wiregraph-fastapi 0.1.0

ASGI middleware for runtime PII leak detection — FastAPI/Starlette host for the wiregraph detection core

wiregraph-fastapi

ASGI middleware for runtime PII leak detection in FastAPI/Starlette apps. Reuses the framework-agnostic detection core from wiregraph — no Django at runtime.

Status

0.1.0 — log-only release. Detections are emitted to a configurable logger. Storage (SQLAlchemySink, alembic migrations) and a DRF-compatible read API land in 0.2.0 / 0.3.0.

Install

pip install wiregraph-fastapi

Quick start

from fastapi import FastAPI
from wiregraph_fastapi import LoggingSink, WiregraphMiddleware

app = FastAPI()
app.add_middleware(WiregraphMiddleware, sink=LoggingSink())

POST a request with PII in the body and a structured log line is emitted per match.

What's covered in 0.1.0

• Ingress: scans request bodies for PII before your handler sees them.
• Egress: scans response bodies after your handler returns (non-streaming only).
• JSON path enrichment: matches in JSON bodies are annotated with their dotted path.
• Admin-path exclusion: configurable URL prefixes are skipped.
• Tenant resolution: single-tenant by default; bring your own resolver for multi-tenant.

What's not covered in 0.1.0

• Streaming responses (StreamingResponse) — skipped, logged at debug.
• Websocket frames.
• Outbound HTTP interception (planned post-v1).
• Presidio async pass (regex-only).
• Persistent storage and dashboard — coming in 0.2.0 / 0.3.0.