7a7daf8100
- 10 models: tenants, users, user_tenants, roles, sessions, audit_log, deletion_log, notifications, password_reset_tokens, api_tokens - Session-based auth (Redis + PostgreSQL audit trail) - Multi-tenant with ORM-level filtering + PostgreSQL RLS (set_config) - RBAC with roles/permissions + field-level permissions - CSRF protection via Origin header validation - Auth rate limiting (Redis counters with TTL) - CORS with explicit origins (no wildcard) - Health endpoint (no auth required) - Notification service + audit log middleware - 29 tests, 26 ACs, all passing - Coverage: 62% (infrastructure modules pending coverage in later tasks)
31 lines
422 B
Plaintext
31 lines
422 B
Plaintext
# LeoCRM v1.0 - Production Dependencies
|
|
|
|
# Web framework
|
|
fastapi>=0.111.0,<0.116
|
|
uvicorn[standard]>=0.29.0
|
|
python-multipart>=0.0.7
|
|
|
|
# Database / ORM
|
|
sqlalchemy==2.0.35
|
|
alembic>=1.13
|
|
asyncpg>=0.29
|
|
|
|
# Validation / Settings
|
|
pydantic>=2.5
|
|
pydantic-settings>=2.1
|
|
|
|
# Auth
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.0.1
|
|
|
|
# Redis / Job Queue
|
|
redis>=5.0
|
|
arq>=0.25
|
|
|
|
# File I/O
|
|
aiofiles>=23.2
|
|
|
|
# Templates (optional)
|
|
jinja2>=3.1
|
|
greenlet>=3.0
|