store-api-py 0.3.1__tar.gz → 0.4.0__tar.gz

{store_api_py-0.3.1 → store_api_py-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: store-api-py
-Version: 0.3.1
+Version: 0.4.0
 Summary: FastAPI adapter that auto-generates RESTful APIs for py-store schemas (schema-driven CRUD over GQL)
 License: MIT
 Keywords: py-store,storepy,fastapi,rest,crud,gql

{store_api_py-0.3.1 → store_api_py-0.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "store-api-py"
-version = "0.3.1"
+version = "0.4.0"
 description = "FastAPI adapter that auto-generates RESTful APIs for py-store schemas (schema-driven CRUD over GQL)"
 readme = "README.md"
 requires-python = ">=3.10"

{store_api_py-0.3.1 → store_api_py-0.4.0}/src/store_api_py/app.py

@@ -73,6 +73,17 @@ def create_app(
     if permission_error is None:
         permission_error = getattr(store, "PermissionError", None)
 
+    # fail-secure 装配守卫：宿主已开启上下文强制却未配 context_provider 时，装配期即
+    # 拒绝（fail-fast）。否则服务能启动、每个请求却在运行期以 ERR_NO_CONTEXT 失败——
+    # 配置错误被推迟成运行时事故（no-error-masking：不允许静默带错运行）。
+    require_context = getattr(store, "require_context", None)
+    if callable(require_context) and require_context() and context_provider is None:
+        raise RuntimeError(
+            "ERR_SECURE_CONFIG: 宿主已开启上下文强制（fail-secure）但未配置 context_provider；"
+            "请注入从请求解析身份的 context_provider（spec/04-context.md），"
+            "无需鉴权的内部服务请显式 store.set_require_context(False) 后再装配"
+        )
+
     def _respond(mapped: StoreApiError) -> JSONResponse:
         return JSONResponse(status_code=mapped.status_code, content=error_payload(mapped.code, mapped.message))
 

{store_api_py-0.3.1 → store_api_py-0.4.0}/src/store_api_py/errors.py

@@ -61,7 +61,7 @@ def context_error(message: str | None) -> StoreApiError:
 
 def map_error(err: BaseException, permission_error: type[BaseException] | None) -> StoreApiError:
     """判定顺序（spec/03-errors.md）：
-    未注入 resolver / 适配层守卫(400/413/501，由 StoreApiError 自带 status) → PermissionError(403)
+    未注入 resolver / 适配层守卫(400/413/501，由 StoreApiError 自带 status) → 权限类(403)
     → GQL 解析失败(400) → 其余 500 透传。
     """
     if isinstance(err, StoreApiError):
@@ -71,6 +71,11 @@ def map_error(err: BaseException, permission_error: type[BaseException] | None)
     if permission_error is not None and isinstance(err, permission_error):
         # 按类型判定，禁按 message 匹配
         return StoreApiError(403, store_code(err), str(err) or None)
+    if getattr(err, "code", None) == "no_context":
+        # spec/03 判定顺序第 3 层：权限类同档 —— py-store NoContextError（machine code
+        # `no_context`，requireContext 开启且 ctx 缺失）；按 code 判定（宿主已剥前缀），
+        # 禁按 message 匹配 → 403。
+        return StoreApiError(403, store_code(err), str(err) or None)
     # spec/03 判定顺序第 3 层：GQL 解析失败（core 稳定前缀 ERR_GQL_PARSE:，与
     # ERR_PERM_PREFIX 同构的类型级契约——前缀判定非文案脆弱匹配）→ 400 GQL_PARSE，
     # message 剥前缀取原文（与 go/rust/node 同语义）。

{store_api_py-0.3.1 → store_api_py-0.4.0}/src/store_api_py.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: store-api-py
-Version: 0.3.1
+Version: 0.4.0
 Summary: FastAPI adapter that auto-generates RESTful APIs for py-store schemas (schema-driven CRUD over GQL)
 License: MIT
 Keywords: py-store,storepy,fastapi,rest,crud,gql

{store_api_py-0.3.1 → store_api_py-0.4.0}/src/store_api_py.egg-info/SOURCES.txt

@@ -9,4 +9,5 @@ src/store_api_py.egg-info/SOURCES.txt
 src/store_api_py.egg-info/dependency_links.txt
 src/store_api_py.egg-info/requires.txt
 src/store_api_py.egg-info/top_level.txt
+tests/test_error_matrix.py
 tests/test_smoke.py

store_api_py-0.4.0/tests/test_error_matrix.py

@@ -0,0 +1,52 @@
+"""映射矩阵：每档错误语义 → REST 状态码（A3「可程序化区分」验收）。
+
+直接调纯函数 map_error（无需真实 store/库），用例与 node/test/error-matrix.test.js 同构。
+规范依据：spec/03-errors.md 判定顺序 + core machine code（`no_context` / `permission_denied`）。
+"""
+
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "src"))
+
+from store_api_py.errors import map_error  # noqa: E402
+
+
+class PermissionError(Exception):
+    """store 权限错误类（按类型判定，禁按 message 匹配）。"""
+
+
+def _err(message: str, code: str) -> Exception:
+    e = Exception(message)
+    e.code = code
+    return e
+
+
+def test_matrix_permission_to_403():
+    err = PermissionError("无访问权限")
+    err.code = "permission_denied"
+    r = map_error(err, PermissionError)
+    assert r.status_code == 403
+    assert r.code == "permission_denied"
+    assert r.message == "无访问权限"
+
+
+def test_matrix_no_context_to_403():
+    r = map_error(_err("上下文缺失", "no_context"), PermissionError)
+    assert r.status_code == 403
+    assert r.code == "no_context"
+    assert r.message == "上下文缺失"
+
+
+def test_matrix_gql_parse_to_400():
+    r = map_error(Exception("ERR_GQL_PARSE:意外的 token"), PermissionError)
+    assert r.status_code == 400
+    assert r.code == "GQL_PARSE"
+    assert r.message == "意外的 token"
+
+
+def test_matrix_other_to_500():
+    r = map_error(_err("连接超时", "CONN_TIMEOUT"), PermissionError)
+    assert r.status_code == 500
+    assert r.code == "CONN_TIMEOUT"
+    assert r.message == "连接超时"

{store_api_py-0.3.1 → store_api_py-0.4.0}/tests/test_smoke.py

@@ -86,6 +86,22 @@ def build_app(store, **extra):
     return create_app(store, prefix="/api", **extra)
 
 
+def test_secure_config_guard():
+    """fail-secure 装配守卫：require_context=True 且无 context_provider ⇒ 装配期 ERR_SECURE_CONFIG"""
+    store = MockStore()
+    store.require_context = lambda: True
+    # 无 context_provider：装配期拒绝（fail-fast，错误不推迟到运行期）
+    with pytest.raises(RuntimeError, match="ERR_SECURE_CONFIG"):
+        build_app(store)
+    # 补配 context_provider：正常装配
+    app = build_app(store, context_provider=lambda request: {"uid": "u1"})
+    assert app is not None
+    # require_context=False（默认姿态）时无守卫，照常装配
+    opened = MockStore()
+    opened.require_context = lambda: False
+    assert build_app(opened) is not None
+
+
 def test_filter_archived():
     assert filter_archived(["user", "userDeleted", "post", "logDeleted"]) == ["user", "post", "logDeleted"]