justin
dffd05d303
Wires the data model through repository -> service -> API/v1. The privacy engine (app/services/privacy.py) is the single enforcement point: every read resolves visibility there (tree role, tree visibility, per-person override; living-person redaction is a marked Phase 2 TODO). All writes record an attributable AuditEntry.
Endpoints: POST /users (open dev bootstrap until auth), GET /users/me, POST/GET /trees, GET /trees/{id}, and POST/GET /trees/{id}/persons. Authn is a temporary X-User-Id header shim; authz is membership-based (owner/editor/viewer). Domain errors map to 401/403/404/409. Verified on the deploy target: private tree -> 403 for non-members, missing actor -> 401, audit log populated.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Justin Paul <justin@jpaul.me>
22 lines
758 B
Python
22 lines
758 B
Python
from fastapi import APIRouter, status
|
|
|
|
from app.api.deps import CurrentUser, SessionDep
|
|
from app.schemas.user import UserCreate, UserRead
|
|
from app.services import user_service
|
|
|
|
router = APIRouter(prefix="/users", tags=["users"])
|
|
|
|
|
|
@router.post("", response_model=UserRead, status_code=status.HTTP_201_CREATED)
|
|
async def create_user(data: UserCreate, session: SessionDep) -> UserRead:
|
|
# Open dev bootstrap until the auth slice; lets us create tree owners.
|
|
user = await user_service.create_user(
|
|
session, email=data.email, display_name=data.display_name
|
|
)
|
|
return UserRead.model_validate(user)
|
|
|
|
|
|
@router.get("/me", response_model=UserRead)
|
|
async def read_me(current: CurrentUser) -> UserRead:
|
|
return UserRead.model_validate(current)
|