orchard

Files

Mondo Diaz d61c7a71fb Add project-level authorization checks

Authorization:
- Add AuthorizationService for checking project access
- Implement get_user_access_level() with admin, owner, and permission checks
- Add check_project_access() helper for route handlers
- Add grant_access() and revoke_access() methods
- Add ProjectAccessChecker dependency class

Routes:
- Add authorization checks to project CRUD (read, update, delete)
- Add authorization checks to package create
- Add authorization checks to upload endpoint (requires write)
- Add authorization checks to download endpoint (requires read)
- Add authorization checks to tag create

Tests:
- Fix pagination flakiness in test_list_projects
- Fix pagination flakiness in test_projects_search
- Add API key authentication to concurrent upload test

2026-01-08 16:20:42 -06:00

repositories

Implement database storage layer

2025-12-12 12:45:33 -06:00

services

Metadata database tracks all uploads with project, package, tag, and timestamp queryable via API

2026-01-07 12:31:44 -06:00

__init__.py

Rewrite from Go + vanilla JS to Python (FastAPI) + React (TypeScript)

2025-12-05 17:16:43 -06:00

auth.py

Add project-level authorization checks