66cf0e0399
Context
-------
Two live-integration bugs surfaced during the Phase 0.5 auth-spike
run against the restored production Wealthfolio.
1. Wealthfolio 3.2's LoginRequest schema is `{ password: String }` —
it rejects any request with an unknown `username` field as HTTP
400 (empty body, hard to debug). Upstream source:
https://github.com/afadil/wealthfolio/blob/main/apps/server/src/auth.rs#L86-L88
2. Dockerfile referenced `/opt/poetry/bin/poetry` but pip install
puts poetry on the normal PATH; POETRY_HOME only affects the
self-installer, not `pip install`. Exit 127 in GHA build.
This change
-----------
- WealthfolioSink.login() sends `{password}` only; kept `username`
constructor arg as a stub for the day Wealthfolio adds multi-user.
- Dockerfile drops POETRY_HOME and uses `poetry` on PATH.
- Test: `_login_ok` now asserts body == {"password": "hunter2"}
("hunter2" is the XKCD placeholder — not a real credential).
Test plan
---------
## Automated
- poetry run pytest -q → 70 passed
- poetry run mypy broker_sync tests → Success: no issues found in 29 source files
- poetry run ruff check . → All checks passed!
## Manual Verification (executed live)
```
kubectl -n wealthfolio port-forward svc/wealthfolio 18080:80 &
WF_BASE_URL=http://localhost:18080 WF_USERNAME=admin \
WF_PASSWORD=<from-vault> \
poetry run broker-sync auth-spike
→ "Logged in. 1 account(s) visible."
```
33 lines
789 B
Docker
33 lines
789 B
Docker
FROM python:3.12-slim AS builder
|
|
|
|
ENV POETRY_VERSION=1.8.4 \
|
|
POETRY_VIRTUALENVS_IN_PROJECT=true \
|
|
PIP_NO_CACHE_DIR=1
|
|
|
|
# `pip install` puts poetry on PATH (/usr/local/bin/poetry) — don't bother
|
|
# with POETRY_HOME indirection.
|
|
RUN pip install --no-cache-dir "poetry==${POETRY_VERSION}"
|
|
|
|
WORKDIR /app
|
|
COPY pyproject.toml poetry.lock ./
|
|
RUN poetry install --only main --no-root
|
|
|
|
COPY broker_sync ./broker_sync
|
|
RUN poetry install --only main
|
|
|
|
|
|
FROM python:3.12-slim
|
|
|
|
WORKDIR /app
|
|
|
|
RUN useradd --system --uid 10001 --home /app --shell /usr/sbin/nologin broker && \
|
|
mkdir -p /data && chown -R broker:broker /data
|
|
|
|
COPY --from=builder --chown=broker:broker /app /app
|
|
|
|
ENV PATH="/app/.venv/bin:${PATH}" \
|
|
PYTHONUNBUFFERED=1
|
|
|
|
USER broker
|
|
ENTRYPOINT ["broker-sync"]
|
|
CMD ["version"]
|