tenants2fast-fastapi

🏢 Multi-tenancy management for FastAPI — tenant isolation, JWT-aware middleware, and permission-gated endpoints, all wired up in minutes.

Part of the *2fast-fastapi ecosystem: oauth2fast-fastapi → permissions2fast-fastapi → tenants2fast-fastapi.

Features

• 🔐 JWT-aware TenantMiddleware — extracts user from Bearer token and sets tenant context automatically on every request
• 🏗️ Isolated tenant databases — each tenant gets its own PostgreSQL database, created and initialized at runtime
• 🗂️ Tenant and TenantUser SQLModel models — ready-to-use ORM models with audit timestamps
• ⚡ Redis caching — tenant data and user permissions are cached via permissions2fast-fastapi
• 🔒 require_permission dependency — guard any route with a single line using the RBAC system from permissions2fast-fastapi

Installation

pip install tenants2fast-fastapi

Or with uv:

uv add tenants2fast-fastapi

Quick Start

from fastapi import Depends, FastAPI
from tenant2fast_fastapi import (
    TenantMiddleware,
    get_current_tenant,
    get_current_user,
    require_permission,
)

app = FastAPI()

# 1. Register the middleware
app.add_middleware(TenantMiddleware)

# 2. Use dependencies in your endpoints
@app.get("/me/tenant")
async def my_tenant(tenant=Depends(get_current_tenant)):
    return {"name": tenant.name, "slug": tenant.slug}

@app.get("/reports", dependencies=[Depends(require_permission("/reports", "GET"))])
async def reports(user=Depends(get_current_user)):
    return {"user": user.email}

See examples/basic_usage.py for a more complete example.

Configuration

All settings use the TENANT_ prefix and can be provided via environment variables or a .env file.

In addition, all variables required by oauth2fast-fastapi (JWT, DB connections, mail) and permissions2fast-fastapi (Redis) must be set — see their respective READMEs.

Public API

from tenant2fast_fastapi import (
    Tenant,                   # SQLModel ORM model (table: tenants)
    TenantUser,               # Many-to-many User ↔ Tenant (table: tenant_users)
    TenantMiddleware,         # Starlette BaseHTTPMiddleware
    get_current_tenant,       # FastAPI dependency → Tenant
    get_current_user,         # FastAPI dependency → User (from oauth2fast-fastapi)
    require_permission,       # Dependency factory → checks RBAC + cache
    create_tenant_database,   # async — creates a PG database for a tenant
    get_tenant_engine,        # returns (cached) AsyncEngine for a tenant DB
    initialize_tenant_schema, # async — runs SQLModel.metadata.create_all on tenant DB
)

Development

# Clone and install in editable mode with dev + test dependencies
git clone https://github.com/AngelDanielSanchezCastillo/tenants2fast-fastapi
cd tenants2fast-fastapi
uv sync --group dev --group test

# Copy .env and adjust to your local setup
cp .env .env.local   # or just edit .env directly

# Run tests (requires PostgreSQL + Redis)
uv run pytest tests/ -v

# Build distribution
uv build

Related Packages

Package	PyPI	Purpose
log2fast-fastapi		Structured logging
pgsqlasync2fast-fastapi		Async PostgreSQL connection manager
mailing2fast-fastapi		SMTP email sender
oauth2fast-fastapi		JWT Auth + User management
permissions2fast-fastapi		RBAC + Redis permission cache

📋 Naming Conventions

This package follows consistent naming conventions for models and database tables:

Model Classes (Python)

• Singular PascalCase
• Examples: User, Role, Permission, Category, Route

Database Tables

• Plural snake_case
• Examples: users, roles, permissions, categories, routes

Many-to-Many Join Tables

• Plural snake_case on both table names
• Alphabetical order of the two table names
• Examples: role_users (r < u), permission_roles (p < r), permission_routes (p < r)

Tenant-Local vs Auth DB Models

• Auth DB: Tenant (table: tenants), TenantUser (table: tenant_users) - maps users ↔ tenants
• Tenant DB: User, Role, Permission, Category, Route - local tenant entities

Generic Categories

• Use Category for generic categorization (not PermissionCategory)
• Can be reused across different entity types

License

MIT © Angel Daniel Sanchez Castillo