Jeroen SchweitzerandClaude Opus 4.5
7752cd9d23
Architecture changes: - Permission format: domain.category:action (e.g., control-room.general:admin) - Decoupled groups from roles via group_roles mapping table - Groups are organizational (synced from Authentik) - Roles are permissions (admin-managed via API) New features: - require_permission() and require_any_permission() dependency factories - Action hierarchy: admin > editor > user > viewer - Global admin override (admin.general:admin grants all) - Group-role management endpoints (assign/remove roles) - GET /auth/roles endpoint to list all roles Database changes: - Added category column to roles table (default: general) - Removed authentik_group column (decoupled) - Added group_roles association table - Added user_groups association table - Migration updates role names to domain.general:action format Tests: - 67 new tests for auth service and controller - Covers token validation, user sync, role sync - Covers group-role assignment/removal - Covers schema conversions and permission system 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Alembic Migrations for Core-API This directory contains database migrations managed by Alembic. Commands: # Generate a new migration (after changing models) alembic revision --autogenerate -m "description" # Apply all pending migrations alembic upgrade head # Rollback last migration alembic downgrade -1 # View migration history alembic history # View current revision alembic current See https://alembic.sqlalchemy.org for more documentation.