MIDDLEWARE, UTILS_APPS
 from oxutils.settings import oxi_settings

{oxutils-0.4.1 → oxutils-0.4.2}/src/oxutils/oxiliere/middleware.py

@@ -99,8 +99,25 @@ class TenantMainMiddleware(MiddlewareMixin):
 
                 return HttpResponseBadRequest("Missing X-Organization-ID header")
         else:
-            # oxi_id present but no authenticated user
-            return self.no_tenant_found(request, oxi_id)
+            # oxi_id present but no authenticated user → fall back to system tenant
+            # (same behaviour as "no org header") — previously this raised Http404,
+            # which broke every route (including public ones) when the JWT token
+            # expired but the front-end still sent X-Organization-ID.
+            try:
+                from oxutils.oxiliere.caches import get_system_tenant
+
+                tenant = get_system_tenant()
+                # don't try to attach a tenant-user — the user is anonymous anyway
+                tenant.user = None
+            except Exception as e:
+                logger.error(
+                    "system_tenant_not_found",
+                    oxi_id=oxi_id,
+                    error=str(e),
+                )
+                from django.http import HttpResponseBadRequest
+
+                return HttpResponseBadRequest("Missing X-Organization-ID header")
 
         # ── Status guards ─────────────────────────────────────────────
         if tenant.is_deleted or not tenant.is_active: