Commit graph

16 commits

Author SHA1 Message Date
d03478637a fix: remove oidc audience requirement 2026-05-28 15:16:21 +01:00
42349b0182 docs: auth docstrings
Issue: #13
2026-05-28 11:22:47 +01:00
a86cfea65a minor: type hint 2026-05-28 11:22:37 +01:00
88a64d2047 feat: root user dependencies also allow super admins 2026-05-28 10:56:45 +01:00
51bb48372c feat: auth dependency for root user with org in body 2026-05-27 15:34:18 +01:00
36736e5142 fix: auth dependency return values and types
Return values were all labelled as dicts instead of bools. Root user dependency now returns the org for which they are root user.
2026-05-27 15:22:32 +01:00
868e56ce40 feat: custom exceptions instead of direct fastapi.httpexceptions
Resolves #2
2026-05-27 14:58:10 +01:00
d3d3b2ca63 feat: auth dependencies
These dependencies require `user_model_claims_dependency` which requires the `claims_dependency`. This caused an import loop error and therefore they must be defined in a different file from `claims_dependency`.

Resolves #6
2026-05-27 14:30:11 +01:00
657f91d73d feat: org dependencies
Org endpoints use query/body model dependencies to perform initial db lookups.

Issue #6

Org ID path params have been replaced with either query params (get endpoints) or body values.

Resolves #10

Endpoints in other modules that rely on an org model lookup have also been updated.
2026-05-27 12:21:30 +01:00
fa8439cc6c feat: auth bypass for dev and testing
ENVIRONMENT must be "local" and DISABLE_AUTH set for this to be active. Both of these default to production values to prevent this being enabled accidentally.

Resolves #5
2026-05-26 11:42:49 +01:00
d51adb4e55 feat: org root user dependency 2026-05-25 09:54:46 +01:00
23f2ce98d7 feat: iam rbac system
Endpoints and db architecture to support a role based IAM system.
2026-05-25 09:05:17 +01:00
6871fcd75d feat: handling for expired token
Returns a 401 with "Token expired" as the detail
2026-05-20 10:50:49 +01:00
2b8296d622 feat: combined admin dependency
org_or_super_admin_dependency can be used in place of org_admin_dependency to also allow super admins.
2026-05-19 11:08:22 +01:00
34cb4414c9 feat: auth library upgrade
The parts of Authlib used are now deprecated in favour of JoseRFC.
2026-05-19 09:49:27 +01:00
376a7a9fe5 Initial commit 2026-04-06 12:41:49 +01:00