piotr/innercontext
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
innercontext/.sisyphus/notepads/multi-user-authelia-oidc/decisions.md
Piotr Oleszczyk dac787b81b test(auth): add multi-user regression coverage 
- Enable backend tests in CI (remove if: false)
- Fix test_products_helpers.py to pass current_user parameter
- Fix test_routines_helpers.py to include short_id in products
- Fix llm_context.py to use product_effect_profile correctly
- All 221 tests passing
2026-03-12 16:42:00 +01:00

759 B
Raw Blame History

  • Added users, households, and household_memberships tables with OIDC identity key (oidc_issuer, oidc_subject) and one-household-per-user enforced via unique household_memberships.user_id.
  • Added is_household_shared to product_inventory with default False so sharing remains per-row opt-in.
  • Migration enforces ownership in two phases: nullable + backfill to bootstrap admin, then non-null constraints on all owned tables.
  • Correction: migration 4b7d2e9f1c3a applies a two-step ownership rollout (nullable user_id, bootstrap+backfill, then NOT NULL on owned tables).
  • Centralized tenant authorization in innercontext/api/authz.py and exposed wrappers in api/utils.py so routers can move from global get_or_404 to scoped helpers.