Auth impl #10

Merged

pi3c merged 6 commits from feature/auth into dev 2026-05-02 09:11:33 +00:00

Conversation 0 Commits 6 Files Changed 99 +4149 -1231

pi3c commented 2026-05-02 08:51:01 +00:00

Owner

Copy Link

No description provided.

pi3c added 4 commits 2026-05-02 08:51:02 +00:00

fix: delete artefacts b8334efa5a

refactor: migrate to DDD architecture with Dishka DI ... 87b094220d

Complete architectural refactoring from simple MVC to Clean Architecture/DDD pattern:

Domain Layer:

- Add entities (Post, BaseEntity) with business logic

- Add value objects (Title, Content, Slug) with validation

- Add repository interfaces (PostRepository)

- Add domain exceptions

Application Layer:

- Add use cases (CreatePost, GetPost, UpdatePost, DeletePost, ListPosts, PublishPost)

- Add DTOs for data transfer

- Add TransactionManager interface

Infrastructure Layer:

- Add SQLAlchemy models and async database connection

- Add SQLAlchemyPostRepository implementation

- Add Dishka DI container with providers

- Add error handlers and middleware

Presentation Layer:

- Add FastAPI routes with Dishka integration

- Add Pydantic schemas

- Add dependency injection using FromDishka[T]

Other Changes:

- Remove old flat structure (api/, common/, core/, modules/)

- Add hatchling build system for package scripts

- Add blog CLI command

- Update AGENTS.md with new architecture docs

- All 48 tests passing, mypy clean, ruff clean

chore: remove blog.db from git and add to gitignore ddab62a883

feat(auth): implement Keycloak authentication with RBAC and pagination ... 184b95969c

Major changes:
- Add Keycloak integration via token introspection endpoint
- Implement RBAC system with roles: admin, user, guest
- Add role-based permissions for post operations
- Add pagination support (default limit: 10) to list endpoints
- Add published_only filter with admin-only override for unpublished posts

Security improvements:
- Remove hardcoded default secrets (SECRET_KEY, KEYCLOAK_CLIENT_SECRET)
- Update .env.example with proper security placeholders
- Add comprehensive RBAC unit tests

Infrastructure:
- Add httpx dependency for HTTP client
- Add KeycloakAuthClient with token caching (TTL: 60s)
- Add role-based dependencies (RequireAdmin, RequireUser, etc.)
- Update DI container with Keycloak provider

Endpoints updated:
- GET /posts: filter by published status (admin can see all)
- Add pagination params (limit, offset) to list endpoints
- Enforce RBAC on post operations

Tests:
- Add 16 auth infrastructure tests
- Add 13 RBAC role tests
- Update existing tests for new required settings

Breaking changes:
- SECRET_KEY and KEYCLOAK_CLIENT_SECRET now required (no defaults)

pi3c added 2 commits 2026-05-02 09:07:17 +00:00

style: apply ruff formatting and lint fixes 1dbedf0f52

style: apply ruff formatting to source and test files 14adcaa3e6

pi3c merged commit 6a528bcbb9 into dev 2026-05-02 09:11:33 +00:00

pi3c deleted branch feature/auth 2026-05-02 09:11:34 +00:00

pi3c referenced this issue from a commit 2026-05-02 09:11:34 +00:00

Auth impl (#10)

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

pi3c

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: pi3c/blog.pyaqa.ru#10