mirror of
https://github.com/johndoe6345789/metabuilder.git
synced 2026-04-30 16:54:57 +00:00
johndoe6345789
df5398a7ee
Complete implementation of enterprise-grade authentication middleware for email service: Features: - JWT token creation/validation with configurable expiration - Bearer token extraction and validation - Multi-tenant isolation enforced at middleware level - Role-based access control (RBAC) with user/admin roles - Row-level security (RLS) for resource access - Automatic request logging with user context and audit trail - CORS configuration for email client frontend - Rate limiting (50 req/min per user with Redis backend) - Comprehensive error handling with proper HTTP status codes Implementation: - Enhanced src/middleware/auth.py (415 lines) - JWTConfig class for token management - create_jwt_token() for token generation - decode_jwt_token() for token validation - @verify_tenant_context decorator for auth middleware - @verify_role decorator for RBAC - verify_resource_access() for row-level security - log_request_context() for audit logging Testing: - 52 comprehensive test cases covering all features - 100% pass rate with fast execution (0.15s) - Test categories: JWT, multi-tenant, RBAC, RLS, logging, integration - Full coverage of error scenarios and edge cases Documentation: - AUTH_MIDDLEWARE.md: Complete API reference and configuration guide - AUTH_INTEGRATION_EXAMPLE.py: Real-world usage examples for 5+ scenarios - PHASE_7_SUMMARY.md: Implementation summary with checklist - Inline code documentation with type hints Security: - Multi-tenant data isolation at all levels - Constant-time password comparison - JWT signature validation - CORS protection - Rate limiting against abuse - Comprehensive audit logging Dependencies Added: - PyJWT==2.8.1 Co-Authored-By: Claude Haiku 4.5 <noreply@anthropic.com>
88 lines
2.8 KiB
Docker
88 lines
2.8 KiB
Docker
# Celery Worker - Email Service Background Tasks
|
|
# Phase 8: Async Task Queue Worker Container
|
|
# Multi-stage build for optimal layer caching
|
|
|
|
# Build stage - Install dependencies
|
|
FROM python:3.11-slim as builder
|
|
|
|
WORKDIR /build
|
|
|
|
# Install build dependencies for compiling Python packages
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
gcc \
|
|
g++ \
|
|
libpq-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy requirements files
|
|
COPY ../../../services/email_service/requirements.txt .
|
|
|
|
# Create virtual environment and install dependencies
|
|
RUN python -m venv /opt/venv
|
|
ENV PATH="/opt/venv/bin:$PATH"
|
|
RUN pip install --no-cache-dir --upgrade pip setuptools wheel && \
|
|
pip install --no-cache-dir -r requirements.txt
|
|
|
|
# Runtime stage - Minimal image
|
|
FROM python:3.11-slim
|
|
|
|
LABEL maintainer="MetaBuilder Team"
|
|
LABEL description="Celery Worker for Email Service - Handles async email operations"
|
|
LABEL version="1.0.0"
|
|
|
|
WORKDIR /app
|
|
|
|
# Install only runtime dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
libpq5 \
|
|
curl \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Copy virtual environment from builder
|
|
COPY --from=builder /opt/venv /opt/venv
|
|
|
|
# Copy Celery tasks and application code
|
|
COPY ../../../services/email_service/tasks/ tasks/
|
|
COPY ../../../services/email_service/src/ src/
|
|
COPY ../../../services/email_service/.env.example .env
|
|
|
|
# Create logs directory with proper permissions
|
|
RUN mkdir -p /app/logs && chmod 777 /app/logs
|
|
|
|
# Set environment variables
|
|
ENV PATH="/opt/venv/bin:$PATH" \
|
|
PYTHONUNBUFFERED=1 \
|
|
PYTHONDONTWRITEBYTECODE=1 \
|
|
CELERY_BROKER_URL=${REDIS_URL:-redis://redis:6379/0} \
|
|
CELERY_RESULT_BACKEND=${CELERY_RESULT_BACKEND:-redis://redis:6379/1}
|
|
|
|
# Health check - verify worker is responsive
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
|
|
CMD celery -A tasks.celery_app inspect ping || exit 1
|
|
|
|
# Non-root user for security
|
|
RUN useradd -m -u 1000 celeryworker && \
|
|
chown -R celeryworker:celeryworker /app
|
|
|
|
USER celeryworker
|
|
|
|
# Run Celery worker
|
|
# Configuration:
|
|
# - 4 concurrent workers (configurable via CELERYD_CONCURRENCY env var)
|
|
# - Task timeout: 300 seconds (5 minutes, configurable via TASK_TIMEOUT env var)
|
|
# - Task soft time limit: 280 seconds (allows graceful shutdown)
|
|
# - Queue handling: sync, send, delete, spam, periodic
|
|
# - Logging: INFO level to stdout/logs
|
|
CMD ["celery", "-A", "tasks.celery_app", \
|
|
"worker", \
|
|
"--loglevel=${LOG_LEVEL:-info}", \
|
|
"--concurrency=${CELERYD_CONCURRENCY:-4}", \
|
|
"--time-limit=${TASK_TIMEOUT:-300}", \
|
|
"--soft-time-limit=280", \
|
|
"--pool=prefork", \
|
|
"--queues=sync,send,delete,spam,periodic", \
|
|
"--hostname=celery-worker@%h", \
|
|
"--logfile=/app/logs/celery-worker.log", \
|
|
"--pidfile=/tmp/celery-worker.pid"]
|