Add GET /auth/me, lazy transformers import, /me test (21 passed)

aitrainlab/auth/routes.py

@@ -7,8 +7,9 @@ from sqlalchemy.orm import Session
 from .. import config
 from ..core import limits, security
 from ..core.database import get_db
+from ..core.dependencies import get_current_user
 from ..records import tables
-from ..records.contracts import UserCreate, Token
+from ..records.contracts import UserCreate, UserOut, Token
 
 router = APIRouter(prefix="/auth", tags=["auth"])
 
@@ -55,3 +56,8 @@ def login(body: LoginRequest, request: Request, db: Session = Depends(get_db)):
         limits.add(k_ip)
         raise HTTPException(401, "Invalid username/email or password")
     return Token(access_token=security.create_access_token(user.id), user=user)
+
+
+@router.get("/me", response_model=UserOut)
+def me(user=Depends(get_current_user)):
+    return user

tests/test_auth.py

@@ -48,3 +48,11 @@ def test_client_ip_header_only_trusted_with_proxy_key(signup, monkeypatch):
     spoof2 = {"x-atl-client-ip": "8.8.8.8", "x-atl-proxy-key": "wrong"}
     assert signup("user4", headers=spoof1).status_code == 201
     assert signup("user5", headers=spoof2).status_code == 429  # different claimed IP, same bucket
+
+
+def test_me_needs_login_and_returns_user(client, signup, auth):
+    assert client.get("/auth/me").status_code == 401
+    signup("alice", email="a@example.com")
+    tok = signup("meuser", email="me@example.com").json()["access_token"]
+    r = client.get("/auth/me", headers={"Authorization": f"Bearer {tok}"})
+    assert r.status_code == 200 and r.json()["username"] == "meuser"