"use strict"; const {Fragment: _Fragment, jsx: _jsx, jsxs: _jsxs} = arguments[0]; const {useMDXComponents: _provideComponents} = arguments[0]; function _createMdxContent(props) { const _components = { a: "a", code: "code", h1: "h1", h2: "h2", hr: "hr", img: "img", li: "li", mermaid: "mermaid", p: "p", path: "path", pre: "pre", span: "span", svg: "svg", ul: "ul", ..._provideComponents(), ...props.components }; return _jsxs(_Fragment, { children: [_jsxs(_components.h1, { id: "a-rbac-api-tutorial-with-flask-sqlalchemy-argon2-and-jwt-pyjwt", children: [_jsx(_components.a, { className: "heading-link", href: "#a-rbac-api-tutorial-with-flask-sqlalchemy-argon2-and-jwt-pyjwt", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "A RBAC API Tutorial with Flask, SQLAlchemy, Argon2, and JWT (PyJWT)"] }), "\n", _jsx(_components.p, { children: "In this hands-on tutorial, you’ll build a small but complete API that demonstrates authentication and role-based authorization (RBAC) in Flask using:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Plain SQLAlchemy ORM (declarative_base)" }), "\n", _jsx(_components.li, { children: "Argon2 (argon2-cffi) for password hashing" }), "\n", _jsx(_components.li, { children: "PyJWT for JSON Web Tokens (JWT)" }), "\n", _jsx(_components.li, { children: "Marshmallow for validation and serialization" }), "\n", _jsx(_components.li, { children: "Flasgger for minimal, discoverable API docs" }), "\n", _jsx(_components.li, { children: "SQLite for development" }), "\n"] }), "\n", _jsx(_components.p, { children: "You will end up with a runnable API, a Swagger UI, minimal tests, and a Postman collection. Each section explains the “what” and the “why” so you can adapt these patterns to your own projects." }), "\n", _jsx(_components.p, { children: "Scope and design constraints" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "We keep a tiny domain (Users, Roles, Widgets) to focus on security concepts." }), "\n", _jsx(_components.li, { children: "Token model: a single 24-hour JWT used for all requests (we’ll call it your access token)." }), "\n", _jsx(_components.li, { children: "Rotation endpoint (/auth/rotate) to replace a token and revoke the old one." }), "\n", _jsxs(_components.li, { children: ["Fixed roles: admin, editor, user.", "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "user: read widgets" }), "\n", _jsx(_components.li, { children: "editor: create/update widgets" }), "\n", _jsx(_components.li, { children: "admin: delete widgets and manage user roles" }), "\n"] }), "\n"] }), "\n"] }), "\n", _jsx(_components.p, { children: "Terminology (quick reference)" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsxs(_components.li, { children: ["\n", _jsx(_components.p, { children: "Authentication: Verifying identity (e.g., login with email/password)." }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsx(_components.p, { children: "Authorization (RBAC): Deciding what an authenticated user can do, based on roles." }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsx(_components.p, { children: "JWT: A signed token containing claims (like user id, roles, expiry)." }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsx(_components.p, { children: "Argon2: A memory-hard hashing algorithm for storing passwords securely." }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsx(_components.p, { children: "Serialization vs Deserialization: Marshmallow “dump” serializes Python objects to JSON; “load” deserializes and validates incoming JSON to Python data." }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsxs(_components.p, { children: ["Login flow diagram: ", _jsx(_components.img, { src: "https://olah-notes-blog-olaholunuga.flowershow.me/projects/images/login-flow.png", alt: "Login flow diagram", "data-fs-resolved-file-path": "/projects/images/login-flow.png", className: "internal" })] }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsxs(_components.p, { children: ["Protected request + RBAC diagram: ", _jsx(_components.img, { src: "https://olah-notes-blog-olaholunuga.flowershow.me/projects/images/protected-rbac.png", alt: "Protected RBAC diagram", "data-fs-resolved-file-path": "/projects/images/protected-rbac.png", className: "internal" })] }), "\n"] }), "\n", _jsxs(_components.li, { children: ["\n", _jsxs(_components.p, { children: ["Swagger UI screenshot: ", _jsx(_components.img, { src: "https://olah-notes-blog-olaholunuga.flowershow.me/projects/swagger-ui.png", alt: "Swagger UI", "data-fs-resolved-file-path": "/projects/swagger-ui.png", className: "internal" })] }), "\n"] }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "1-project-setup", children: [_jsx(_components.a, { className: "heading-link", href: "#1-project-setup", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "1) Project Setup"] }), "\n", _jsx(_components.p, { children: "The tools we will be using" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Flask: a minimal web framework that lets us see every moving part." }), "\n", _jsx(_components.li, { children: "SQLAlchemy ORM (plain): control over engine, sessions, and patterns." }), "\n", _jsx(_components.li, { children: "Argon2: modern password hashing (resists GPU/ASIC attacks better than older hashes)." }), "\n", _jsx(_components.li, { children: "PyJWT: simple, explicit control over token claims and signing." }), "\n", _jsx(_components.li, { children: "Marshmallow: clean schema-based validation; separates input validation from model definitions." }), "\n", _jsx(_components.li, { children: "Flasgger: quick Swagger UI without coupling to frameworks." }), "\n", _jsx(_components.li, { children: "SQLite: zero-config DB for development." }), "\n"] }), "\n", _jsx(_components.p, { children: "Create and activate a virtual environment, then install dependencies:" }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: ["python ", _jsx(_components.span, { className: "token parameter variable", children: "-m" }), " venv .venv\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token builtin class-name", children: "source" }), " .venv/bin/activate ", _jsx(_components.span, { className: "token comment", children: "# Windows: .venv\\Scripts\\activate" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["pip ", _jsx(_components.span, { className: "token function", children: "install" }), " ", _jsx(_components.span, { className: "token parameter variable", children: "--upgrade" }), " pip\n"] }), _jsxs(_components.span, { className: "code-line", children: ["pip ", _jsx(_components.span, { className: "token function", children: "install" }), " Flask SQLAlchemy PyJWT argon2-cffi marshmallow flasgger python-dotenv pytest\n"] })] }) }), "\n", _jsx(_components.p, { children: "Create a .env to centralize environment variables (python-dotenv loads it):" }), "\n", _jsx(_components.pre, { children: _jsxs(_components.code, { className: "language-env code-highlight", children: [_jsx(_components.span, { className: "code-line", children: "FLASK_ENV=development\n" }), _jsx(_components.span, { className: "code-line", children: "JWT_SECRET=dev-please-change-me\n" }), _jsx(_components.span, { className: "code-line", children: "DATABASE_URL=sqlite:///instance/app.db\n" }), _jsx(_components.span, { className: "code-line", children: "ADMIN_DEFAULT_EMAIL=admin@example.com\n" }), _jsx(_components.span, { className: "code-line", children: "ADMIN_DEFAULT_PASSWORD=Admin1234!\n" })] }) }), "\n", _jsx(_components.p, { children: "codebase structure:" }), "\n", _jsx(_components.pre, { children: _jsxs(_components.code, { className: "language-auto code-highlight", children: [_jsx(_components.span, { className: "code-line", children: "project/\n" }), _jsx(_components.span, { className: "code-line", children: " app/\n" }), _jsx(_components.span, { className: "code-line", children: " __init__.py\n" }), _jsx(_components.span, { className: "code-line", children: " config.py\n" }), _jsx(_components.span, { className: "code-line", children: " storage/\n" }), _jsx(_components.span, { className: "code-line", children: " db.py\n" }), _jsx(_components.span, { className: "code-line", children: " models/\n" }), _jsx(_components.span, { className: "code-line", children: " base.py\n" }), _jsx(_components.span, { className: "code-line", children: " user.py\n" }), _jsx(_components.span, { className: "code-line", children: " role.py\n" }), _jsx(_components.span, { className: "code-line", children: " user_role.py\n" }), _jsx(_components.span, { className: "code-line", children: " widget.py\n" }), _jsx(_components.span, { className: "code-line", children: " blacklisted_token.py\n" }), _jsx(_components.span, { className: "code-line", children: " __init__.py\n" }), _jsx(_components.span, { className: "code-line", children: " schemas/\n" }), _jsx(_components.span, { className: "code-line", children: " auth.py\n" }), _jsx(_components.span, { className: "code-line", children: " user.py\n" }), _jsx(_components.span, { className: "code-line", children: " widget.py\n" }), _jsx(_components.span, { className: "code-line", children: " api/\n" }), _jsx(_components.span, { className: "code-line", children: " auth/\n" }), _jsx(_components.span, { className: "code-line", children: " __init__.py\n" }), _jsx(_components.span, { className: "code-line", children: " routes.py\n" }), _jsx(_components.span, { className: "code-line", children: " widgets/\n" }), _jsx(_components.span, { className: "code-line", children: " __init__.py\n" }), _jsx(_components.span, { className: "code-line", children: " routes.py\n" }), _jsx(_components.span, { className: "code-line", children: " admin/\n" }), _jsx(_components.span, { className: "code-line", children: " __init__.py\n" }), _jsx(_components.span, { className: "code-line", children: " routes.py\n" }), _jsx(_components.span, { className: "code-line", children: " utils/\n" }), _jsx(_components.span, { className: "code-line", children: " auth.py # hash/verify + decorators\n" }), _jsx(_components.span, { className: "code-line", children: " jwt.py # issue/decode/blacklist helpers\n" }), _jsx(_components.span, { className: "code-line", children: " docs/\n" }), _jsx(_components.span, { className: "code-line", children: " auth/\n" }), _jsx(_components.span, { className: "code-line", children: " login.yml\n" }), _jsx(_components.span, { className: "code-line", children: " register.yml\n" }), _jsx(_components.span, { className: "code-line", children: " rotate.yml\n" }), _jsx(_components.span, { className: "code-line", children: " logout.yml\n" }), _jsx(_components.span, { className: "code-line", children: " me.yml\n" }), _jsx(_components.span, { className: "code-line", children: " widgets/\n" }), _jsx(_components.span, { className: "code-line", children: " list.yml\n" }), _jsx(_components.span, { className: "code-line", children: " get.yml\n" }), _jsx(_components.span, { className: "code-line", children: " create.yml\n" }), _jsx(_components.span, { className: "code-line", children: " update.yml\n" }), _jsx(_components.span, { className: "code-line", children: " delete.yml\n" }), _jsx(_components.span, { className: "code-line", children: " admin/\n" }), _jsx(_components.span, { className: "code-line", children: " list_users.yml\n" }), _jsx(_components.span, { className: "code-line", children: " assign_role.yml\n" }), _jsx(_components.span, { className: "code-line", children: " revoke_role.yml\n" }), _jsx(_components.span, { className: "code-line", children: " tests/\n" }), _jsx(_components.span, { className: "code-line", children: " conftest.py\n" }), _jsx(_components.span, { className: "code-line", children: " test_auth_flow.py\n" }), _jsx(_components.span, { className: "code-line", children: " postman/\n" }), _jsx(_components.span, { className: "code-line", children: " collection.json\n" }), _jsx(_components.span, { className: "code-line", children: " run.py\n" }), _jsx(_components.span, { className: "code-line", children: " .env\n" }), _jsx(_components.span, { className: "code-line", children: " README.md\n" })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "2-configuration-and-app-factory", children: [_jsx(_components.a, { className: "heading-link", href: "#2-configuration-and-app-factory", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "2) Configuration and App Factory"] }), "\n", _jsx(_components.p, { children: "Why an application factory?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "It gives you a clean, testable way to build app instances with different configs (e.g., tests vs dev)." }), "\n", _jsx(_components.li, { children: "You can wire dependencies (DB, blueprints, etc.) in one place." }), "\n"] }), "\n", _jsx(_components.p, { children: "What goes in configuration?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Database URL, JWT parameters (secret, algorithm, TTL), and dev-only defaults like the seed admin." }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/config.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "import" }), " os\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " dataclasses ", _jsx(_components.span, { className: "token keyword", children: "import" }), " dataclass\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "try" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " dotenv ", _jsx(_components.span, { className: "token keyword", children: "import" }), " load_dotenv\n"] }), _jsxs(_components.span, { className: "code-line", children: [" load_dotenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "except" }), " Exception", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "pass" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@dataclass" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "Config" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" FLASK_ENV", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "getenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"FLASK_ENV\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"production\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" DEBUG", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "bool" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " FLASK_ENV ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token string", children: "\"development\"" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" DATABASE_URL", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "getenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"DATABASE_URL\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"sqlite:///instance/app.db\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" JWT_SECRET", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "getenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"JWT_SECRET\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"change-me-in-prod\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" JWT_ALG", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"HS256\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" JWT_TTL_SECONDS", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token number", children: "24" }), " ", _jsx(_components.span, { className: "token operator", children: "*" }), " ", _jsx(_components.span, { className: "token number", children: "60" }), " ", _jsx(_components.span, { className: "token operator", children: "*" }), " ", _jsx(_components.span, { className: "token number", children: "60" }), " ", _jsx(_components.span, { className: "token comment", children: "# 24 hours" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ADMIN_DEFAULT_EMAIL", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "getenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_EMAIL\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"admin@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ADMIN_DEFAULT_PASSWORD", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "getenv", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_PASSWORD\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"Admin1234!\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "load_config" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Config", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " Config", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "The application factory wires storage, models, Swagger, and blueprints; it also seeds roles and a default admin in development." }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/__init__.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Flask\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flasgger ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Swagger\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config ", _jsx(_components.span, { className: "token keyword", children: "import" }), " load_config\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "db ", _jsx(_components.span, { className: "token keyword", children: "import" }), " DBStorage\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "create_app" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Flask", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" cfg ", _jsx(_components.span, { className: "token operator", children: "=" }), " load_config", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app ", _jsx(_components.span, { className: "token operator", children: "=" }), " Flask", _jsx(_components.span, { className: "token punctuation", children: "(" }), "__name__", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "." }), "from_object", _jsx(_components.span, { className: "token punctuation", children: "(" }), "cfg", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# Initialize storage" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" storage ", _jsx(_components.span, { className: "token operator", children: "=" }), " DBStorage", _jsx(_components.span, { className: "token punctuation", children: "(" }), "db_url", _jsx(_components.span, { className: "token operator", children: "=" }), "cfg", _jsx(_components.span, { className: "token punctuation", children: "." }), "DATABASE_URL", _jsx(_components.span, { className: "token punctuation", children: "," }), " echo", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token builtin", children: "getattr" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "app", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"extensions\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"storage\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " storage\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# Register models and create tables" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models ", _jsx(_components.span, { className: "token keyword", children: "import" }), " ", _jsx(_components.span, { className: "token punctuation", children: "(" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" Base", _jsx(_components.span, { className: "token punctuation", children: "," }), " User", _jsx(_components.span, { className: "token punctuation", children: "," }), " Role", _jsx(_components.span, { className: "token punctuation", children: "," }), " UserRole", _jsx(_components.span, { className: "token punctuation", children: "," }), " Widget", _jsx(_components.span, { className: "token punctuation", children: "," }), " BlacklistedToken", _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ROLE_ADMIN", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_EDITOR", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_USER", _jsx(_components.span, { className: "token punctuation", children: "," }), " FIXED_ROLES\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "register_models", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), "User", _jsx(_components.span, { className: "token punctuation", children: "," }), " Role", _jsx(_components.span, { className: "token punctuation", children: "," }), " UserRole", _jsx(_components.span, { className: "token punctuation", children: "," }), " Widget", _jsx(_components.span, { className: "token punctuation", children: "," }), " BlacklistedToken", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" Base", _jsx(_components.span, { className: "token punctuation", children: "." }), "metadata", _jsx(_components.span, { className: "token punctuation", children: "." }), "create_all", _jsx(_components.span, { className: "token punctuation", children: "(" }), "storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "_engine", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# Seed fixed roles + default admin in development" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"FLASK_ENV\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token string", children: "\"development\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " hash_password\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" existing ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "r", _jsx(_components.span, { className: "token punctuation", children: "." }), "name ", _jsx(_components.span, { className: "token keyword", children: "for" }), " r ", _jsx(_components.span, { className: "token keyword", children: "in" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " rname ", _jsx(_components.span, { className: "token keyword", children: "in" }), " FIXED_ROLES", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " rname ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token keyword", children: "in" }), " existing", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: "(" }), "name", _jsx(_components.span, { className: "token operator", children: "=" }), "rname", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" admin_email ", _jsx(_components.span, { className: "token operator", children: "=" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_EMAIL\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" admin ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "email", _jsx(_components.span, { className: "token operator", children: "=" }), "admin_email", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one_or_none", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " admin ", _jsx(_components.span, { className: "token keyword", children: "is" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" admin ", _jsx(_components.span, { className: "token operator", children: "=" }), " User", _jsx(_components.span, { className: "token punctuation", children: "(" }), "email", _jsx(_components.span, { className: "token operator", children: "=" }), "admin_email", _jsx(_components.span, { className: "token punctuation", children: "," }), " password_hash", _jsx(_components.span, { className: "token operator", children: "=" }), "hash_password", _jsx(_components.span, { className: "token punctuation", children: "(" }), "app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_PASSWORD\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "admin", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" admin_role ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "name", _jsx(_components.span, { className: "token operator", children: "=" }), "ROLE_ADMIN", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" admin", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "." }), "append", _jsx(_components.span, { className: "token punctuation", children: "(" }), "admin_role", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# Blueprints" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp ", _jsx(_components.span, { className: "token keyword", children: "as" }), " auth_bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "widgets ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp ", _jsx(_components.span, { className: "token keyword", children: "as" }), " widgets_bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "admin ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp ", _jsx(_components.span, { className: "token keyword", children: "as" }), " admin_bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "register_blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), "auth_bp", _jsx(_components.span, { className: "token punctuation", children: "," }), " url_prefix", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"/auth\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "register_blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), "widgets_bp", _jsx(_components.span, { className: "token punctuation", children: "," }), " url_prefix", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "register_blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), "admin_bp", _jsx(_components.span, { className: "token punctuation", children: "," }), " url_prefix", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"/admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# Swagger / Flasgger" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" swagger_template ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"swagger\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"2.0\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"info\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"title\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"RBAC API (Flask + SQLAlchemy + JWT + Argon2)\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"version\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"1.0.0\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"description\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Minimal RBAC API with single-token JWT, rotation, blacklist, and role enforcement.\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"basePath\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"/\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"schemes\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"http\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"securityDefinitions\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"BearerAuth\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"type\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"apiKey\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Authorization\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"in\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"header\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"description\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"JWT Authorization header using the Bearer scheme. Example: 'Authorization: Bearer {token}'\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"security\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"BearerAuth\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"tags\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" Swagger", _jsx(_components.span, { className: "token punctuation", children: "(" }), "app", _jsx(_components.span, { className: "token punctuation", children: "," }), " template", _jsx(_components.span, { className: "token operator", children: "=" }), "swagger_template", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@app", _jsx(_components.span, { className: "token punctuation", children: "." }), "teardown_appcontext"] }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "shutdown_session" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "_exc", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "close", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " app\n"] })] }) }), "\n", _jsx(_components.p, { children: "Entry point:" }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# run.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app ", _jsx(_components.span, { className: "token keyword", children: "import" }), " create_app\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["app ", _jsx(_components.span, { className: "token operator", children: "=" }), " create_app", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "if" }), " __name__ ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token string", children: "\"__main__\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app", _jsx(_components.span, { className: "token punctuation", children: "." }), "run", _jsx(_components.span, { className: "token punctuation", children: "(" }), "debug", _jsx(_components.span, { className: "token operator", children: "=" }), "app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"DEBUG\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Why teardown_appcontext?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "We use SQLAlchemy’s scoped_session. Removing/closing the session at request end avoids leaks and ensures a clean session per request thread." }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "3-storage-layer-plain-sqlalchemy", children: [_jsx(_components.a, { className: "heading-link", href: "#3-storage-layer-plain-sqlalchemy", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "3) Storage Layer (Plain SQLAlchemy)"] }), "\n", _jsx(_components.p, { children: "Why use plain SQLAlchemy?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Using plain SQLAlchemy teaches you how sessions and engines work, which helps in larger apps and different frameworks." }), "\n", _jsx(_components.li, { children: "You gain flexibility (e.g., custom session lifecycles, multiple engines) without framework constraints." }), "\n"] }), "\n", _jsx(_components.p, { children: "We create:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "A Base via declarative_base" }), "\n", _jsxs(_components.li, { children: ["A DBStorage class that:", "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Manages an engine and a scoped_session" }), "\n", _jsx(_components.li, { children: "Provides simple CRUD-like helpers (all, get, count)" }), "\n", _jsx(_components.li, { children: "Registers models so all() and count() can iterate them when no class is specified" }), "\n"] }), "\n"] }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/base.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy", _jsx(_components.span, { className: "token punctuation", children: "." }), "orm ", _jsx(_components.span, { className: "token keyword", children: "import" }), " declarative_base\n"] }), _jsxs(_components.span, { className: "code-line", children: ["Base ", _jsx(_components.span, { className: "token operator", children: "=" }), " declarative_base", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/storage/db.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " typing ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Any", _jsx(_components.span, { className: "token punctuation", children: "," }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "," }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "," }), " Type", _jsx(_components.span, { className: "token punctuation", children: "," }), " Iterable\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " contextlib ", _jsx(_components.span, { className: "token keyword", children: "import" }), " contextmanager\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " create_engine\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy", _jsx(_components.span, { className: "token punctuation", children: "." }), "orm ", _jsx(_components.span, { className: "token keyword", children: "import" }), " scoped_session", _jsx(_components.span, { className: "token punctuation", children: "," }), " sessionmaker", _jsx(_components.span, { className: "token punctuation", children: "," }), " Session\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "DBStorage" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token triple-quoted-string string", children: "\"\"\"Plain SQLAlchemy storage with scoped_session.\"\"\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "__init__" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " db_url", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " echo", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "bool" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_engine ", _jsx(_components.span, { className: "token operator", children: "=" }), " create_engine", _jsx(_components.span, { className: "token punctuation", children: "(" }), "db_url", _jsx(_components.span, { className: "token punctuation", children: "," }), " echo", _jsx(_components.span, { className: "token operator", children: "=" }), "echo", _jsx(_components.span, { className: "token punctuation", children: "," }), " future", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_session_factory ", _jsx(_components.span, { className: "token operator", children: "=" }), " sessionmaker", _jsx(_components.span, { className: "token punctuation", children: "(" }), "bind", _jsx(_components.span, { className: "token operator", children: "=" }), "self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_engine", _jsx(_components.span, { className: "token punctuation", children: "," }), " expire_on_commit", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " future", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_Session ", _jsx(_components.span, { className: "token operator", children: "=" }), " scoped_session", _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_session_factory", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_classes", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " Type", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token decorator annotation punctuation", children: "@property" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "session" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Session", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_Session\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "register_models" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " models", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Iterable", _jsx(_components.span, { className: "token punctuation", children: "[" }), "Type", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " m ", _jsx(_components.span, { className: "token keyword", children: "in" }), " models", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_classes", _jsx(_components.span, { className: "token punctuation", children: "[" }), "m", _jsx(_components.span, { className: "token punctuation", children: "." }), "__name__", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " m\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "reload" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" Base", _jsx(_components.span, { className: "token punctuation", children: "." }), "metadata", _jsx(_components.span, { className: "token punctuation", children: "." }), "create_all", _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_engine", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "close" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_Session", _jsx(_components.span, { className: "token punctuation", children: "." }), "remove", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "new" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " obj", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Any", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "save" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "delete" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " obj", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Any", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " obj ", _jsx(_components.span, { className: "token keyword", children: "is" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "delete", _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " cls", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "[" }), "Type", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " Any", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" result", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " Any", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " cls ", _jsx(_components.span, { className: "token keyword", children: "is" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " obj ", _jsx(_components.span, { className: "token keyword", children: "in" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "cls", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" key ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsxs(_components.span, { className: "token string-interpolation", children: [_jsx(_components.span, { className: "token string", children: "f\"" }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), "obj", _jsx(_components.span, { className: "token punctuation", children: "." }), "__class__", _jsx(_components.span, { className: "token punctuation", children: "." }), "__name__", _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "." }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token builtin", children: "getattr" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "'id'" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "\"" })] }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" result", _jsx(_components.span, { className: "token punctuation", children: "[" }), "key", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " obj\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " result\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " _name", _jsx(_components.span, { className: "token punctuation", children: "," }), " model ", _jsx(_components.span, { className: "token keyword", children: "in" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_classes", _jsx(_components.span, { className: "token punctuation", children: "." }), "items", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " obj ", _jsx(_components.span, { className: "token keyword", children: "in" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "model", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" key ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsxs(_components.span, { className: "token string-interpolation", children: [_jsx(_components.span, { className: "token string", children: "f\"" }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), "obj", _jsx(_components.span, { className: "token punctuation", children: "." }), "__class__", _jsx(_components.span, { className: "token punctuation", children: "." }), "__name__", _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "." }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token builtin", children: "getattr" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "'id'" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "obj", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "\"" })] }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" result", _jsx(_components.span, { className: "token punctuation", children: "[" }), "key", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " obj\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " result\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "get" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " cls", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Type", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Any", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "[" }), "Any", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "cls", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "count" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " cls", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "[" }), "Type", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " cls ", _jsx(_components.span, { className: "token keyword", children: "is" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "cls", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "count", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" total ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token number", children: "0" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " _name", _jsx(_components.span, { className: "token punctuation", children: "," }), " model ", _jsx(_components.span, { className: "token keyword", children: "in" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "_classes", _jsx(_components.span, { className: "token punctuation", children: "." }), "items", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" total ", _jsx(_components.span, { className: "token operator", children: "+=" }), " self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "model", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "count", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " total\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token decorator annotation punctuation", children: "@contextmanager" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "transaction" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "try" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "yield" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "save", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "except" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" self", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "rollback", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "raise" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Key point about scoped_session" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "It provides a “session-per-thread” pattern automatically. In web apps, this maps well to “session per request” when you remove it on teardown (as we did)." }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "4-models-and-relationships", children: [_jsx(_components.a, { className: "heading-link", href: "#4-models-and-relationships", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "4) Models and Relationships"] }), "\n", _jsx(_components.p, { children: "Why these tables?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "User: identity with unique email and hashed password. Timestamps are helpful for auditing." }), "\n", _jsx(_components.li, { children: "Role: fixed names (“admin”, “editor”, “user”). We don’t expose dynamic permissions to keep this simple." }), "\n", _jsx(_components.li, { children: "UserRole: many-to-many association (a user can belong to multiple roles)." }), "\n", _jsx(_components.li, { children: "Widget: a simple protected resource to demonstrate RBAC." }), "\n", _jsx(_components.li, { children: "BlacklistedToken: stores revoked token IDs (jti) to support logout and token rotation." }), "\n"] }), "\n", _jsx(_components.p, { children: "Many-to-many explained" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "A User has many Roles through UserRole." }), "\n", _jsx(_components.li, { children: "A Role can be assigned to many Users." }), "\n", _jsx(_components.li, { children: "The association table (user_roles) has a composite PK (user_id, role_id) and a uniqueness constraint to avoid duplicates." }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/role.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "," }), " Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " String\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy", _jsx(_components.span, { className: "token punctuation", children: "." }), "orm ", _jsx(_components.span, { className: "token keyword", children: "import" }), " relationship\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["ROLE_ADMIN ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["ROLE_EDITOR ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"editor\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["ROLE_USER ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"user\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["FIXED_ROLES ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "(" }), "ROLE_ADMIN", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_EDITOR", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_USER", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "Role" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Base", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __tablename__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"roles\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "id" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" name ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token number", children: "32" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " unique", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" users ", _jsx(_components.span, { className: "token operator", children: "=" }), " relationship", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"User\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " secondary", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"user_roles\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " back_populates", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"roles\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/user_role.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "," }), " Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " ForeignKey", _jsx(_components.span, { className: "token punctuation", children: "," }), " UniqueConstraint\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "UserRole" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Base", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __tablename__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"user_roles\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user_id ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " ForeignKey", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"users.id\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ondelete", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"CASCADE\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" role_id ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " ForeignKey", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"roles.id\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ondelete", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"CASCADE\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __table_args__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "(" }), "UniqueConstraint", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"user_id\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"role_id\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " name", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"uq_user_role\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/user.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " datetime ", _jsx(_components.span, { className: "token keyword", children: "import" }), " datetime\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "," }), " Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " String", _jsx(_components.span, { className: "token punctuation", children: "," }), " Text", _jsx(_components.span, { className: "token punctuation", children: "," }), " DateTime\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy", _jsx(_components.span, { className: "token punctuation", children: "." }), "orm ", _jsx(_components.span, { className: "token keyword", children: "import" }), " relationship\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "User" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Base", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __tablename__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"users\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "id" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" email ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token number", children: "255" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " unique", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " index", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" password_hash ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Text", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" created_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" updated_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " onupdate", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" roles ", _jsx(_components.span, { className: "token operator", children: "=" }), " relationship", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"Role\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " secondary", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"user_roles\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " back_populates", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"users\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/widget.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " datetime ", _jsx(_components.span, { className: "token keyword", children: "import" }), " datetime\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "," }), " Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " String", _jsx(_components.span, { className: "token punctuation", children: "," }), " Text", _jsx(_components.span, { className: "token punctuation", children: "," }), " DateTime\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "Widget" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Base", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __tablename__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "id" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" name ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token number", children: "120" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" description ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Text", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" created_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" updated_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " onupdate", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/blacklisted_token.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " datetime ", _jsx(_components.span, { className: "token keyword", children: "import" }), " datetime\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " sqlalchemy ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "," }), " Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " String", _jsx(_components.span, { className: "token punctuation", children: "," }), " DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " ForeignKey\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "BlacklistedToken" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Base", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" __tablename__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"blacklisted_token\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" jti ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token number", children: "64" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " primary_key", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token comment", children: "# UUID4 hex" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user_id ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "," }), " ForeignKey", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"users.id\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ondelete", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"CASCADE\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" expires_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" created_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " Column", _jsx(_components.span, { className: "token punctuation", children: "(" }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "," }), " default", _jsx(_components.span, { className: "token operator", children: "=" }), "datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "utcnow", _jsx(_components.span, { className: "token punctuation", children: "," }), " nullable", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "False" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/models/__init__.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "base ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Base\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "user ", _jsx(_components.span, { className: "token keyword", children: "import" }), " User\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "role ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Role", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_ADMIN", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_EDITOR", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_USER", _jsx(_components.span, { className: "token punctuation", children: "," }), " FIXED_ROLES\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "user_role ", _jsx(_components.span, { className: "token keyword", children: "import" }), " UserRole\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "widget ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Widget\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "blacklisted_token ", _jsx(_components.span, { className: "token keyword", children: "import" }), " BlacklistedToken\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["__all__ ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"Base\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"User\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"Role\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"UserRole\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"Widget\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"BlacklistedToken\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"ROLE_ADMIN\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"ROLE_EDITOR\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"ROLE_USER\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"FIXED_ROLES\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "5-security-utilities-argon2-and-jwt", children: [_jsx(_components.a, { className: "heading-link", href: "#5-security-utilities-argon2-and-jwt", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "5) Security Utilities: Argon2 and JWT"] }), "\n", _jsx(_components.p, { children: "Why Argon2?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Passwords must never be stored in plaintext." }), "\n", _jsx(_components.li, { children: "Argon2 applies CPU and memory cost, making brute-force attacks harder than older hashes." }), "\n"] }), "\n", _jsx(_components.p, { children: "Why a single “access” token?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsxs(_components.li, { children: ["For a learning project, one token keeps the flow simple:", "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Issue token at login" }), "\n", _jsx(_components.li, { children: "Use it for all requests (Authorization: Bearer )" }), "\n", _jsx(_components.li, { children: "Rotate manually via /auth/rotate to get a fresh token (revoking the old)" }), "\n"] }), "\n"] }), "\n", _jsx(_components.li, { children: "In larger systems, you’d often use short-lived access tokens and longer-lived refresh tokens with rotation. Here you get the rotation concept without the extra token type." }), "\n"] }), "\n", _jsx(_components.p, { children: "We implement:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Hash and verify helpers for passwords" }), "\n", _jsx(_components.li, { children: "require_auth decorator to parse/verify JWT, check blacklist, load user, and inject context" }), "\n", _jsx(_components.li, { children: "require_roles to assert role membership" }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/utils/auth.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " functools ", _jsx(_components.span, { className: "token keyword", children: "import" }), " wraps\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " typing ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Callable", _jsx(_components.span, { className: "token punctuation", children: "," }), " Iterable", _jsx(_components.span, { className: "token punctuation", children: "," }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "," }), " Set\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " request", _jsx(_components.span, { className: "token punctuation", children: "," }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "," }), " g", _jsx(_components.span, { className: "token punctuation", children: "," }), " current_app\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " argon2 ", _jsx(_components.span, { className: "token keyword", children: "import" }), " PasswordHasher\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " argon2", _jsx(_components.span, { className: "token punctuation", children: "." }), "exceptions ", _jsx(_components.span, { className: "token keyword", children: "import" }), " VerifyMismatchError\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "user ", _jsx(_components.span, { className: "token keyword", children: "import" }), " User\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "jwt ", _jsx(_components.span, { className: "token keyword", children: "import" }), " decode_token", _jsx(_components.span, { className: "token punctuation", children: "," }), " is_revoked\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["ph ", _jsx(_components.span, { className: "token operator", children: "=" }), " PasswordHasher", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token comment", children: "# defaults" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "hash_password" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "plain", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " ph", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "hash" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "plain", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "verify_password" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "hash_", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " plain", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "bool" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "try" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " ph", _jsx(_components.span, { className: "token punctuation", children: "." }), "verify", _jsx(_components.span, { className: "token punctuation", children: "(" }), "hash_", _jsx(_components.span, { className: "token punctuation", children: "," }), " plain", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "except" }), " VerifyMismatchError", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " ", _jsx(_components.span, { className: "token boolean", children: "False" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_get_storage" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"storage\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_parse_bearer_token" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" auth ", _jsx(_components.span, { className: "token operator", children: "=" }), " request", _jsx(_components.span, { className: "token punctuation", children: "." }), "headers", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"Authorization\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" parts ", _jsx(_components.span, { className: "token operator", children: "=" }), " auth", _jsx(_components.span, { className: "token punctuation", children: "." }), "split", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token builtin", children: "len" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "parts", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "2" }), " ", _jsx(_components.span, { className: "token keyword", children: "and" }), " parts", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token number", children: "0" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token string", children: "\"Bearer\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " parts", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token number", children: "1" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "require_auth" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "fn", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Callable", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token decorator annotation punctuation", children: "@wraps" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "fn", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "wrapper" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "*" }), "args", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token operator", children: "**" }), "kwargs", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " _parse_bearer_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " token", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Missing or invalid Authorization header\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "try" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " decode_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "except" }), " Exception", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Invalid or expired token\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" jti ", _jsx(_components.span, { className: "token operator", children: "=" }), " payload", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"jti\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sub ", _jsx(_components.span, { className: "token operator", children: "=" }), " payload", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"sub\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " jti ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " sub", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Invalid token payload\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" storage ", _jsx(_components.span, { className: "token operator", children: "=" }), " _get_storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " is_revoked", _jsx(_components.span, { className: "token punctuation", children: "(" }), "storage", _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Token has been revoked\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" user", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Optional", _jsx(_components.span, { className: "token punctuation", children: "[" }), "User", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: "," }), " sub", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " user", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"User not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_user ", _jsx(_components.span, { className: "token operator", children: "=" }), " user\n"] }), _jsxs(_components.span, { className: "code-line", children: [" g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_roles ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "r", _jsx(_components.span, { className: "token punctuation", children: "." }), "name ", _jsx(_components.span, { className: "token keyword", children: "for" }), " r ", _jsx(_components.span, { className: "token keyword", children: "in" }), " user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" g", _jsx(_components.span, { className: "token punctuation", children: "." }), "jwt_payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " payload\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " fn", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "*" }), "args", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token operator", children: "**" }), "kwargs", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " wrapper\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "*" }), "roles", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Iterable", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" required", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Set", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token builtin", children: "set" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "roles", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "decorator" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "fn", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Callable", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token decorator annotation punctuation", children: "@wraps" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "fn", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "wrapper" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "*" }), "args", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token operator", children: "**" }), "kwargs", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token builtin", children: "hasattr" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "g", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"current_roles\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Unauthorized\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_roles", _jsx(_components.span, { className: "token punctuation", children: "." }), "isdisjoint", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Forbidden: insufficient role\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "403" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " fn", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "*" }), "args", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token operator", children: "**" }), "kwargs", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " wrapper\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " decorator\n"] })] }) }), "\n", _jsx(_components.p, { children: "JWT helpers: we include claims sub (user id), jti (token id), iat/exp (issued/expiry), and roles. Blacklist entries store jti until expiry." }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/utils/jwt.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " datetime ", _jsx(_components.span, { className: "token keyword", children: "import" }), " datetime", _jsx(_components.span, { className: "token punctuation", children: "," }), " timedelta", _jsx(_components.span, { className: "token punctuation", children: "," }), " timezone\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " typing ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "," }), " Any\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "import" }), " jwt\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " uuid ", _jsx(_components.span, { className: "token keyword", children: "import" }), " uuid4\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " current_app\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models", _jsx(_components.span, { className: "token punctuation", children: "." }), "blacklisted_token ", _jsx(_components.span, { className: "token keyword", children: "import" }), " BlacklistedToken\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_utcnow" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " datetime", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "now", _jsx(_components.span, { className: "token punctuation", children: "(" }), "timezone", _jsx(_components.span, { className: "token punctuation", children: "." }), "utc", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "generate_jti" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " uuid4", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "hex" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "issue_token" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "user_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " roles", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "list" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" secret ", _jsx(_components.span, { className: "token operator", children: "=" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"JWT_SECRET\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" alg ", _jsx(_components.span, { className: "token operator", children: "=" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"JWT_ALG\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"HS256\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ttl ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"JWT_TTL_SECONDS\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "24" }), " ", _jsx(_components.span, { className: "token operator", children: "*" }), " ", _jsx(_components.span, { className: "token number", children: "3600" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" iat ", _jsx(_components.span, { className: "token operator", children: "=" }), " _utcnow", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" exp ", _jsx(_components.span, { className: "token operator", children: "=" }), " iat ", _jsx(_components.span, { className: "token operator", children: "+" }), " timedelta", _jsx(_components.span, { className: "token punctuation", children: "(" }), "seconds", _jsx(_components.span, { className: "token operator", children: "=" }), "ttl", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" jti ", _jsx(_components.span, { className: "token operator", children: "=" }), " generate_jti", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" payload", _jsx(_components.span, { className: "token punctuation", children: ":" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " Any", _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"sub\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " user_id", _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"jti\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " jti", _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"iat\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "iat", _jsx(_components.span, { className: "token punctuation", children: "." }), "timestamp", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"exp\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "exp", _jsx(_components.span, { className: "token punctuation", children: "." }), "timestamp", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token string", children: "\"roles\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " roles", _jsx(_components.span, { className: "token punctuation", children: "," }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jwt", _jsx(_components.span, { className: "token punctuation", children: "." }), "encode", _jsx(_components.span, { className: "token punctuation", children: "(" }), "payload", _jsx(_components.span, { className: "token punctuation", children: "," }), " secret", _jsx(_components.span, { className: "token punctuation", children: "," }), " algorithm", _jsx(_components.span, { className: "token operator", children: "=" }), "alg", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "decode_token" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " Dict", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " Any", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" secret ", _jsx(_components.span, { className: "token operator", children: "=" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"JWT_SECRET\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" alg ", _jsx(_components.span, { className: "token operator", children: "=" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "config", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"JWT_ALG\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"HS256\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jwt", _jsx(_components.span, { className: "token punctuation", children: "." }), "decode", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: "," }), " secret", _jsx(_components.span, { className: "token punctuation", children: "," }), " algorithms", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), "alg", _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "is_revoked" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "storage", _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token builtin", children: "bool" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "session", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "BlacklistedToken", _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token keyword", children: "is" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "revoke_token" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "storage", _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " exp_ts", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "-" }), _jsx(_components.span, { className: "token operator", children: ">" }), " ", _jsx(_components.span, { className: "token boolean", children: "None" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" expires_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " datetime", _jsx(_components.span, { className: "token punctuation", children: "." }), "fromtimestamp", _jsx(_components.span, { className: "token punctuation", children: "(" }), "exp_ts", _jsx(_components.span, { className: "token punctuation", children: "," }), " tz", _jsx(_components.span, { className: "token operator", children: "=" }), "timezone", _jsx(_components.span, { className: "token punctuation", children: "." }), "utc", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " storage", _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "BlacklistToken", _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "BlacklistedToken", _jsx(_components.span, { className: "token punctuation", children: "(" }), "jti", _jsx(_components.span, { className: "token operator", children: "=" }), "jti", _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token operator", children: "=" }), "user_id", _jsx(_components.span, { className: "token punctuation", children: "," }), " expires_at", _jsx(_components.span, { className: "token operator", children: "=" }), "expires_at", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Why blacklist?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "JWTs are stateless. To “log out” or invalidate a token before it expires, you need a denylist of jtis to reject on future requests." }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "6-marshmallow-schemas", children: [_jsx(_components.a, { className: "heading-link", href: "#6-marshmallow-schemas", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "6) Marshmallow Schemas"] }), "\n", _jsx(_components.p, { children: "Why Marshmallow?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Keeps validation and serialization concerns outside your models." }), "\n", _jsx(_components.li, { children: "Makes input constraints visible at the API boundary." }), "\n", _jsx(_components.li, { children: "Separates output shape from internal data structures (e.g., never dump password_hash)." }), "\n"] }), "\n", _jsx(_components.p, { children: "We define:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "RegisterSchema and LoginSchema for input validation" }), "\n", _jsx(_components.li, { children: "TokenResponseSchema and UserOutSchema for responses" }), "\n", _jsx(_components.li, { children: "Widget schemas for input/output" }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/schemas/auth.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " marshmallow ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Schema", _jsx(_components.span, { className: "token punctuation", children: "," }), " fields", _jsx(_components.span, { className: "token punctuation", children: "," }), " validates", _jsx(_components.span, { className: "token punctuation", children: "," }), " ValidationError\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "schemas", _jsx(_components.span, { className: "token punctuation", children: "." }), "user ", _jsx(_components.span, { className: "token keyword", children: "import" }), " UserOutSchema\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "RegisterSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" email ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Email", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" password ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " load_only", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token decorator annotation punctuation", children: "@validates" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "validate_password" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "self", _jsx(_components.span, { className: "token punctuation", children: "," }), " value", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token operator", children: "**" }), "kwargs", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token builtin", children: "len" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "value", _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token operator", children: "<" }), " ", _jsx(_components.span, { className: "token number", children: "8" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "raise" }), " ValidationError", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"Password must be at least 8 characters long.\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "LoginSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" email ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Email", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" password ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " load_only", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "TokenResponseSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Nested", _jsx(_components.span, { className: "token punctuation", children: "(" }), "UserOutSchema", _jsx(_components.span, { className: "token punctuation", children: "," }), " required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/schemas/user.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " marshmallow ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Schema", _jsx(_components.span, { className: "token punctuation", children: "," }), " fields\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "UserOutSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "id" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" email ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Email", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" roles ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "List", _jsx(_components.span, { className: "token punctuation", children: "(" }), "fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" created_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" updated_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/schemas/widget.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " marshmallow ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Schema", _jsx(_components.span, { className: "token punctuation", children: "," }), " fields\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "WidgetInSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" name ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), "required", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" description ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), "load_default", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "class" }), " ", _jsx(_components.span, { className: "token class-name", children: "WidgetOutSchema" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "Schema", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "id" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "Integer", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" name ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" description ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "String", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" created_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" updated_at ", _jsx(_components.span, { className: "token operator", children: "=" }), " fields", _jsx(_components.span, { className: "token punctuation", children: "." }), "DateTime", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Tip: Use load for incoming data (validates and returns Python types), dump for outgoing JSON." }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "7-blueprints-and-routes", children: [_jsx(_components.a, { className: "heading-link", href: "#7-blueprints-and-routes", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "7) Blueprints and Routes"] }), "\n", _jsx(_components.p, { children: "Why blueprints?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Keep features separate (auth, widgets, admin)." }), "\n", _jsx(_components.li, { children: "Scales better as the API grows." }), "\n"] }), "\n", _jsx(_components.p, { children: "Initialize blueprint packages:" }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/auth/__init__.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Blueprint\n"] }), _jsxs(_components.span, { className: "code-line", children: ["bp ", _jsx(_components.span, { className: "token operator", children: "=" }), " Blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"auth\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " __name__", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " ", _jsx(_components.span, { className: "token punctuation", children: "." }), " ", _jsx(_components.span, { className: "token keyword", children: "import" }), " routes ", _jsx(_components.span, { className: "token comment", children: "# noqa" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/widgets/__init__.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Blueprint\n"] }), _jsxs(_components.span, { className: "code-line", children: ["bp ", _jsx(_components.span, { className: "token operator", children: "=" }), " Blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " __name__", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " ", _jsx(_components.span, { className: "token punctuation", children: "." }), " ", _jsx(_components.span, { className: "token keyword", children: "import" }), " routes ", _jsx(_components.span, { className: "token comment", children: "# noqa" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/admin/__init__.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Blueprint\n"] }), _jsxs(_components.span, { className: "code-line", children: ["bp ", _jsx(_components.span, { className: "token operator", children: "=" }), " Blueprint", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " __name__", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " ", _jsx(_components.span, { className: "token punctuation", children: "." }), " ", _jsx(_components.span, { className: "token keyword", children: "import" }), " routes ", _jsx(_components.span, { className: "token comment", children: "# noqa" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Auth routes (register/login/rotate/logout/me). Design choices:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Register assigns the “user” role by default (if seeded)." }), "\n", _jsx(_components.li, { children: "Login issues a JWT embedding current roles (authoritative roles are still checked from DB during requests)." }), "\n", _jsx(_components.li, { children: "Rotate blacklists the old jti and issues a new token (useful for key rotation or refreshing user’s roles)." }), "\n", _jsx(_components.li, { children: "Logout blacklists the current token." }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/auth/routes.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " request", _jsx(_components.span, { className: "token punctuation", children: "," }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "," }), " g", _jsx(_components.span, { className: "token punctuation", children: "," }), " current_app\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flasgger ", _jsx(_components.span, { className: "token keyword", children: "import" }), " swag_from\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " pathlib ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Path\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "schemas", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " RegisterSchema", _jsx(_components.span, { className: "token punctuation", children: "," }), " LoginSchema", _jsx(_components.span, { className: "token punctuation", children: "," }), " TokenResponseSchema\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "schemas", _jsx(_components.span, { className: "token punctuation", children: "." }), "user ", _jsx(_components.span, { className: "token keyword", children: "import" }), " UserOutSchema\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " hash_password", _jsx(_components.span, { className: "token punctuation", children: "," }), " verify_password", _jsx(_components.span, { className: "token punctuation", children: "," }), " require_auth\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "jwt ", _jsx(_components.span, { className: "token keyword", children: "import" }), " issue_token", _jsx(_components.span, { className: "token punctuation", children: "," }), " revoke_token\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models ", _jsx(_components.span, { className: "token keyword", children: "import" }), " User", _jsx(_components.span, { className: "token punctuation", children: "," }), " Role", _jsx(_components.span, { className: "token punctuation", children: "," }), " ROLE_USER\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "=" }), " Path", _jsx(_components.span, { className: "token punctuation", children: "(" }), "__file__", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "resolve", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "parents", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token number", children: "3" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"docs\"" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["register_schema ", _jsx(_components.span, { className: "token operator", children: "=" }), " RegisterSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["login_schema ", _jsx(_components.span, { className: "token operator", children: "=" }), " LoginSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["user_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " UserOutSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["token_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " TokenResponseSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_storage" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"storage\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/register\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"register.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "register" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " request", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), "silent", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" data ", _jsx(_components.span, { className: "token operator", children: "=" }), " register_schema", _jsx(_components.span, { className: "token punctuation", children: "." }), "load", _jsx(_components.span, { className: "token punctuation", children: "(" }), "payload", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "email", _jsx(_components.span, { className: "token operator", children: "=" }), "data", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "first", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Email already in use\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "400" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " User", _jsx(_components.span, { className: "token punctuation", children: "(" }), "email", _jsx(_components.span, { className: "token operator", children: "=" }), "data", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " password_hash", _jsx(_components.span, { className: "token operator", children: "=" }), "hash_password", _jsx(_components.span, { className: "token punctuation", children: "(" }), "data", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" role_user ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "name", _jsx(_components.span, { className: "token operator", children: "=" }), "ROLE_USER", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one_or_none", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " role_user", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "." }), "append", _jsx(_components.span, { className: "token punctuation", children: "(" }), "role_user", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " user_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "201" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/login\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"login.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "login" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " request", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), "silent", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" data ", _jsx(_components.span, { className: "token operator", children: "=" }), " login_schema", _jsx(_components.span, { className: "token punctuation", children: "." }), "load", _jsx(_components.span, { className: "token punctuation", children: "(" }), "payload", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "email", _jsx(_components.span, { className: "token operator", children: "=" }), "data", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one_or_none", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " user ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " verify_password", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user", _jsx(_components.span, { className: "token punctuation", children: "." }), "password_hash", _jsx(_components.span, { className: "token punctuation", children: "," }), " data", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Invalid credentials\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" roles ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "r", _jsx(_components.span, { className: "token punctuation", children: "." }), "name ", _jsx(_components.span, { className: "token keyword", children: "for" }), " r ", _jsx(_components.span, { className: "token keyword", children: "in" }), " user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " issue_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user_id", _jsx(_components.span, { className: "token operator", children: "=" }), "user", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " roles", _jsx(_components.span, { className: "token operator", children: "=" }), "roles", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " token_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " token", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"user\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " user", _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/rotate\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"rotate.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "rotate" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" current ", _jsx(_components.span, { className: "token operator", children: "=" }), " g", _jsx(_components.span, { className: "token punctuation", children: "." }), "jwt_payload\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_user\n"] }), _jsxs(_components.span, { className: "code-line", children: [" revoke_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), "_storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token operator", children: "=" }), "current", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"jti\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token operator", children: "=" }), "user", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " exp_ts", _jsx(_components.span, { className: "token operator", children: "=" }), "current", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"exp\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" roles ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "r", _jsx(_components.span, { className: "token punctuation", children: "." }), "name ", _jsx(_components.span, { className: "token keyword", children: "for" }), " r ", _jsx(_components.span, { className: "token keyword", children: "in" }), " user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " issue_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user_id", _jsx(_components.span, { className: "token operator", children: "=" }), "user", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " roles", _jsx(_components.span, { className: "token operator", children: "=" }), "roles", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " token_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " token", _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"user\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " user", _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/logout\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"logout.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "logout" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" current ", _jsx(_components.span, { className: "token operator", children: "=" }), " g", _jsx(_components.span, { className: "token punctuation", children: "." }), "jwt_payload\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_user\n"] }), _jsxs(_components.span, { className: "code-line", children: [" revoke_token", _jsx(_components.span, { className: "token punctuation", children: "(" }), "_storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " jti", _jsx(_components.span, { className: "token operator", children: "=" }), "current", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"jti\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token operator", children: "=" }), "user", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " exp_ts", _jsx(_components.span, { className: "token operator", children: "=" }), "current", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"exp\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"message\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Logged out\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "get"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/me\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"auth\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"me.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "me" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " user_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "g", _jsx(_components.span, { className: "token punctuation", children: "." }), "current_user", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Widget routes demonstrate RBAC:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Any authenticated user can read" }), "\n", _jsx(_components.li, { children: "Only editors/admins can create/update" }), "\n", _jsx(_components.li, { children: "Only admins can delete" }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/widgets/routes.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " request", _jsx(_components.span, { className: "token punctuation", children: "," }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "," }), " current_app\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " pathlib ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Path\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flasgger ", _jsx(_components.span, { className: "token keyword", children: "import" }), " swag_from\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "widgets ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " require_auth", _jsx(_components.span, { className: "token punctuation", children: "," }), " require_roles\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Widget\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "schemas", _jsx(_components.span, { className: "token punctuation", children: "." }), "widget ", _jsx(_components.span, { className: "token keyword", children: "import" }), " WidgetInSchema", _jsx(_components.span, { className: "token punctuation", children: "," }), " WidgetOutSchema\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "=" }), " Path", _jsx(_components.span, { className: "token punctuation", children: "(" }), "__file__", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "resolve", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "parents", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token number", children: "3" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"docs\"" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["widget_in ", _jsx(_components.span, { className: "token operator", children: "=" }), " WidgetInSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["widget_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " WidgetOutSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["widget_list_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " WidgetOutSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), "many", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_storage" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"storage\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "get"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"list.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "list_widgets" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" widgets ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Widget", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "order_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Widget", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "asc", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " widget_list_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "widgets", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "get"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"get.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "get_widget" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "widget_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" w ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Widget", _jsx(_components.span, { className: "token punctuation", children: "," }), " widget_id", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " w", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "404" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " widget_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"editor\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"create.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "create_widget" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " request", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), "silent", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" data ", _jsx(_components.span, { className: "token operator", children: "=" }), " widget_in", _jsx(_components.span, { className: "token punctuation", children: "." }), "load", _jsx(_components.span, { className: "token punctuation", children: "(" }), "payload", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" w ", _jsx(_components.span, { className: "token operator", children: "=" }), " Widget", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token operator", children: "**" }), "data", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "add", _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " widget_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "201" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "patch"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"editor\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"update.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "update_widget" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "widget_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" payload ", _jsx(_components.span, { className: "token operator", children: "=" }), " request", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), "silent", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), " ", _jsx(_components.span, { className: "token keyword", children: "or" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" data ", _jsx(_components.span, { className: "token operator", children: "=" }), " widget_in", _jsx(_components.span, { className: "token punctuation", children: "." }), "load", _jsx(_components.span, { className: "token punctuation", children: "(" }), "payload", _jsx(_components.span, { className: "token punctuation", children: "," }), " partial", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" w ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Widget", _jsx(_components.span, { className: "token punctuation", children: "," }), " widget_id", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " w", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "404" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "for" }), " k", _jsx(_components.span, { className: "token punctuation", children: "," }), " v ", _jsx(_components.span, { className: "token keyword", children: "in" }), " data", _jsx(_components.span, { className: "token punctuation", children: "." }), "items", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token builtin", children: "setattr" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: "," }), " k", _jsx(_components.span, { className: "token punctuation", children: "," }), " v", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " widget_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "delete"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"widgets\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"delete.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "delete_widget" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "widget_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" w ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Widget", _jsx(_components.span, { className: "token punctuation", children: "," }), " widget_id", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " w", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "404" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "delete", _jsx(_components.span, { className: "token punctuation", children: "(" }), "w", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"message\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Deleted\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Admin routes let admins manage user roles and inspect users:" }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# app/api/admin/routes.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " __future__ ", _jsx(_components.span, { className: "token keyword", children: "import" }), " annotations\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flask ", _jsx(_components.span, { className: "token keyword", children: "import" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "," }), " current_app\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " pathlib ", _jsx(_components.span, { className: "token keyword", children: "import" }), " Path\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " flasgger ", _jsx(_components.span, { className: "token keyword", children: "import" }), " swag_from\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "api", _jsx(_components.span, { className: "token punctuation", children: "." }), "admin ", _jsx(_components.span, { className: "token keyword", children: "import" }), " bp\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "utils", _jsx(_components.span, { className: "token punctuation", children: "." }), "auth ", _jsx(_components.span, { className: "token keyword", children: "import" }), " require_auth", _jsx(_components.span, { className: "token punctuation", children: "," }), " require_roles\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "models ", _jsx(_components.span, { className: "token keyword", children: "import" }), " User", _jsx(_components.span, { className: "token punctuation", children: "," }), " Role", _jsx(_components.span, { className: "token punctuation", children: "," }), " FIXED_ROLES\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "schemas", _jsx(_components.span, { className: "token punctuation", children: "." }), "user ", _jsx(_components.span, { className: "token keyword", children: "import" }), " UserOutSchema\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "=" }), " Path", _jsx(_components.span, { className: "token punctuation", children: "(" }), "__file__", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "resolve", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "parents", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token number", children: "3" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"docs\"" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: ["user_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " UserOutSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["user_list_out ", _jsx(_components.span, { className: "token operator", children: "=" }), " UserOutSchema", _jsx(_components.span, { className: "token punctuation", children: "(" }), "many", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token boolean", children: "True" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "_storage" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " current_app", _jsx(_components.span, { className: "token punctuation", children: "." }), "extensions", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"storage\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "get"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/users\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"list_users.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "list_users" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" users ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "order_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "id" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "asc", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), _jsx(_components.span, { className: "token builtin", children: "all" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " user_list_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "users", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "post"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/users//roles/\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"assign_role.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "assign_role" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "user_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " role_name", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " role_name ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token keyword", children: "in" }), " FIXED_ROLES", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Unknown role\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "400" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " user", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"User not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "404" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" role ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "name", _jsx(_components.span, { className: "token operator", children: "=" }), "role_name", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one_or_none", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " role", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Role not seeded\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "400" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " role ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token keyword", children: "in" }), " user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "." }), "append", _jsx(_components.span, { className: "token punctuation", children: "(" }), "role", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " user_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@bp", _jsx(_components.span, { className: "token punctuation", children: "." }), "delete"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/users//roles/\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_auth" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@require_roles" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"admin\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token decorator annotation punctuation", children: "@swag_from" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "DOCS_DIR ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin\"" }), " ", _jsx(_components.span, { className: "token operator", children: "/" }), " ", _jsx(_components.span, { className: "token string", children: "\"revoke_role.yml\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "revoke_role" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "user_id", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "int" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " role_name", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " role_name ", _jsx(_components.span, { className: "token keyword", children: "not" }), " ", _jsx(_components.span, { className: "token keyword", children: "in" }), " FIXED_ROLES", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Unknown role\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "400" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess ", _jsx(_components.span, { className: "token operator", children: "=" }), " _storage", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "session\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), "User", _jsx(_components.span, { className: "token punctuation", children: "," }), " user_id", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " user", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"User not found\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "404" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" role ", _jsx(_components.span, { className: "token operator", children: "=" }), " sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "query", _jsx(_components.span, { className: "token punctuation", children: "(" }), "Role", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "filter_by", _jsx(_components.span, { className: "token punctuation", children: "(" }), "name", _jsx(_components.span, { className: "token operator", children: "=" }), "role_name", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "." }), "one_or_none", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " ", _jsx(_components.span, { className: "token keyword", children: "not" }), " role", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " jsonify", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"error\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Role not seeded\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "400" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "if" }), " role ", _jsx(_components.span, { className: "token keyword", children: "in" }), " user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user", _jsx(_components.span, { className: "token punctuation", children: "." }), "roles", _jsx(_components.span, { className: "token punctuation", children: "." }), "remove", _jsx(_components.span, { className: "token punctuation", children: "(" }), "role", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" sess", _jsx(_components.span, { className: "token punctuation", children: "." }), "commit", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " user_out", _jsx(_components.span, { className: "token punctuation", children: "." }), "dump", _jsx(_components.span, { className: "token punctuation", children: "(" }), "user", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "8-swagger-docs-flasgger-yaml", children: [_jsx(_components.a, { className: "heading-link", href: "#8-swagger-docs-flasgger-yaml", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "8) Swagger Docs (Flasgger YAML)"] }), "\n", _jsx(_components.p, { children: "Why YAML per endpoint?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Keeps route code clean and specs easy to update." }), "\n", _jsx(_components.li, { children: "Flasgger reads YAML and renders Swagger UI at /apidocs." }), "\n"] }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/auth/login.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " auth\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Login and receive a JWT token\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "schema" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " object\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "email", _jsx(_components.span, { className: "token punctuation", children: "," }), " password", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "properties" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "email" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "format" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " email\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "password" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Invalid credentials\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/auth/register.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " auth\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Register a new user\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "schema" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " object\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "email", _jsx(_components.span, { className: "token punctuation", children: "," }), " password", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "properties" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "email" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "format" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " email\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "password" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "minLength" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token number", children: "8" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"201\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Created\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"400\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Email already in use\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/auth/rotate.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " auth\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Rotate current token (revoke old and issue new)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/auth/logout.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " auth\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Logout by revoking current token\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Logged out\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/widgets/create.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Create a widget (editor or admin)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "schema" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " object\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "name", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "properties" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"201\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Created\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/widgets/list.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " List widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/widgets/get.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Get a widget by id\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " widget_id\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " integer\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"404\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Not found\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/widgets/update.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Update a widget (editor or admin)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " widget_id\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " integer\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " body\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "schema" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " object\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "properties" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"404\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Not found\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/widgets/delete.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " widgets\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Delete a widget (admin only)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " widget_id\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " integer\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Deleted\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"404\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Not found\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/admin/assign_role.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " admin\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Assign role to a user (admin)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " user_id\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " integer\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " role_name\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "enum" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "admin", _jsx(_components.span, { className: "token punctuation", children: "," }), " editor", _jsx(_components.span, { className: "token punctuation", children: "," }), " user", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"400\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unknown role or not seeded\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"404\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " User not found\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/admin/revoke_role.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " admin\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Revoke role from a user (admin)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "parameters" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " user_id\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " integer\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "in" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " path\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "name" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " role_name\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "required" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token boolean important", children: "true" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "type" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " string\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "enum" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), "admin", _jsx(_components.span, { className: "token punctuation", children: "," }), " editor", _jsx(_components.span, { className: "token punctuation", children: "," }), " user", _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"400\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unknown role or not seeded\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"404\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " User not found\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-yaml", children: _jsxs(_components.code, { className: "language-yaml code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# docs/admin/list_users.yml" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "tags" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " admin\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "summary" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " List users (admin)\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "security" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token punctuation", children: "-" }), " ", _jsx(_components.span, { className: "token key atrule", children: "BearerAuth" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token key atrule", children: "responses" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"200\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " OK\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"401\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Unauthorized\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "\"403\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token key atrule", children: "description" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " Forbidden\n"] })] }) }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "9-testing-pytest", children: [_jsx(_components.a, { className: "heading-link", href: "#9-testing-pytest", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "9) Testing (pytest)"] }), "\n", _jsx(_components.p, { children: "Why test now?" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Verifies the end-to-end flow (register, login, protected access)." }), "\n", _jsx(_components.li, { children: "Proves role enforcement and token revocation work." }), "\n", _jsx(_components.li, { children: "Makes refactoring safer." }), "\n"] }), "\n", _jsx(_components.p, { children: "We create a temporary SQLite DB per test session and test the core scenarios." }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# tests/conftest.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "import" }), " os\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "import" }), " tempfile\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "import" }), " pytest\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "from" }), " app ", _jsx(_components.span, { className: "token keyword", children: "import" }), " create_app\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@pytest", _jsx(_components.span, { className: "token punctuation", children: "." }), "fixture"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "scope", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\"session\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "app" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" db_fd", _jsx(_components.span, { className: "token punctuation", children: "," }), " db_path ", _jsx(_components.span, { className: "token operator", children: "=" }), " tempfile", _jsx(_components.span, { className: "token punctuation", children: "." }), "mkstemp", _jsx(_components.span, { className: "token punctuation", children: "(" }), "suffix", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token string", children: "\".db\"" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "close", _jsx(_components.span, { className: "token punctuation", children: "(" }), "db_fd", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "environ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"FLASK_ENV\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"development\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "environ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"JWT_SECRET\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"test-secret\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "environ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"DATABASE_URL\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsxs(_components.span, { className: "token string-interpolation", children: [_jsx(_components.span, { className: "token string", children: "f\"sqlite:///" }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), "db_path", _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "\"" })] }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "environ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_EMAIL\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin@example.com\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" os", _jsx(_components.span, { className: "token punctuation", children: "." }), "environ", _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"ADMIN_DEFAULT_PASSWORD\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "=" }), " ", _jsx(_components.span, { className: "token string", children: "\"Admin1234!\"" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" app ", _jsx(_components.span, { className: "token operator", children: "=" }), " create_app", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "yield" }), " app\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "try" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " os", _jsx(_components.span, { className: "token punctuation", children: "." }), "remove", _jsx(_components.span, { className: "token punctuation", children: "(" }), "db_path", _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "except" }), " OSError", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token keyword", children: "pass" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsxs(_components.span, { className: "token decorator annotation punctuation", children: ["@pytest", _jsx(_components.span, { className: "token punctuation", children: "." }), "fixture"] }), _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "client" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "app", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " app", _jsx(_components.span, { className: "token punctuation", children: "." }), "test_client", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] })] }) }), "\n", _jsx(_components.pre, { className: "language-python", children: _jsxs(_components.code, { className: "language-python code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# tests/test_auth_flow.py" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "auth_header" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token builtin", children: "str" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "return" }), " ", _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"Authorization\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsxs(_components.span, { className: "token string-interpolation", children: [_jsx(_components.span, { className: "token string", children: "f\"Bearer " }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), "token", _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "\"" })] }), _jsx(_components.span, { className: "token punctuation", children: "}" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "test_register_login_me_list_widgets" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "client", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/register\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"u1@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"password8\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "201" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/login\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"u1@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"password8\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/me\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), " ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token string", children: "\"u1@example.com\"" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token keyword", children: "def" }), " ", _jsx(_components.span, { className: "token function", children: "test_rbac_rotate_logout" }), _jsx(_components.span, { className: "token punctuation", children: "(" }), "client", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# admin login" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/login\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"admin@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"Admin1234!\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" admin_token ", _jsx(_components.span, { className: "token operator", children: "=" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# register new user" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/register\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"u2@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"password8\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "201" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" user_id ", _jsx(_components.span, { className: "token operator", children: "=" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"id\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# user login" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/login\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"email\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"u2@example.com\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token string", children: "\"password\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"password8\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" token ", _jsx(_components.span, { className: "token operator", children: "=" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# user cannot create widget yet" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"W1\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token keyword", children: "in" }), " ", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token number", children: "401" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " ", _jsx(_components.span, { className: "token number", children: "403" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# admin assigns editor role" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsxs(_components.span, { className: "token string-interpolation", children: [_jsx(_components.span, { className: "token string", children: "f\"/admin/users/" }), _jsxs(_components.span, { className: "token interpolation", children: [_jsx(_components.span, { className: "token punctuation", children: "{" }), "user_id", _jsx(_components.span, { className: "token punctuation", children: "}" })] }), _jsx(_components.span, { className: "token string", children: "/roles/editor\"" })] }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "admin_token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# user can now create" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " json", _jsx(_components.span, { className: "token operator", children: "=" }), _jsx(_components.span, { className: "token punctuation", children: "{" }), _jsx(_components.span, { className: "token string", children: "\"name\"" }), _jsx(_components.span, { className: "token punctuation", children: ":" }), " ", _jsx(_components.span, { className: "token string", children: "\"W2\"" }), _jsx(_components.span, { className: "token punctuation", children: "}" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "201" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# rotate token" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/rotate\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" new_token ", _jsx(_components.span, { className: "token operator", children: "=" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "get_json", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: "[" }), _jsx(_components.span, { className: "token string", children: "\"token\"" }), _jsx(_components.span, { className: "token punctuation", children: "]" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# old token is revoked" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# new token works" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "new_token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token comment", children: "# logout revokes token" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "post", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/auth/logout\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "new_token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "200" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" r ", _jsx(_components.span, { className: "token operator", children: "=" }), " client", _jsx(_components.span, { className: "token punctuation", children: "." }), "get", _jsx(_components.span, { className: "token punctuation", children: "(" }), _jsx(_components.span, { className: "token string", children: "\"/widgets\"" }), _jsx(_components.span, { className: "token punctuation", children: "," }), " headers", _jsx(_components.span, { className: "token operator", children: "=" }), "auth_header", _jsx(_components.span, { className: "token punctuation", children: "(" }), "new_token", _jsx(_components.span, { className: "token punctuation", children: ")" }), _jsx(_components.span, { className: "token punctuation", children: ")" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [" ", _jsx(_components.span, { className: "token keyword", children: "assert" }), " r", _jsx(_components.span, { className: "token punctuation", children: "." }), "status_code ", _jsx(_components.span, { className: "token operator", children: "==" }), " ", _jsx(_components.span, { className: "token number", children: "401" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "What these tests prove" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Correct hashing, auth, and JWT issuance." }), "\n", _jsx(_components.li, { children: "Role enforcement on endpoints." }), "\n", _jsx(_components.li, { children: "Token rotation blacklists old tokens; logout blacklists current token." }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "10-run-and-explore", children: [_jsx(_components.a, { className: "heading-link", href: "#10-run-and-explore", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "10) Run and Explore"] }), "\n", _jsx(_components.p, { children: "Quickstart" }), "\n", _jsx(_components.pre, { className: "language-bash", children: _jsxs(_components.code, { className: "language-bash code-highlight", children: [_jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# 1) Install deps" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: ["python ", _jsx(_components.span, { className: "token parameter variable", children: "-m" }), " venv .venv\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token builtin class-name", children: "source" }), " .venv/bin/activate\n"] }), _jsxs(_components.span, { className: "code-line", children: ["pip ", _jsx(_components.span, { className: "token function", children: "install" }), " ", _jsx(_components.span, { className: "token parameter variable", children: "--upgrade" }), " pip\n"] }), _jsxs(_components.span, { className: "code-line", children: ["pip ", _jsx(_components.span, { className: "token function", children: "install" }), " Flask SQLAlchemy PyJWT argon2-cffi marshmallow flasgger python-dotenv pytest\n"] }), _jsx(_components.span, { className: "code-line", children: "\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# 2) Create .env (see earlier)" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# 3) Run the app" }), "\n"] }), _jsx(_components.span, { className: "code-line", children: "python run.py\n" }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# 4) Open Swagger UI" }), "\n"] }), _jsxs(_components.span, { className: "code-line", children: [_jsx(_components.span, { className: "token comment", children: "# http://localhost:5000/apidocs" }), "\n"] })] }) }), "\n", _jsx(_components.p, { children: "Try the flow:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Register → Login → GET /auth/me" }), "\n", _jsx(_components.li, { children: "As the seeded admin, grant “editor” to a user → that user can create/update widgets." }), "\n", _jsx(_components.li, { children: "Rotate token to see blacklisting in action." }), "\n", _jsx(_components.li, { children: "Logout to revoke the current token." }), "\n"] }), "\n", _jsx(_components.p, { children: "Production notes (at a glance)" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Use a strong JWT_SECRET and rotate it periodically." }), "\n", _jsx(_components.li, { children: "Serve over HTTPS." }), "\n", _jsx(_components.li, { children: "Consider shorter TTLs for tokens in production." }), "\n", _jsx(_components.li, { children: "Move from SQLite to Postgres/MySQL and introduce migrations (Alembic)." }), "\n", _jsx(_components.li, { children: "Add CORS policy, logging, and monitoring as needed." }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "11-diagrams-placeholders--mermaid", children: [_jsx(_components.a, { className: "heading-link", href: "#11-diagrams-placeholders--mermaid", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "11) Diagrams (placeholders + Mermaid)"] }), "\n", _jsx(_components.p, { children: "Static images (replace with your own):" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: _jsx(_components.img, { src: "https://olah-notes-blog-olaholunuga.flowershow.me/projects/images/login-flow.png", alt: "Login flow diagram", "data-fs-resolved-file-path": "/projects/images/login-flow.png", className: "internal" }) }), "\n", _jsx(_components.li, { children: _jsx(_components.img, { src: "https://olah-notes-blog-olaholunuga.flowershow.me/projects/images/protected-rbac.png", alt: "Protected RBAC diagram", "data-fs-resolved-file-path": "/projects/images/protected-rbac.png", className: "internal" }) }), "\n"] }), "\n", _jsx(_components.p, { children: "Mermaid sequence diagrams:" }), "\n", _jsx(_components.mermaid, { config: "{}", chart: "sequenceDiagram\n participant C as Client\n participant A as API (Auth)\n participant DB as Database\n C->>A: POST /auth/login { email, password }\n A->>DB: Find user by email\n DB-->>A: User (hash, roles)\n A->>A: Verify Argon2 hash\n A->>A: Create JWT (sub,jti,iat,exp,roles)\n A-->>C: 200 { token, user }" }), "\n", _jsx(_components.mermaid, { chart: "sequenceDiagram\n participant C as Client\n participant S as Security (JWT+RBAC)\n participant W as API (Widgets)\n participant DB as Database\n C->>W: POST /widgets (Authorization: Bearer )\n W->>S: Verify signature, exp, blacklist\n S->>DB: Load user + roles\n S-->>W: Authorized? roles include editor/admin\n W-->>C: 201 Created or 403 Forbidden" }), "\n", _jsx(_components.p, { children: "Optional ER notes" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "User —< UserRole >— Role (many-to-many)" }), "\n", _jsx(_components.li, { children: "User —< BlacklistedToken (one-to-many by user_id)" }), "\n", _jsx(_components.li, { children: "Widget is a standalone resource" }), "\n"] }), "\n", _jsx(_components.hr, {}), "\n", _jsxs(_components.h2, { id: "conclusion", children: [_jsx(_components.a, { className: "heading-link", href: "#conclusion", children: _jsx(_components.svg, { xmlns: "http:www.w3.org/2000/svg", fill: "#ab2b65", viewBox: "0 0 20 20", className: "w-5 h-5", children: _jsx(_components.path, { fillRule: "evenodd", clipRule: "evenodd", d: "M9.493 2.853a.75.75 0 00-1.486-.205L7.545 6H4.198a.75.75 0 000 1.5h3.14l-.69 5H3.302a.75.75 0 000 1.5h3.14l-.435 3.148a.75.75 0 001.486.205L7.955 14h2.986l-.434 3.148a.75.75 0 001.486.205L12.456 14h3.346a.75.75 0 000-1.5h-3.14l.69-5h3.346a.75.75 0 000-1.5h-3.14l.435-3.147a.75.75 0 00-1.486-.205L12.045 6H9.059l.434-3.147zM8.852 7.5l-.69 5h2.986l.69-5H8.852z" }) }) }), "Conclusion"] }), "\n", _jsx(_components.p, { children: "You’ve built a minimal, understandable RBAC API with:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Plain SQLAlchemy (declarative_base) and a small storage layer" }), "\n", _jsx(_components.li, { children: "Argon2 password hashing" }), "\n", _jsx(_components.li, { children: "A single 24-hour JWT with rotation and blacklisting" }), "\n", _jsx(_components.li, { children: "Role enforcement via decorators" }), "\n", _jsx(_components.li, { children: "Marshmallow validation and Flasgger docs" }), "\n", _jsx(_components.li, { children: "Tests and a Postman collection" }), "\n"] }), "\n", _jsx(_components.p, { children: "This is a solid base to extend:" }), "\n", _jsxs(_components.ul, { children: ["\n", _jsx(_components.li, { children: "Add Alembic migrations and a production database" }), "\n", _jsx(_components.li, { children: "Tighten security (shorter TTLs, secret rotation, HTTPS)" }), "\n", _jsx(_components.li, { children: "Add auditing, logging, and monitoring" }), "\n", _jsx(_components.li, { children: "Evolve from roles to fine-grained permissions if your domain needs it" }), "\n"] })] }); } function MDXContent(props = {}) { const {wrapper: MDXLayout} = { ..._provideComponents(), ...props.components }; return MDXLayout ? _jsx(MDXLayout, { ...props, children: _jsx(_createMdxContent, { ...props }) }) : _createMdxContent(props); } return { default: MDXContent };