svc-infra 0.1.180__tar.gz → 0.1.182__tar.gz

{svc_infra-0.1.180 → svc_infra-0.1.182}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: svc-infra
-Version: 0.1.180
+Version: 0.1.182
 Summary: Infrastructure for building and deploying prod-ready services
 License: MIT
 Keywords: fastapi,sqlalchemy,alembic,auth,infra,async,pydantic

{svc_infra-0.1.180 → svc_infra-0.1.182}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "svc-infra"
-version = "0.1.180"
+version = "0.1.182"
 description = "Infrastructure for building and deploying prod-ready services"
 authors = ["Ali Khatami <aliikhatami94@gmail.com>"]
 license = "MIT"

svc_infra-0.1.182/src/svc_infra/auth/user_default.py

@@ -0,0 +1,53 @@
+from typing import Any, Dict
+from fastapi import HTTPException
+from fastapi_users.password import PasswordHelper
+from sqlalchemy import func, and_, or_
+
+from svc_infra.api.fastapi.db.service_hooks import ServiceWithHooks
+from svc_infra.api.fastapi.db.repository import Repository
+
+_pwd = PasswordHelper()
+
+def _user_pre_create(data: Dict[str, Any]) -> Dict[str, Any]:
+    data = dict(data)
+    # normalize + map fields
+    if "password" in data:
+        data["password_hash"] = _pwd.hash(data.pop("password"))
+    if "metadata" in data:
+        data["extra"] = data.pop("metadata")
+
+    # BEFORE insert: application-level guard (nice error)
+    # case-insensitive email; handle tenant/null logic the same way as your unique index
+    email = data.get("email")
+    tenant_id = data.get("tenant_id")
+    if email:
+        where = [func.lower(Repository.model.email) == func.lower(email)]
+        if tenant_id is None:
+            where.append(Repository.model.tenant_id.is_(None))
+        else:
+            where.append(Repository.model.tenant_id == tenant_id)
+
+        # use a small “exists” helper on the repo if you have it
+        async def _exists(session):
+            return await Repository.exists(session, where=where)
+
+        data["_precreate_exists_check"] = _exists  # stash callable for service.create to run
+
+    return data
+
+def _user_pre_update(data: Dict[str, Any]) -> Dict[str, Any]:
+    data = dict(data)
+    if "password" in data:
+        data["password_hash"] = _pwd.hash(data.pop("password"))
+    if "metadata" in data:
+        data["extra"] = data.pop("metadata")
+    return data
+
+def make_default_user_service(repo: Repository):
+    class _Svc(ServiceWithHooks):
+        async def create(self, session, data):
+            exists_cb = data.pop("_precreate_exists_check", None)
+            if exists_cb and await exists_cb(session):
+                raise HTTPException(status_code=409, detail="User with this email already exists.")
+            return await super().create(session, data)
+    return _Svc(repo, pre_create=_user_pre_create, pre_update=_user_pre_update)

{svc_infra-0.1.180 → svc_infra-0.1.182}/src/svc_infra/db/templates/models_schemas/auth/models.py.tmpl

@@ -4,15 +4,16 @@ from typing import Optional
 import uuid
 
 from sqlalchemy import (
-    String, Boolean, DateTime, JSON, Text, func, UniqueConstraint, Index
+    String, Boolean, DateTime, JSON, Text, func, Index
 )
 from sqlalchemy.dialects.postgresql import UUID
 from sqlalchemy.orm import Mapped, mapped_column
-from sqlalchemy.ext.mutable import MutableDict, MutableList  # <-- add
+from sqlalchemy.ext.mutable import MutableDict, MutableList
 
 from svc_infra.db.base import ModelBase
 from svc_infra.auth.user_default import _pwd
 
+
 class User(ModelBase):
     __tablename__ = "users"
 
@@ -24,10 +25,12 @@ class User(ModelBase):
     is_superuser: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False)
     is_verified: Mapped[bool] = mapped_column(Boolean, default=False, nullable=False)
 
+    # auth state
     password_hash: Mapped[str] = mapped_column(String(512), nullable=False)
 
+    # Write-only facade over password
     @property
-    def password(self) -> str:  # never readable
+    def password(self) -> str:
         raise AttributeError("password is write-only")
 
     @password.setter
@@ -53,12 +56,27 @@ class User(ModelBase):
         DateTime(timezone=True), server_default=func.now(), onupdate=func.now(), nullable=False
     )
 
-    __table_args__ = (
-        UniqueConstraint("tenant_id", "email", name="uq_users_tenant_email"),
-    )
-
     def __repr__(self) -> str:
         return f"<User id={self.id} email={self.email!r}>"
 
-# define functional index *after* class definition
+
+# ---------- Uniqueness: case-insensitive email per-tenant ----------
+# Because tenant_id is Optional (nullable), use two partial unique indexes:
+# - When tenant_id IS NULL: email (lowercased) must be globally unique
+# - When tenant_id IS NOT NULL: (tenant_id, lower(email)) must be unique
+Index(
+    "uq_users_email_lower_global",
+    func.lower(User.email),
+    unique=True,
+    postgresql_where=User.tenant_id.is_(None),
+)
+Index(
+    "uq_users_email_lower_per_tenant",
+    func.lower(User.email),
+    User.tenant_id,
+    unique=True,
+    postgresql_where=User.tenant_id.isnot(None),
+)
+
+# Optional helper index for case-insensitive lookups (non-unique)
 Index("ix_users_email_lower", func.lower(User.email))

{svc_infra-0.1.180 → svc_infra-0.1.182}/src/svc_infra/db/templates/models_schemas/auth/schemas.py.tmpl

@@ -1,4 +1,6 @@
 from __future__ import annotations
+
+from uuid import UUID
 from typing import Optional, Any, Dict, List
 from datetime import datetime
 from pydantic import BaseModel, EmailStr, Field, ConfigDict
@@ -21,7 +23,7 @@ class UserBase(BaseModel):
     metadata: Optional[Dict[str, Any]] = Field(default=None, alias="extra")  # <-- matches model.extra
 
 class UserRead(UserBase, Timestamped):
-    id: str
+    id: UUID
     last_login: Optional[datetime] = None
     disabled_reason: Optional[str] = None
 

svc_infra-0.1.180/src/svc_infra/auth/user_default.py

@@ -1,27 +0,0 @@
-from typing import Any, Dict
-from fastapi_users.password import PasswordHelper
-
-from svc_infra.api.fastapi.db.service_hooks import ServiceWithHooks
-from svc_infra.api.fastapi.db.repository import Repository
-
-_pwd = PasswordHelper()
-
-def _pre_create(data: Dict[str, Any]) -> Dict[str, Any]:
-    data = dict(data)
-    if "password" in data:
-        data["password_hash"] = _pwd.hash(data.pop("password"))
-    if "metadata" in data:   # pydantic alias -> model column "metadata" (extra)
-        data["extra"] = data.pop("metadata")
-    data.setdefault("roles", [])
-    return data
-
-def _pre_update(data: Dict[str, Any]) -> Dict[str, Any]:
-    data = dict(data)
-    if "password" in data:
-        data["password_hash"] = _pwd.hash(data.pop("password"))
-    if "metadata" in data:
-        data["extra"] = data.pop("metadata")
-    return data
-
-def make_default_user_service(repo: Repository):
-    return ServiceWithHooks(repo, pre_create=_pre_create, pre_update=_pre_update)