Feature: Add async fastapi support#9

Merged

joschrag merged 41 commits into

mainfrom

feature/add-async-fastapi-support

Jun 19, 2026

Commits on Jun 18, 2026

[feat]: Scaffold Quart websocket auth example shell.
joschrag
committed
[feat]: Add public live counter/clock websocket page.
joschrag
committed
[feat]: Add private progress-task websocket page.
joschrag
committed
[refactor]: Drop redundant final set_props in private task.
joschrag
committed
[docs]: Add README for Quart websocket auth example.
joschrag
committed
[chore]: Add FastAPI test stack to dev dependencies.
joschrag
committed
[feat]: Add divergent-operation methods to Backend ABC with Flask/Quart defaults.
joschrag
committed
[feat]: Add FastAPIBackend core (ContextVar, request/session, url_for, redirect, coerce_response).
joschrag
committed
[feat]: Implement FastAPIBackend.register_auth_hook (pure-ASGI middleware with body replay).
joschrag
committed
[feat]: Add FastAPIBackend.setup_session and session_configured.
joschrag
committed
[refactor]: Route BasicAuth secret_key through backend.setup_session.
joschrag
committed
[feat]: Guard _current_user against unavailable session (FastAPI no-session path).
joschrag
committed
[feat]: Route public-route/callback storage through the backend (FastAPI server.state).
joschrag
committed
[test]: BasicAuth FastAPI integration spike + graceful threaded shutdown.
joschrag
committed
[test]: Complete BasicAuth FastAPI integration matrix (groups + auth_func).
joschrag
committed
[feat]: Add FastAPIBackend.add_route, make_oauth, and current_path.
joschrag
committed
[feat]: Wire OIDCAuth through the backend; add FastAPI views and get_oauth state branch.
joschrag
committed
[fix]: Annotate FastAPI OIDC view request params so Starlette injects the request.
joschrag
committed
[test]: Add OIDCAuth FastAPI integration tests with mocked IDP.
joschrag
committed
[docs]: Add FastAPI (async) backend section to README and mark it supported.
joschrag
committed
[chore]: Combine quart import in test after enabling combine-as-imports.
joschrag
committed
[fix]: Wire secure_session through setup_session and harden FastAPI session lookup under -O.
joschrag
committed
[test]: Rename auth_func login tests off the ba002/ba003 ids to ba004/ba005.
joschrag
committed
[chore]: Ignore local scratch dirs and scope docstring rules off examples.
joschrag
committed
[refactor]: Resolve the backend via the cached active backend in public_routes.
joschrag
committed
[refactor]: Replace OIDC isinstance dispatch with backend polymorphism and merge the view triplets.
joschrag
committed
[fix]: Emit http.disconnect once the replayed request body is consumed.
joschrag
committed
[test]: Cover the FastAPI fail-closed branches and real authlib OIDC state validation.
joschrag
committed
[test]: Add failing FastAPI WebSocket security tests (public/group paths rejected).
joschrag
committed
[test]: Explain the FastAPI suppress_origin quirk in the WS security test.
joschrag
committed
[fix]: Authenticate FastAPI WebSocket callbacks via Backend.ws_identity.
joschrag
committed
[refactor]: Migrate WS callback_map lazily in the message hook, not at Auth construction.
joschrag
committed
[test]: Cover the FastAPI protected WebSocket streaming auth path end-to-end.
joschrag
committed
[test]: Fix WS hook unit test for backend-driven identity and lazy setup.
joschrag
committed
[fix]: Resolve the public-route helpers' backend from app.server, not the global fallback.
joschrag
committed
[chore]: Fix typo in filenames.
joschrag
committed
[chore]: Add limitation section for quart and fastapi backends.
joschrag
committed