29 lines
1.2 KiB
Python
29 lines
1.2 KiB
Python
|
"""API 依赖：鉴权上下文（架构 §5.7 · 归属校验统一在此层）。
|
|||
|
|
|
|||
|
|
AuthContext 模型在 A4 冻结（开发计划 v1.1）；get_auth_context 完整实现归 B6：
|
|||
|
|
dev（app_env=development）从 X-Debug-Role / X-Debug-Actor 请求头构造，
|
|||
|
|
非 dev 环境启动时检测 debug 依赖注册即拒绝；T-01 就绪后仅替换工厂内部为 JWT 解析。
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
from __future__ import annotations
|
|||
|
|
|
|||
|
|
from pydantic import BaseModel, Field
|
|||
|
|
|
|||
|
|
|
|||
|
|
class AuthContext(BaseModel):
|
|||
|
|
"""统一鉴权上下文（全部 API 依赖层的产出；service 层签名接收此类型）。"""
|
|||
|
|
|
|||
|
|
actor_id: str = Field(..., description="操作者 ID：staff_id 或 customer_id")
|
|||
|
|
roles: list[str] = Field(default_factory=list, description="角色集合，如 ['risk_officer','risk_demo']")
|
|||
|
|
customer_id: str | None = Field(None, description="customer 角色时 = 本人 customer_id；其余为空")
|
|||
|
|
|
|||
|
|
def has_role(self, *roles: str) -> bool:
|
|||
|
|
return any(r in self.roles for r in roles)
|
|||
|
|
|
|||
|
|
def is_customer(self) -> bool:
|
|||
|
|
return "customer" in self.roles
|
|||
|
|
|
|||
|
|
|
|||
|
|
def get_auth_context() -> AuthContext:
|
|||
|
|
raise NotImplementedError("implemented in B6 (X-Debug-* in dev / JWT in T-01)")
|