statezero 0.1.0b65__tar.gz → 0.1.0b67__tar.gz

{statezero-0.1.0b65 → statezero-0.1.0b67}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statezero
-Version: 0.1.0b65
+Version: 0.1.0b67
 Summary: Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity.
 Author-email: Robert <robert.herring@statezero.dev>
 Project-URL: homepage, https://www.statezero.dev

{statezero-0.1.0b65 → statezero-0.1.0b67}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "statezero"
-version = "0.1.0b65"
+version = "0.1.0b67"
 description = "Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity."
 readme = "README.md"
 license = { file = "LICENSE" }

{statezero-0.1.0b65 → statezero-0.1.0b67}/statezero/adaptors/django/orm.py

@@ -314,11 +314,7 @@ class DjangoORMAdapter(AbstractORMProvider):
         instance = model.objects.get(q_obj)
 
         # Check object-level permissions for update.
-        for perm_cls in permissions:
-            perm = perm_cls()
-            allowed = perm.allowed_object_actions(req, instance, model)
-            if ActionType.UPDATE not in allowed:
-                raise PermissionDenied(f"Update not permitted on {instance}")
+        check_object_permissions(req, instance, ActionType.UPDATE, permissions, model)
 
         # Use the provided serializer's save method for the update
         return serializer.save(
@@ -347,11 +343,7 @@ class DjangoORMAdapter(AbstractORMProvider):
         instance = model.objects.get(q_obj)
 
         # Check object-level permissions.
-        for perm_cls in permissions:
-            perm = perm_cls()
-            allowed = perm.allowed_object_actions(req, instance, model)
-            if ActionType.DELETE not in allowed:
-                raise PermissionDenied(f"Delete not permitted on {instance}")
+        check_object_permissions(req, instance, ActionType.DELETE, permissions, model)
 
         instance.delete()
         return 1

{statezero-0.1.0b65 → statezero-0.1.0b67}/statezero/adaptors/django/urls.py

@@ -1,12 +1,13 @@
 from django.urls import path
 
-from .views import EventsAuthView, ModelListView, ModelView, SchemaView, FileUploadView, FastUploadView, ActionSchemaView, ActionView, ValidateView, FieldPermissionsView
+from .views import EventsAuthView, ModelListView, MeView, ModelView, SchemaView, FileUploadView, FastUploadView, ActionSchemaView, ActionView, ValidateView, FieldPermissionsView
 
 app_name = "statezero"
 
 urlpatterns = [
     path("events/auth/", EventsAuthView.as_view(), name="events_auth"),
     path("models/", ModelListView.as_view(), name="model_list"),
+    path("me/", MeView.as_view(), name="me"),
     path("files/upload/", FileUploadView.as_view(), name="file_upload"),
     path("files/fast-upload/", FastUploadView.as_view(), name="fast_file_upload"),
     path("actions/<str:action_name>/", ActionView.as_view(), name="action"),

{statezero-0.1.0b65 → statezero-0.1.0b67}/statezero/adaptors/django/views.py

@@ -23,6 +23,7 @@ from statezero.adaptors.django.exception_handler import \
 from statezero.adaptors.django.permissions import ORMBridgeViewAccessGate
 from statezero.adaptors.django.actions import DjangoActionSchemaGenerator
 from statezero.adaptors.django.action_serializers import get_or_build_action_serializer
+from statezero.adaptors.django.serializers import DRFDynamicSerializer
 from statezero.core.interfaces import AbstractEventEmitter, AbstractActionPermission
 from statezero.core.process_request import RequestProcessor
 from statezero.core.actions import action_registry
@@ -114,6 +115,64 @@ class ModelListView(APIView):
             model_names.append(model_name)
         return Response(model_names, status=status.HTTP_200_OK)
 
+class MeView(APIView):
+    """
+    Returns the current authenticated user as a guaranteed model summary.
+    Uses the existing StateZero serializer with only the PK field requested,
+    which includes `pk` and `repr` by design.
+    """
+
+    permission_classes = []
+
+    def get(self, request, *args, **kwargs):
+        try:
+            user = config.orm_provider.get_user(request)
+            if not user or not getattr(user, "is_authenticated", False):
+                raise PermissionDenied(detail="Authentication required.")
+
+            model = user.__class__
+            model_name = config.orm_provider.get_model_name(model)
+            pk_field = model._meta.pk.name
+            pk_value = getattr(user, pk_field)
+
+            fields_map = {
+                model_name: {pk_field},
+            }
+
+            serializer = DRFDynamicSerializer()
+            serialized = serializer.serialize(
+                data=user,
+                model=model,
+                depth=0,
+                fields_map=fields_map,
+                many=False,
+                request=request,
+            )
+
+            included = serialized.get("included", {})
+            user_bucket = included.get(model_name, {})
+            user_data = user_bucket.get(pk_value)
+
+            # Defensive fallback to keep the endpoint contract stable.
+            if user_data is None:
+                user_data = {
+                    pk_field: pk_value,
+                    "repr": {
+                        "str": str(user),
+                        "img": user.__img__() if hasattr(user, "__img__") else None,
+                    },
+                }
+
+            return Response(
+                {
+                    "model_name": model_name,
+                    "data": user_data,
+                },
+                status=status.HTTP_200_OK,
+            )
+        except Exception as original_exception:
+            return explicit_exception_handler(original_exception)
+
 
 class ModelView(APIView):
 

{statezero-0.1.0b65 → statezero-0.1.0b67}/statezero.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: statezero
-Version: 0.1.0b65
+Version: 0.1.0b67
 Summary: Connect your Python backend to a modern JavaScript SPA frontend with 90% less complexity.
 Author-email: Robert <robert.herring@statezero.dev>
 Project-URL: homepage, https://www.statezero.dev