ilpanich / axiam-python-sdk / 29513366553

98%

push

github

feat(integrations): add require_access/require_role helpers for FastAPI and Django (CONTRACT §11) (#9)

* docs(contract): sync CONTRACT.md §11 declarative authorization helpers

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

* feat(integrations): add require_access/require_role helpers for FastAPI and Django (CONTRACT §11)

Add the declarative per-endpoint authorization layer from CONTRACT.md §11
on top of the existing §10 authentication guards:

- FastAPI (axiam_sdk.fastapi): require_access(verifier, configured_tenant,
  client, action, *, resource_param=, resource_id=, resolver=, scope=) as
  an async Depends(...) factory, plus require_role(verifier,
  configured_tenant, *roles). require_authenticated_user's body is
  refactored into a shared _authenticate(request) so both dependencies run
  the same auth pipeline.
- Django (axiam_sdk.django.decorators, new module): require_auth,
  require_access(client, action, resource_param="pk", scope=), and
  require_role(*roles) view decorators reading request.axiam_user, with
  dual sync/async view support.
- AxiamClient/AsyncAxiamClient.check_access gained an additive subject_id
  keyword so the helpers can check the request's authenticated caller
  rather than the client's own (often service-account) session.

Both integrations share the same §11 semantics: 401 unauthenticated, 403
denied, 400 unresolvable resource id, 503 fail-closed on a transport
failure, no decision caching, no raw token in any error output.

Vendored CONTRACT.md re-synced (§11 added) as this branch's first commit.
README conformance statement updated to §1-§11; CHANGELOG Added entry;
both examples extended; new test suites cover the full §11 matrix.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C5foj8NVCeS9qUW94kJ13g

---------

Co-authored-by: Claude <noreply@anthropic.com>

147 of 149 new or added lines in 4 files covered. (98.66%)

1045 of 1064 relevant lines covered (98.21%)

0.98 hits per line