irl/cloud-api
1
0
Fork 0
forked from sr2/cloud-api
Code Pull requests Activity

feat: auth dependency for root user with org in body

Browse source
This commit is contained in:
Chris Milne 2026-05-27 15:34:18 +01:00
parent 36736e5142
commit 51bb48372c
1 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
src/auth/dependencies.py
View file

@ -13,7 +13,7 @@ from typing import Annotated
from fastapi import Depends
from src.user.dependencies import user_model_claims_dependency
from src.organisation.dependencies import org_model_query_dependency
from src.organisation.dependencies import org_model_query_dependency, org_model_body_dependency
from src.organisation.models import Organisation as Org
from src.auth.exceptions import UnauthorizedException
@ -39,6 +39,16 @@ async def org_query_root_claims(user_model: user_model_claims_dependency, org_mo
org_model_root_claim_query_dependency = Annotated[type[Org], Depends(org_query_root_claims)]
async def org_body_root_claims(user_model: user_model_claims_dependency, org_model: org_model_body_dependency):
if org_model.root_user_id == user_model.id:
return org_model
raise UnauthorizedException()
org_model_root_claim_body_dependency = Annotated[type[Org], Depends(org_body_root_claims)]
async def is_super_admin(user_model: user_model_claims_dependency):
super_admin_emails = []
if user_model.email not in super_admin_emails: