Merge branch 'main' into typing-alembic

SECURITY.md

@@ -0,0 +1,6 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a security vulnerability in this project, we encourage you to let us know immediately. Please report it privately via [reporting security vulnerabilities](https://github.com/alan-turing-institute/rctab-api/security/advisories).
+We will investigate all legitimate reports and provide a fix as quickly as possible.

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "RCTab"
-version = "1.4.0"
+version = "1.5.0"
 description = "The RCTab API. Manage Azure budgets and usage"
 authors = []
 
@@ -25,6 +25,7 @@ pydantic = { extras = ["email"], version = "^2.7.1" }
 pydantic-settings = "^2.3.4"
 PyJWT = { extras = ["crypto"], version = "^2.4.0" }
 python-dotenv = "^1.0.1"
+rctab_models = { git = "https://github.com/alan-turing-institute/rctab-models", tag = "0.1.0" }
 redis = {extras = ["hiredis"], version = "^5.0.1"}
 requests = "^2.32.3"
 sendgrid = "^6.9.1"

rctab/crud/__init__.py

@@ -1,9 +1,8 @@
 """The SQLAlchemy models, Pydantic models and database logic."""
 
-from rctab.crud import accounting_models, models, schema
+from rctab.crud import accounting_models, models
 
 __all__ = [
     "models",
     "accounting_models",
-    "schema",
 ]

rctab/crud/auth.py

@@ -6,11 +6,11 @@
 import msal
 from asyncpg.exceptions import UniqueViolationError
 from fastapi import Depends, HTTPException
+from rctab_models.models import UserRBAC
 from sqlalchemy.dialects.postgresql import insert
 from sqlalchemy.sql import select
 
 from rctab.crud.models import database, user_cache, user_rbac
-from rctab.crud.schema import UserRBAC
 
 
 # Define cache functions