feat: Authentication, site user, and environment changes

.env.example

@@ -0,0 +1,11 @@
+# Required
+# Supports `dev`, `prod`, or `test`
+ENVIRONMENT=dev
+DB_PORT=5444
+
+# Authentication
+COOKIE_SECURE=false
+AUTH_URL=https://cas.sfu.ca/cas/serviceValidate
+
+# Redirect after authentication
+FRONTEND_ORIGIN=http://localhost:8080

.github/workflows/alembic.yml

@@ -4,6 +4,11 @@ on: pull_request
 jobs:
   alembic_upgrade_head:
     runs-on: ubuntu-latest
+    env:
+      ENVIRONMENT: dev
+      DB_PORT: "5432"
+      COOKIE_SECURE: "false"
+      FRONTEND_ORIGIN: http://localhost:8080
 
     services:
       postgres:
@@ -32,19 +37,18 @@ jobs:
             sleep 1
           done
 
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+
+      - name: Install Python
+        run: uv python install 3.13
+
       - name: Install dependencies
-        run: |
-          sudo add-apt-repository ppa:deadsnakes/ppa
-          sudo apt install python3.13 python3.13-venv
-          python3.13 -m pip install --upgrade pip
-          python3.13 -m venv venv
-          source ./venv/bin/activate
-          pip install .
-
-      # This will fail if there are divergent heads and alembic gets confused;
-      #   e.g., un-sanitarily merging main into a dev branch.
+        run: uv sync --locked
+
+      # This will fail if there are divergent heads and alembic gets confused
+      #   e.g. merging into main without passing this check
       - name: Run alembic upgrade head
-        run: |
-          source ./venv/bin/activate
-          cd src
-          alembic upgrade head
+        working-directory: src
+        run: uv run alembic upgrade head

.github/workflows/pytest_unit.yml

@@ -5,18 +5,21 @@ jobs:
   unit_tests:
     runs-on: ubuntu-latest
     timeout-minutes: 5
+    env:
+      ENVIRONMENT: test
+      COOKIE_SECURE: "false"
+      FRONTEND_ORIGIN: http://localhost:8080
 
     steps:
       - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v6
-        with:
-          python-version: '3.13'
-
       - uses: astral-sh/setup-uv@v6
         with:
           enable-cache: true
 
+      - name: Install Python
+        run: uv python install 3.13
+
       - name: Install dependencies
         run: uv sync --extra test --locked
 

.github/workflows/ruff.yml

@@ -5,4 +5,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: astral-sh/ruff-action@v3
+
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+
+      - name: Install Python
+        run: uv python install 3.13
+
+      - name: Install dependencies
+        run: uv sync --extra dev --locked
+
+      - name: Run Ruff
+        run: uv run ruff check .

README.md

@@ -33,26 +33,27 @@ pip install ".[dev, test]" # or: uv sync --all-extras
 ```
 
 5. Follow the database setup instructions on the [wiki](https://github.com/CSSS/csss-site-backend/wiki/1.-Local-Setup#database-setup). The recommended way is to do it through Docker, but both should work.
-6. You will need to set the following environment variables
+6. You will need to set the following environment variables set
 ```bash
-export DB_PORT=5444 # If you're using Docker
-export LOCAL=true # Should be true if you're running this locally
+DB_PORT=5444 # If you're using Docker
+ENVIRONMENT=dev # Set this to `test` if you want to use the test database instead
 ```
+You can also create a `.env` file and set those in there. See `.env.example` for more information.
 
 
 ## Important Directories
 
 - `config/` configuration files for the server machine
 - `src/`
-    - `alembic` for database migrations
-    - `access/` for controlling officer access to the google drive, bitwarden, and github. TODO: discord as well?
-    - `blog/` for running an editable csss-blog
-    - `dashboard/` for controlling the server, website, jobs, and access to services & stuff.
-    - `elections/` for the mangement of current elections & past elections
-    - `jobs/` for cronjobs that run regularly on the server
-    - `misc/` for anything that can't be easily categorized or is very small
-    - `officers/` for officer contact information + photos
-- `test/` for html pages which interact with the backend's local api
+    - `alembic` database migrations
+    - `auth/` controlling authentication and sessions
+    - `candidates/` management of those who run in large elections
+    - `elections/` mangement of current elections & past elections
+    - `event/` management of events
+    - `nominees/` management of nominees to large elections
+    - `officers/` management of officer information and terms
+    - `translink/` management of TransLink REST API
+- `test/` unit and integration tests
 
 ## Developer Tools
 

pyproject.toml

@@ -37,14 +37,22 @@ Homepage = "https://api.sfucsss.org/"
 # Pytest: Test framework
 [tool.pytest.ini_options]
 pythonpath = ["src"]
+testpaths = ["tests"]
+norecursedirs = ["tests/wip"] # Don't test these paths
+asyncio_mode = "auto"
+asyncio_default_fixture_loop_scope = "function"
+asyncio_default_test_loop_scope = "function"
 log_cli = true
 log_cli_level = "INFO"
-testpaths = [
-    "tests",
+addopts = [
+    "--strict-markers",
+    "--strict-config",
+    "--tb=short"
+]
+markers = [
+    "integration: tests that require database or full app setup",
+    "unit: isolated tests that do not require external services"
 ]
-norecursedirs = "tests/wip"
-asyncio_mode = "auto"
-asyncio_default_fixture_loop_scope = "function"
 
 # Ruff: Formatter and linter
 [tool.ruff]

src/alembic/versions/060623cf940f_change_session_id_to_be_32_bytes_of_.py

@@ -0,0 +1,38 @@
+"""change session ID to be 32 bytes of base64
+
+Revision ID: 060623cf940f
+Revises: f0c99d0db277
+Create Date: 2026-07-01 01:17:28.430756
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+from constants import SESSION_ID_LEN
+
+
+# revision identifiers, used by Alembic.
+revision: str = '060623cf940f'
+down_revision: Union[str, None] = '3c00f28c26e2'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.alter_column('user_session', 'session_id',
+               existing_type=sa.VARCHAR(length=512),
+               type_=sa.String(length=SESSION_ID_LEN),
+               existing_nullable=False)
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.alter_column('user_session', 'session_id',
+               existing_type=sa.String(length=SESSION_ID_LEN),
+               type_=sa.VARCHAR(length=512),
+               existing_nullable=False)
+    # ### end Alembic commands ###

src/alembic/versions/3c00f28c26e2_create_honorary_member_table.py

@@ -7,7 +7,6 @@
 """
 
 from collections.abc import Sequence
-from typing import Union
 
 import sqlalchemy as sa
 

src/alembic/versions/caa26d56d842_remove_site_profile_pics.py

@@ -0,0 +1,30 @@
+"""remove site profile pics
+
+Revision ID: caa26d56d842
+Revises: 060623cf940f
+Create Date: 2026-07-01 02:01:26.412179
+
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision: str = 'caa26d56d842'
+down_revision: Union[str, None] = '060623cf940f'
+branch_labels: Union[str, Sequence[str], None] = None
+depends_on: Union[str, Sequence[str], None] = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_column("site_user", "profile_picture_url")
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.add_column("site_user", sa.Column("profile_picture_url", sa.TEXT(), autoincrement=False, nullable=True))
+    # ### end Alembic commands ###

src/auth/constants.py

@@ -0,0 +1,5 @@
+from datetime import timedelta
+
+COOKIE_SESSION_KEY = "session_id"
+COOKIE_MAX_AGE = 60 * 60 * 2  # 2 hours in seconds
+SESSION_MAX_AGE = timedelta(seconds=COOKIE_MAX_AGE)