snipe-auth-rbac 0.2.0

Two-layer RBAC (system + company) helpers for FastAPI / Flask / any Python backend — paired with the snipe-auth-rbac TS sibling.

snipe-auth-rbac

Python sibling of snipe-auth-rbac. Two-layer RBAC (system + per-company roles) for FastAPI / Flask / any Python backend.

See the top-level README for the full picture and the adoption guide for everyday usage.

Install

pip install "snipe-auth-rbac[fastapi]"

Three-line FastAPI integration

from auth_rbac import PermissionsService, ResourceDescriptor
from auth_rbac.deps import (
    configure_auth_rbac,
    require_permission,
    active_company_middleware,
)

service = PermissionsService(supabase=supabase, resources=RESOURCES)
service.sync_resources()      # auto-sync the registry on every boot
configure_auth_rbac(service=service, user_id_resolver=resolve_user_id)
app.middleware("http")(active_company_middleware)

@app.get("/payments")
async def list_payments(_=Depends(require_permission("payments", "read"))):
    ...

The Supabase migration that defines the rbac schema (tables + resolver functions) ships under sql/ in the parent repo — apply it once, and add rbac to your project's PostgREST exposed-schemas list before the first boot.

License

MIT.