Lars
5dc372c043
Some checks failed
Deploy Development / deploy (push) Failing after 42s
Test Suite / pytest-backend (push) Failing after 1s
Test Suite / k6 /api/health Baseline (push) Has been skipped
Test Suite / playwright-smoke (push) Has been skipped
Test Suite / lint-backend (push) Successful in 3s
Test Suite / compose-smoke (push) Has been skipped
Agenten authentifizieren per X-Actor-Token; /api/operational/ Fassade mit context, next-action, status, evidence; Token-Verwaltung unter /api/actors/{id}/service-tokens.
Co-authored-by: Cursor <cursoragent@cursor.com>
101 lines
3.3 KiB
Python
101 lines
3.3 KiB
Python
"""Actor directory API — AP0.7 + AP1.7c Service Tokens."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import Literal, Optional
|
|
|
|
from capabilities import require_capability
|
|
from fastapi import APIRouter, Depends, HTTPException, Query
|
|
from pydantic import BaseModel, Field
|
|
from services import actor_service_tokens
|
|
from services import actors as actor_service
|
|
from tenant_context import TenantContext
|
|
|
|
router = APIRouter(prefix="/api/actors", tags=["actors"])
|
|
|
|
|
|
class ServiceTokenCreateRequest(BaseModel):
|
|
label: str = Field(min_length=1, max_length=255)
|
|
capabilities: list[str] = Field(default_factory=list)
|
|
expires_in_days: Optional[int] = Field(default=365, ge=1, le=730)
|
|
|
|
|
|
@router.get("")
|
|
def list_actors(
|
|
actor_type: Optional[Literal["human", "agent", "working_group", "external_system"]] = None,
|
|
include_inactive: bool = Query(default=False),
|
|
q: Optional[str] = Query(default=None, max_length=100),
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.read")),
|
|
):
|
|
try:
|
|
return actor_service.list_actors(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_type=actor_type,
|
|
include_inactive=include_inactive,
|
|
q=q,
|
|
)
|
|
except ValueError as exc:
|
|
raise HTTPException(status_code=400, detail=str(exc)) from exc
|
|
|
|
|
|
@router.get("/{actor_id}")
|
|
def get_actor(
|
|
actor_id: str,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.read")),
|
|
):
|
|
item = actor_service.get_actor(tenant_id=ctx.tenant_id, actor_id=actor_id)
|
|
if not item:
|
|
raise HTTPException(status_code=404, detail="Actor nicht gefunden")
|
|
return item
|
|
|
|
|
|
@router.get("/{actor_id}/service-tokens")
|
|
def list_actor_service_tokens(
|
|
actor_id: str,
|
|
include_revoked: bool = Query(default=False),
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
actor = actor_service.get_actor(tenant_id=ctx.tenant_id, actor_id=actor_id)
|
|
if not actor:
|
|
raise HTTPException(status_code=404, detail="Actor nicht gefunden")
|
|
return actor_service_tokens.list_service_tokens_for_actor(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_id=actor_id,
|
|
include_revoked=include_revoked,
|
|
)
|
|
|
|
|
|
@router.post("/{actor_id}/service-tokens", status_code=201)
|
|
def create_actor_service_token(
|
|
actor_id: str,
|
|
body: ServiceTokenCreateRequest,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
try:
|
|
return actor_service_tokens.create_service_token(
|
|
tenant_id=ctx.tenant_id,
|
|
actor_id=actor_id,
|
|
label=body.label,
|
|
created_by_user_id=ctx.user_id,
|
|
capabilities=body.capabilities,
|
|
expires_in_days=body.expires_in_days,
|
|
)
|
|
except ValueError as exc:
|
|
detail = str(exc)
|
|
if detail == "Actor nicht gefunden":
|
|
raise HTTPException(status_code=404, detail=detail) from exc
|
|
raise HTTPException(status_code=400, detail=detail) from exc
|
|
|
|
|
|
@router.delete("/service-tokens/{token_id}", status_code=204)
|
|
def revoke_actor_service_token(
|
|
token_id: str,
|
|
ctx: TenantContext = Depends(require_capability("kairo.actor.manage")),
|
|
):
|
|
if not actor_service_tokens.revoke_service_token(
|
|
tenant_id=ctx.tenant_id,
|
|
token_id=token_id,
|
|
user_id=ctx.user_id,
|
|
):
|
|
raise HTTPException(status_code=404, detail="Token nicht gefunden")
|