About CRUD Permissions

[Faridalim]

Hi, could you guide me how to implement fastapi-crudrouter with JWT scope? Or maybe a way to limit some CRUD routes to some roles? Thank you very much

[awtkns]

Hi there. Currently you can limit CRUD routes to some roles by adding a dependency (Docs) to your router. eg:

from fastapi import FastAPI, testclient, Depends
from fastapi.security import OAuth2PasswordBearer
from fastapi_crudrouter import MemoryCRUDRouter

app = FastAPI()
oauth2_scheme = OAuth2PasswordBearer(tokenUrl="auth/token")

def token_auth(token: str):
    if not token:
        raise HTTPException(401, "Invalid token")

router = MemoryCRUDRouter(schema=Potato, dependencies=[Depends(token_auth)])
app.include_router(router)

If you are trying to limit just individual routes to certain scopes (eg: just the delete all route), there is currently no way to do that, However it will be available in a future release.

#37

[Faridalim]

Thank you for the reply.. Wow, the implementation is so easy, thank you.. Okay, i will be waiting for the update :)

[awtkns]

The discussion on the feature can be found in #37

[awtkns]

Hi @Faridalim, this feature (dependencies for individual routes) has now been released in the latest version v0.7.

[Faridalim]

Super.. thank you @awtkns, I will check it