chore: fix all ruff lint errors + format — 0 errors, 306 tests pass

app/core/auth.py

@@ -5,20 +5,20 @@ from __future__ import annotations
 import hashlib
 import secrets
 import uuid
-from datetime import datetime, timedelta, timezone
+from datetime import UTC, datetime, timedelta
 from typing import Any
 
 import redis.asyncio as aioredis
 from passlib.context import CryptContext
-from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.config import get_settings
-from app.models.user import User, UserTenant
-from app.models.role import Role
 from app.models.session import Session as SessionModel
+from app.models.user import User
 
-_pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto", bcrypt__rounds=get_settings().bcrypt_rounds)
+_pwd_context = CryptContext(
+    schemes=["bcrypt"], deprecated="auto", bcrypt__rounds=get_settings().bcrypt_rounds
+)
 
 
 def hash_password(password: str) -> str:
@@ -63,7 +63,7 @@ async def create_session(
     settings = get_settings()
     session_id = str(uuid.uuid4())
     csrf_token = generate_csrf_token()
-    expires_at = datetime.now(timezone.utc) + timedelta(seconds=settings.session_ttl_seconds)
+    expires_at = datetime.now(UTC) + timedelta(seconds=settings.session_ttl_seconds)
 
     # Redis runtime session
     session_data: dict[str, Any] = {
@@ -76,6 +76,7 @@ async def create_session(
         "is_active": user.is_active,
     }
     import json
+
     await redis.setex(
         f"session:{session_id}",
         settings.session_ttl_seconds,
@@ -99,6 +100,7 @@ async def create_session(
 async def get_session_data(redis: aioredis.Redis, session_id: str) -> dict[str, Any] | None:
     """Retrieve session data from Redis."""
     import json
+
     raw = await redis.get(f"session:{session_id}")
     if raw is None:
         return None
@@ -117,6 +119,7 @@ async def update_session_tenant(
 ) -> dict[str, Any] | None:
     """Update the active tenant in a Redis session."""
     import json
+
     settings = get_settings()
     raw = await redis.get(f"session:{session_id}")
     if raw is None:
@@ -130,7 +133,9 @@ async def update_session_tenant(
     return data
 
 
-def check_permission(role_name: str, module: str, action: str, permissions: dict | None = None) -> bool:
+def check_permission(
+    role_name: str, module: str, action: str, permissions: dict | None = None
+) -> bool:
     """Check if a role has permission for a module+action.
     Built-in roles: admin (all), editor (read+write), viewer (read only).
     Custom roles use the permissions dict.