4eb28ae819
- PostgreSQL SET LOCAL doesn't support parameterized queries - Use string formatting (safe: user.id is UUID, role is enum) - Fixes 'syntax error at or near $1' error Co-Authored-By: Claude Sonnet 4.5 (1M context) <noreply@anthropic.com>
49 lines
1.8 KiB
Python
49 lines
1.8 KiB
Python
from collections.abc import AsyncGenerator
|
|
from fastapi import Request
|
|
from sqlalchemy.ext.asyncio import (
|
|
AsyncEngine,
|
|
create_async_engine,
|
|
async_sessionmaker,
|
|
AsyncSession,
|
|
)
|
|
from sqlalchemy import text
|
|
from utils.db_utils import get_database_url_and_connect_args
|
|
|
|
|
|
database_url, connect_args = get_database_url_and_connect_args()
|
|
|
|
sql_engine: AsyncEngine = create_async_engine(database_url, connect_args=connect_args)
|
|
async_session_maker = async_sessionmaker(sql_engine, expire_on_commit=False)
|
|
|
|
|
|
async def get_async_session(request: Request = None) -> AsyncGenerator[AsyncSession, None]:
|
|
"""
|
|
Get async database session with RLS (Row-Level Security) context.
|
|
|
|
Sets PostgreSQL session variables for RLS policies based on authenticated user:
|
|
- app.current_user_id: UUID of authenticated user
|
|
- app.user_role: User's role (super_admin, client_admin, user)
|
|
"""
|
|
async with async_session_maker() as session:
|
|
# Set RLS session variables if user is authenticated
|
|
if request and hasattr(request.state, "user") and request.state.user:
|
|
user = request.state.user
|
|
try:
|
|
# PostgreSQL SET LOCAL doesn't support parameterized queries
|
|
# Must use string formatting (safe because user.id is UUID and role is enum)
|
|
await session.execute(
|
|
text(f"SET LOCAL app.current_user_id = '{user.id}'")
|
|
)
|
|
await session.execute(
|
|
text(f"SET LOCAL app.user_role = '{user.role}'")
|
|
)
|
|
except Exception as e:
|
|
# Log but don't fail - RLS variables are defense-in-depth
|
|
print(f"Warning: Failed to set RLS variables: {e}")
|
|
|
|
yield session
|
|
|
|
|
|
async def create_db_and_tables():
|
|
"""No-op: migrations are now handled by Alembic."""
|
|
pass
|