the37lab-authlib 0.1.1762438606__py3-none-any.whl → 0.1.1768813136__py3-none-any.whl

the37lab_authlib/db.py

@@ -60,6 +60,31 @@ class Database:
                         expires_at TIMESTAMP,
                         last_used_at TIMESTAMP
                     );
+
+                    CREATE TABLE IF NOT EXISTS groups (
+                        id {self._get_id_type()} PRIMARY KEY,
+                        name VARCHAR(255) UNIQUE NOT NULL,
+                        description TEXT,
+                        created_at TIMESTAMP NOT NULL
+                    );
+
+                    CREATE TABLE IF NOT EXISTS group_users (
+                        group_id {self._get_id_type()} REFERENCES groups(id),
+                        user_id {self._get_id_type()} REFERENCES users(id),
+                        PRIMARY KEY (group_id, user_id)
+                    );
+
+                    CREATE TABLE IF NOT EXISTS group_groups (
+                        group_id {self._get_id_type()} REFERENCES groups(id),
+                        child_group_id {self._get_id_type()} REFERENCES groups(id),
+                        PRIMARY KEY (group_id, child_group_id)
+                    );
+
+                    CREATE TABLE IF NOT EXISTS group_roles (
+                        group_id {self._get_id_type()} REFERENCES groups(id),
+                        role_id {self._get_id_type()} REFERENCES roles(id),
+                        PRIMARY KEY (group_id, role_id)
+                    );
                 """)
 
     def _get_id_type(self):
@@ -88,4 +113,4 @@ class Database:
 
     def close(self):
         if self._pool:
-            self._pool.closeall() 
+            self._pool.closeall()

the37lab_authlib/decorators.py

@@ -20,8 +20,12 @@ def require_auth(roles=None):
                 decorated_func = auth_decorator(f)
                 
                 # Check roles if specified
-                if roles and not any(role in user['roles'] for role in roles):
-                    raise AuthError('Insufficient permissions', 403)
+                if roles:
+                    user_roles = set(user.get('roles', []))
+                    expanded_user_roles = current_app.auth_manager._expand_roles(user_roles)
+                    required_roles = set(roles)
+                    if not expanded_user_roles.intersection(required_roles):
+                        raise AuthError('Insufficient permissions', 403)
                     
                 # Now execute the function
                 return decorated_func(*args, **kwargs)

{the37lab_authlib-0.1.1762438606.dist-info → the37lab_authlib-0.1.1768813136.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: the37lab_authlib
-Version: 0.1.1762438606
+Version: 0.1.1768813136
 Summary: Python SDK for the Authlib
 Author-email: the37lab <info@the37lab.com>
 Classifier: Programming Language :: Python :: 3
@@ -15,3 +15,5 @@ Requires-Dist: requests
 Requires-Dist: authlib
 Requires-Dist: bcrypt
 Requires-Dist: msal
+Requires-Dist: slack-sdk
+Requires-Dist: cachetools

the37lab_authlib-0.1.1768813136.dist-info/RECORD

@@ -0,0 +1,11 @@
+the37lab_authlib/__init__.py,sha256=cFVTWL-0YIMqwOMVy1P8mOt_bQODJp-L9bfp2QQ8CTo,132
+the37lab_authlib/_git_version.txt,sha256=CrWzycLKyBIHzUIn0w-HoMZUmfbnfTWW7M19s8MxG_8,103
+the37lab_authlib/auth.py,sha256=q0bL86C8dL5eFTqyvhjPjHoANZgE_-L5mp5UWuHkB50,90655
+the37lab_authlib/db.py,sha256=-supyzQGL7ej-Vhl3ViFMIlBUVkvZe_-Wg4RuIh9ijU,4359
+the37lab_authlib/decorators.py,sha256=9tfAPP7eMCPXUEDpiLOs1Fya_bstX6cYM2cn35tCNio,1534
+the37lab_authlib/exceptions.py,sha256=mdplK5sKNtagPAzSGq5NGsrQ4r-k03DKJBKx6myWwZc,317
+the37lab_authlib/models.py,sha256=-PlvQlHGIsSdrH0H9Cdh_vTPlltGV8G1Z1mmGQvAg9Y,3422
+the37lab_authlib-0.1.1768813136.dist-info/METADATA,sha256=d9eWR-MisU1GICD_5bJ9SjcXwljI5SzeZqWC27wfhpI,548
+the37lab_authlib-0.1.1768813136.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+the37lab_authlib-0.1.1768813136.dist-info/top_level.txt,sha256=6Jmxw4UeLrhfJXgRKbXWY4OhxRSaMs0dKKhNCGWWSwc,17
+the37lab_authlib-0.1.1768813136.dist-info/RECORD,,

the37lab_authlib-0.1.1762438606.dist-info/RECORD

@@ -1,10 +0,0 @@
-the37lab_authlib/__init__.py,sha256=cFVTWL-0YIMqwOMVy1P8mOt_bQODJp-L9bfp2QQ8CTo,132
-the37lab_authlib/auth.py,sha256=X-CVMIvSk3q03ccAjB1A0KGlKSVc1PI33flOdq5T0lQ,78219
-the37lab_authlib/db.py,sha256=cmnmykKvq6V5e-D0HGiRN4DjFBOGB-SL1HpFjR5uyCw,3162
-the37lab_authlib/decorators.py,sha256=L-gJUUwDUT2JXTptQ6XEey1LkI5RprbqzEfArWI7F8Y,1305
-the37lab_authlib/exceptions.py,sha256=mdplK5sKNtagPAzSGq5NGsrQ4r-k03DKJBKx6myWwZc,317
-the37lab_authlib/models.py,sha256=-PlvQlHGIsSdrH0H9Cdh_vTPlltGV8G1Z1mmGQvAg9Y,3422
-the37lab_authlib-0.1.1762438606.dist-info/METADATA,sha256=zgzkQjfoi6cg5TVXEAJHU9Ui_-bh70rY1ieww7wodDQ,497
-the37lab_authlib-0.1.1762438606.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-the37lab_authlib-0.1.1762438606.dist-info/top_level.txt,sha256=6Jmxw4UeLrhfJXgRKbXWY4OhxRSaMs0dKKhNCGWWSwc,17
-the37lab_authlib-0.1.1762438606.dist-info/RECORD,,