Praxis CI
f2a12f9fed
v0.4 (Operator Tier — Cohort Dashboard + Auth + Postgres) milestone complete. Phases: ✓ P0 pre-execution (planning) → v0.1.6 ✓ P1 operator foundation (Postgres+auth+VC migration) → v0.1.7 ✓ P2 cohort dashboard + aggregation → v0.1.8 ✓ P3 final review + ship → v0.1.9 (= v0.4 milestone release) Requirements covered (8/8): REQ-MT-01 (Postgres store), REQ-MT-02 (aggregation pipeline), REQ-AUTH-01 (operator auth), REQ-DASH-01 (cohort dashboard), REQ-NFR-AUTH-01 (auth NFRs), REQ-NFR-MT-01 (Postgres-in-LXC), REQ-NFR-DASH-01 (k-anonymity ≥10), REQ-NFR-DASH-02 (freshness ≤24h) Grill MUSTs honored (6/6): G-008, G-011, G-027, G-031, G-038, G-041 Tests: 317 pytest pass, 36 skip (Postgres-requiring), 0 fail; 17/17 vitest pass Review: APPROVE_WITH_NOTES (6/6 personas, 0 P0, 8 P1+ carry-forward) Audit: HEALTHY (reconstruction PASS, 8/8 REQ, 6/6 grill) ---ci--- project: praxis phase: 3 milestone: v0.4 status: complete phase_role: final milestone_complete: true milestone_merged_to_main: true tag: v0.1.9 requirements: covered: [REQ-MT-01, REQ-MT-02, REQ-AUTH-01, REQ-DASH-01, REQ-NFR-AUTH-01, REQ-NFR-MT-01, REQ-NFR-DASH-01, REQ-NFR-DASH-02] partial: [] ---/ci---
56 lines
2.0 KiB
Python
56 lines
2.0 KiB
Python
"""current_operator dependency (TASK-03-04, D-057).
|
|
|
|
Server-side auth enforcement: every `/api/operator/*` protected route uses
|
|
`Depends(current_operator)`. The dependency NEVER trusts the client (D-057)
|
|
— it reads the signed-cookie session, fetches the operator from Postgres,
|
|
and 401s on any gap (missing/invalid/expired cookie, unknown id, inactive
|
|
operator). The cookie is the authz *token*; the Postgres lookup is the
|
|
authz *decision*.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from fastapi import HTTPException, Request, status
|
|
|
|
from server.auth.models import Operator
|
|
|
|
|
|
async def current_operator(request: Request) -> Operator:
|
|
"""Resolve the authenticated operator from the signed-cookie session.
|
|
|
|
Raises 401 on: missing session, missing operator_id, no Postgres store
|
|
(503 actually — operator tier unavailable), unknown operator id, or an
|
|
inactive operator (session is cleared in the latter case so the client
|
|
cookie is invalidated).
|
|
"""
|
|
pg_store = getattr(request.app.state, "pg_store", None)
|
|
if pg_store is None:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_503_SERVICE_UNAVAILABLE,
|
|
detail="operator tier unavailable (no Postgres)",
|
|
)
|
|
session = request.session
|
|
op_id = session.get("operator_id") if session else None
|
|
if not op_id:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="not authenticated",
|
|
)
|
|
row = await pg_store.get_operator_by_id(op_id)
|
|
if row is None or not row.get("is_active"):
|
|
# Inactive/unknown → clear the session so the cookie is invalidated.
|
|
if session:
|
|
session.clear()
|
|
raise HTTPException(
|
|
status_code=status.HTTP_401_UNAUTHORIZED,
|
|
detail="not authenticated",
|
|
)
|
|
return Operator(
|
|
id=str(row["id"]),
|
|
username=row["username"],
|
|
display_name=row.get("display_name"),
|
|
role=row.get("role", "operator"),
|
|
)
|
|
|
|
|
|
__all__ = ["current_operator"] |