genichinandClaude Sonnet 4.6
d24058d863
- POST/PATCH/deactivate/activate /v1/admin/daemons — admin-only daemon CRUD (REQ-053)
- GET/PUT/DELETE /v1/daemons/{daemon_id}/credential — user-owned scoped credential management (REQ-052)
- Owner re-assignment auto-invalidates BrokerCredential via update_daemon_owner() (REQ-053 AC-4)
- Deactivation auto-revokes service tokens via revoke_tokens_by_daemon_id() (REQ-022 reuse, REQ-053 AC-6)
- DELETE /v1/admin/daemons/{id} → 405 (hard delete not provided, REQ-053 AC-8)
- All responses exclude app_key/app_secret; Fernet encryption at rest (REQ-054)
- Service-token → 403 on credential endpoints (REQ-052 AC-10)
- Admin ownership scope enforced: admin cannot write other user's credential (REQ-052 AC-9)
- REQ-051 regression: 4 service-token guard tests pass (REQ-054 AC-7)
- 44 new tests, 565 total passed (521 baseline + 44 new), 0 failures
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VHtM5Ws1HKCKQ4JGi6GRb5
98 lines
3.4 KiB
Python
98 lines
3.4 KiB
Python
"""FastAPI application entrypoint."""
|
|
|
|
from contextlib import asynccontextmanager
|
|
from typing import Callable
|
|
|
|
from fastapi import FastAPI
|
|
from fastapi.middleware.cors import CORSMiddleware
|
|
|
|
from app.api.health import router as health_router
|
|
from app.api.auth_routes import router as auth_router
|
|
from app.api.portfolios import router as portfolio_router
|
|
from app.api.strategy_sets import router as strategy_sets_router
|
|
from app.api.users import router as users_router
|
|
from app.api.v1_admin_daemons import router as v1_admin_daemons_router
|
|
from app.api.v1_assets import router as v1_assets_router
|
|
from app.api.v1_daemon_credential import router as v1_daemon_credential_router
|
|
from app.api.v1_daemons import router as v1_daemons_router
|
|
from app.api.v1_portfolios import router as v1_portfolios_router
|
|
from app.api.v1_tags import router as v1_tags_router
|
|
from app.api.v1_user_info import router as v1_user_info_router
|
|
from app.core.config import Settings, get_settings
|
|
from app.core.errors import register_exception_handlers
|
|
from app.core.security import hash_password
|
|
from app.repositories.factory import get_portfolio_repository_from_settings
|
|
from app.repositories.portfolio_repository import PortfolioRepository
|
|
|
|
|
|
def _bootstrap_initial_user(
|
|
settings: Settings,
|
|
repository_factory: Callable[[Settings], PortfolioRepository],
|
|
) -> None:
|
|
if not settings.db_enabled or settings.bootstrap_user_username is None or settings.bootstrap_user_password is None:
|
|
return
|
|
|
|
repository = repository_factory(settings)
|
|
try:
|
|
if repository.list_users():
|
|
return
|
|
repository.create_user(
|
|
settings.bootstrap_user_username,
|
|
email=settings.bootstrap_user_email,
|
|
password_hash=hash_password(settings.bootstrap_user_password),
|
|
permission="admin",
|
|
)
|
|
finally:
|
|
if callable(getattr(type(repository), "close", None)):
|
|
repository.close()
|
|
|
|
|
|
def create_app(
|
|
*,
|
|
settings_factory: Callable[[], Settings] = get_settings,
|
|
repository_factory: Callable[[Settings], PortfolioRepository] = get_portfolio_repository_from_settings,
|
|
) -> FastAPI:
|
|
settings = settings_factory()
|
|
|
|
@asynccontextmanager
|
|
async def lifespan(_: FastAPI):
|
|
_bootstrap_initial_user(settings, repository_factory)
|
|
if settings.db_enabled:
|
|
settings.require_credential_encryption_key()
|
|
yield
|
|
|
|
app = FastAPI(
|
|
title=settings.app_name,
|
|
version=settings.app_version,
|
|
docs_url="/docs",
|
|
redoc_url="/redoc",
|
|
root_path=settings.root_path,
|
|
lifespan=lifespan,
|
|
)
|
|
|
|
app.add_middleware(
|
|
CORSMiddleware,
|
|
allow_origins=settings.allowed_origins,
|
|
allow_credentials=True,
|
|
allow_methods=["GET", "POST", "PATCH", "DELETE", "OPTIONS"],
|
|
allow_headers=["Authorization", "Content-Type"],
|
|
)
|
|
|
|
app.include_router(health_router)
|
|
app.include_router(auth_router)
|
|
app.include_router(portfolio_router)
|
|
app.include_router(strategy_sets_router)
|
|
app.include_router(users_router)
|
|
app.include_router(v1_admin_daemons_router)
|
|
app.include_router(v1_assets_router)
|
|
app.include_router(v1_daemon_credential_router)
|
|
app.include_router(v1_daemons_router)
|
|
app.include_router(v1_portfolios_router)
|
|
app.include_router(v1_tags_router)
|
|
app.include_router(v1_user_info_router)
|
|
register_exception_handlers(app)
|
|
return app
|
|
|
|
|
|
app = create_app()
|