Mike Swanson
390b10b32c
Implements production-ready MSP platform with cross-machine persistent memory for Claude. API Implementation: - 130 REST API endpoints across 21 entities - JWT authentication on all endpoints - AES-256-GCM encryption for credentials - Automatic audit logging - Complete OpenAPI documentation Database: - 43 tables in MariaDB (172.16.3.20:3306) - 42 SQLAlchemy models with modern 2.0 syntax - Full Alembic migration system - 99.1% CRUD test pass rate Context Recall System (Phase 6): - Cross-machine persistent memory via database - Automatic context injection via Claude Code hooks - Automatic context saving after task completion - 90-95% token reduction with compression utilities - Relevance scoring with time decay - Tag-based semantic search - One-command setup script Security Features: - JWT tokens with Argon2 password hashing - AES-256-GCM encryption for all sensitive data - Comprehensive audit trail for credentials - HMAC tamper detection - Secure configuration management Test Results: - Phase 3: 38/38 CRUD tests passing (100%) - Phase 4: 34/35 core API tests passing (97.1%) - Phase 5: 62/62 extended API tests passing (100%) - Phase 6: 10/10 compression tests passing (100%) - Overall: 144/145 tests passing (99.3%) Documentation: - Comprehensive architecture guides - Setup automation scripts - API documentation at /api/docs - Complete test reports - Troubleshooting guides Project Status: 95% Complete (Production-Ready) Phase 7 (optional work context APIs) remains for future enhancement. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
468 lines
14 KiB
Python
468 lines
14 KiB
Python
"""
|
|
M365 Tenant API router for ClaudeTools.
|
|
|
|
This module defines all REST API endpoints for managing M365 tenants, including
|
|
CRUD operations with proper authentication, validation, and error handling.
|
|
"""
|
|
|
|
from uuid import UUID
|
|
|
|
from fastapi import APIRouter, Depends, HTTPException, Query, status
|
|
from sqlalchemy.orm import Session
|
|
|
|
from api.database import get_db
|
|
from api.middleware.auth import get_current_user
|
|
from api.schemas.m365_tenant import (
|
|
M365TenantCreate,
|
|
M365TenantResponse,
|
|
M365TenantUpdate,
|
|
)
|
|
from api.services import m365_tenant_service
|
|
|
|
# Create router with prefix and tags
|
|
router = APIRouter()
|
|
|
|
|
|
@router.get(
|
|
"",
|
|
response_model=dict,
|
|
summary="List all M365 tenants",
|
|
description="Retrieve a paginated list of all M365 tenants with optional filtering",
|
|
status_code=status.HTTP_200_OK,
|
|
)
|
|
def list_m365_tenants(
|
|
skip: int = Query(
|
|
default=0,
|
|
ge=0,
|
|
description="Number of records to skip for pagination"
|
|
),
|
|
limit: int = Query(
|
|
default=100,
|
|
ge=1,
|
|
le=1000,
|
|
description="Maximum number of records to return (max 1000)"
|
|
),
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
List all M365 tenants with pagination.
|
|
|
|
- **skip**: Number of M365 tenants to skip (default: 0)
|
|
- **limit**: Maximum number of M365 tenants to return (default: 100, max: 1000)
|
|
|
|
Returns a list of M365 tenants with pagination metadata.
|
|
|
|
**Example Request:**
|
|
```
|
|
GET /api/m365-tenants?skip=0&limit=50
|
|
Authorization: Bearer <token>
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"total": 3,
|
|
"skip": 0,
|
|
"limit": 50,
|
|
"m365_tenants": [
|
|
{
|
|
"id": "123e4567-e89b-12d3-a456-426614174000",
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "admin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Primary M365 tenant",
|
|
"created_at": "2024-01-15T10:30:00Z",
|
|
"updated_at": "2024-01-15T10:30:00Z"
|
|
}
|
|
]
|
|
}
|
|
```
|
|
"""
|
|
try:
|
|
tenants, total = m365_tenant_service.get_m365_tenants(db, skip, limit)
|
|
|
|
return {
|
|
"total": total,
|
|
"skip": skip,
|
|
"limit": limit,
|
|
"m365_tenants": [M365TenantResponse.model_validate(tenant) for tenant in tenants]
|
|
}
|
|
|
|
except Exception as e:
|
|
raise HTTPException(
|
|
status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
|
|
detail=f"Failed to retrieve M365 tenants: {str(e)}"
|
|
)
|
|
|
|
|
|
@router.get(
|
|
"/{tenant_id}",
|
|
response_model=M365TenantResponse,
|
|
summary="Get M365 tenant by ID",
|
|
description="Retrieve a single M365 tenant by its unique identifier",
|
|
status_code=status.HTTP_200_OK,
|
|
responses={
|
|
200: {
|
|
"description": "M365 tenant found and returned",
|
|
"model": M365TenantResponse,
|
|
},
|
|
404: {
|
|
"description": "M365 tenant not found",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "M365 tenant with ID 123e4567-e89b-12d3-a456-426614174000 not found"}
|
|
}
|
|
},
|
|
},
|
|
},
|
|
)
|
|
def get_m365_tenant(
|
|
tenant_id: UUID,
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
Get a specific M365 tenant by ID.
|
|
|
|
- **tenant_id**: UUID of the M365 tenant to retrieve
|
|
|
|
Returns the complete M365 tenant details.
|
|
|
|
**Example Request:**
|
|
```
|
|
GET /api/m365-tenants/123e4567-e89b-12d3-a456-426614174000
|
|
Authorization: Bearer <token>
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"id": "123e4567-e89b-12d3-a456-426614174000",
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "admin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Primary M365 tenant",
|
|
"created_at": "2024-01-15T10:30:00Z",
|
|
"updated_at": "2024-01-15T10:30:00Z"
|
|
}
|
|
```
|
|
"""
|
|
tenant = m365_tenant_service.get_m365_tenant_by_id(db, tenant_id)
|
|
return M365TenantResponse.model_validate(tenant)
|
|
|
|
|
|
@router.get(
|
|
"/by-client/{client_id}",
|
|
response_model=dict,
|
|
summary="Get M365 tenants by client",
|
|
description="Retrieve all M365 tenants for a specific client",
|
|
status_code=status.HTTP_200_OK,
|
|
responses={
|
|
200: {
|
|
"description": "M365 tenants found and returned",
|
|
},
|
|
404: {
|
|
"description": "Client not found",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "Client with ID 123e4567-e89b-12d3-a456-426614174000 not found"}
|
|
}
|
|
},
|
|
},
|
|
},
|
|
)
|
|
def get_m365_tenants_by_client(
|
|
client_id: UUID,
|
|
skip: int = Query(
|
|
default=0,
|
|
ge=0,
|
|
description="Number of records to skip for pagination"
|
|
),
|
|
limit: int = Query(
|
|
default=100,
|
|
ge=1,
|
|
le=1000,
|
|
description="Maximum number of records to return (max 1000)"
|
|
),
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
Get all M365 tenants for a specific client.
|
|
|
|
- **client_id**: UUID of the client
|
|
- **skip**: Number of M365 tenants to skip (default: 0)
|
|
- **limit**: Maximum number of M365 tenants to return (default: 100, max: 1000)
|
|
|
|
Returns a list of M365 tenants for the specified client.
|
|
|
|
**Example Request:**
|
|
```
|
|
GET /api/m365-tenants/by-client/abc12345-6789-0def-1234-56789abcdef0?skip=0&limit=50
|
|
Authorization: Bearer <token>
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"total": 2,
|
|
"skip": 0,
|
|
"limit": 50,
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"m365_tenants": [
|
|
{
|
|
"id": "123e4567-e89b-12d3-a456-426614174000",
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "admin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Primary M365 tenant",
|
|
"created_at": "2024-01-15T10:30:00Z",
|
|
"updated_at": "2024-01-15T10:30:00Z"
|
|
}
|
|
]
|
|
}
|
|
```
|
|
"""
|
|
tenants, total = m365_tenant_service.get_m365_tenants_by_client(db, client_id, skip, limit)
|
|
|
|
return {
|
|
"total": total,
|
|
"skip": skip,
|
|
"limit": limit,
|
|
"client_id": str(client_id),
|
|
"m365_tenants": [M365TenantResponse.model_validate(tenant) for tenant in tenants]
|
|
}
|
|
|
|
|
|
@router.post(
|
|
"",
|
|
response_model=M365TenantResponse,
|
|
summary="Create new M365 tenant",
|
|
description="Create a new M365 tenant with the provided details",
|
|
status_code=status.HTTP_201_CREATED,
|
|
responses={
|
|
201: {
|
|
"description": "M365 tenant created successfully",
|
|
"model": M365TenantResponse,
|
|
},
|
|
404: {
|
|
"description": "Client not found",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "Client with ID abc12345-6789-0def-1234-56789abcdef0 not found"}
|
|
}
|
|
},
|
|
},
|
|
409: {
|
|
"description": "M365 tenant with tenant_id already exists",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "M365 tenant with tenant_id 'def45678-9abc-0123-4567-89abcdef0123' already exists"}
|
|
}
|
|
},
|
|
},
|
|
422: {
|
|
"description": "Validation error",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {
|
|
"detail": [
|
|
{
|
|
"loc": ["body", "tenant_id"],
|
|
"msg": "field required",
|
|
"type": "value_error.missing"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
},
|
|
},
|
|
},
|
|
)
|
|
def create_m365_tenant(
|
|
tenant_data: M365TenantCreate,
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
Create a new M365 tenant.
|
|
|
|
Requires a valid JWT token with appropriate permissions.
|
|
|
|
**Example Request:**
|
|
```json
|
|
POST /api/m365-tenants
|
|
Authorization: Bearer <token>
|
|
Content-Type: application/json
|
|
|
|
{
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "admin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Primary M365 tenant"
|
|
}
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"id": "123e4567-e89b-12d3-a456-426614174000",
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "admin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Primary M365 tenant",
|
|
"created_at": "2024-01-15T10:30:00Z",
|
|
"updated_at": "2024-01-15T10:30:00Z"
|
|
}
|
|
```
|
|
"""
|
|
tenant = m365_tenant_service.create_m365_tenant(db, tenant_data)
|
|
return M365TenantResponse.model_validate(tenant)
|
|
|
|
|
|
@router.put(
|
|
"/{tenant_id}",
|
|
response_model=M365TenantResponse,
|
|
summary="Update M365 tenant",
|
|
description="Update an existing M365 tenant's details",
|
|
status_code=status.HTTP_200_OK,
|
|
responses={
|
|
200: {
|
|
"description": "M365 tenant updated successfully",
|
|
"model": M365TenantResponse,
|
|
},
|
|
404: {
|
|
"description": "M365 tenant or client not found",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "M365 tenant with ID 123e4567-e89b-12d3-a456-426614174000 not found"}
|
|
}
|
|
},
|
|
},
|
|
409: {
|
|
"description": "Conflict with existing M365 tenant",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "M365 tenant with tenant_id 'def45678-9abc-0123-4567-89abcdef0123' already exists"}
|
|
}
|
|
},
|
|
},
|
|
},
|
|
)
|
|
def update_m365_tenant(
|
|
tenant_id: UUID,
|
|
tenant_data: M365TenantUpdate,
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
Update an existing M365 tenant.
|
|
|
|
- **tenant_id**: UUID of the M365 tenant to update
|
|
|
|
Only provided fields will be updated. All fields are optional.
|
|
|
|
**Example Request:**
|
|
```json
|
|
PUT /api/m365-tenants/123e4567-e89b-12d3-a456-426614174000
|
|
Authorization: Bearer <token>
|
|
Content-Type: application/json
|
|
|
|
{
|
|
"admin_email": "newadmin@dataforth.com",
|
|
"notes": "Updated administrator contact"
|
|
}
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"id": "123e4567-e89b-12d3-a456-426614174000",
|
|
"client_id": "abc12345-6789-0def-1234-56789abcdef0",
|
|
"tenant_id": "def45678-9abc-0123-4567-89abcdef0123",
|
|
"tenant_name": "dataforth.com",
|
|
"default_domain": "dataforthcorp.onmicrosoft.com",
|
|
"admin_email": "newadmin@dataforth.com",
|
|
"cipp_name": "Dataforth Corp",
|
|
"notes": "Updated administrator contact",
|
|
"created_at": "2024-01-15T10:30:00Z",
|
|
"updated_at": "2024-01-15T14:20:00Z"
|
|
}
|
|
```
|
|
"""
|
|
tenant = m365_tenant_service.update_m365_tenant(db, tenant_id, tenant_data)
|
|
return M365TenantResponse.model_validate(tenant)
|
|
|
|
|
|
@router.delete(
|
|
"/{tenant_id}",
|
|
response_model=dict,
|
|
summary="Delete M365 tenant",
|
|
description="Delete an M365 tenant by its ID",
|
|
status_code=status.HTTP_200_OK,
|
|
responses={
|
|
200: {
|
|
"description": "M365 tenant deleted successfully",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {
|
|
"message": "M365 tenant deleted successfully",
|
|
"tenant_id": "123e4567-e89b-12d3-a456-426614174000"
|
|
}
|
|
}
|
|
},
|
|
},
|
|
404: {
|
|
"description": "M365 tenant not found",
|
|
"content": {
|
|
"application/json": {
|
|
"example": {"detail": "M365 tenant with ID 123e4567-e89b-12d3-a456-426614174000 not found"}
|
|
}
|
|
},
|
|
},
|
|
},
|
|
)
|
|
def delete_m365_tenant(
|
|
tenant_id: UUID,
|
|
db: Session = Depends(get_db),
|
|
current_user: dict = Depends(get_current_user),
|
|
):
|
|
"""
|
|
Delete an M365 tenant.
|
|
|
|
- **tenant_id**: UUID of the M365 tenant to delete
|
|
|
|
This is a permanent operation and cannot be undone.
|
|
|
|
**Example Request:**
|
|
```
|
|
DELETE /api/m365-tenants/123e4567-e89b-12d3-a456-426614174000
|
|
Authorization: Bearer <token>
|
|
```
|
|
|
|
**Example Response:**
|
|
```json
|
|
{
|
|
"message": "M365 tenant deleted successfully",
|
|
"tenant_id": "123e4567-e89b-12d3-a456-426614174000"
|
|
}
|
|
```
|
|
"""
|
|
return m365_tenant_service.delete_m365_tenant(db, tenant_id)
|