sprint20-23: tests + documentation + guest access + infrastructure + migrations 0059

app/deps.py

@@ -14,6 +14,7 @@ from sqlalchemy.ext.asyncio import AsyncSession
 from app.config import get_settings
 from app.core.auth import get_redis, get_session_data, refresh_session_ttl
 from app.core.db import get_db, set_tenant_context, set_user_context
+from app.models.guest_user import GuestUser
 
 logger = logging.getLogger(__name__)
 
@@ -42,6 +43,39 @@ async def get_redis_dep() -> aioredis.Redis:
     return get_redis()
 
 
+async def get_current_guest(
+    request: Request,
+    redis: aioredis.Redis = Depends(get_redis_dep),
+) -> dict[str, Any]:
+    """Get the current guest user from guest session cookie.
+
+    Returns session data dict with guest_user_id, tenant_id, email, name.
+    Used for guest-specific endpoints (guest login, guest contacts).
+    """
+    session_id = request.cookies.get("guest_session")
+    if not session_id:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail={"detail": "Not authenticated", "code": "not_authenticated"},
+        )
+
+    import json
+
+    raw = await redis.get(f"guest_session:{session_id}")
+    if raw is None:
+        raise HTTPException(
+            status_code=status.HTTP_401_UNAUTHORIZED,
+            detail={"detail": "Session expired or invalid", "code": "session_invalid"},
+        )
+
+    session_data = json.loads(raw)
+
+    # Extend TTL on each request (sliding session)
+    await redis.expire(f"guest_session:{session_id}", 1800)
+
+    return session_data
+
+
 async def get_current_user(
     request: Request,
     db: AsyncSession = Depends(get_db),