feat: moved scopes to settings

src/.env.local

@@ -15,4 +15,5 @@ INST_DB_HOST=localhost:5432
 INST_DB_SCHEMA=public
 JWT_OPTS_VERIFY_AT_HASH="false"
 JWT_OPTS_VERIFY_AUD="false"
-JWT_OPTS_VERIFY_ISS="false"
+JWT_OPTS_VERIFY_ISS="false"
+ADMIN_SCOPES=["query-groups","manage-users"]

src/config.py

@@ -1,6 +1,6 @@
 import os
 from urllib import parse
-from typing import Any
+from typing import Any, Set
 
 from pydantic import field_validator, ValidationInfo
 from pydantic.networks import PostgresDsn
@@ -24,6 +24,7 @@ class Settings(BaseSettings):
     inst_db_host: str
     inst_db_scheme: str = "postgresql+asyncpg"
     inst_conn: PostgresDsn | None = None
+    admin_scopes: Set[str] = set(["query-groups", "manage-users"])
 
     def __init__(self, **data):
         super().__init__(**data)

src/dependencies.py

@@ -7,6 +7,7 @@
 from sqlalchemy.ext.asyncio import AsyncSession
 from typing import List, Optional
 from itertools import chain
+from config import settings
 
 from entities.engine import get_session
 from entities.repos import institutions_repo as repo
@@ -46,11 +47,8 @@ def get_email_domain(email: str) -> str:
     return None
 
 
-admin_scopes = set(["query-groups", "manage-users"])
-
-
 def is_admin(auth: AuthCredentials):
-    return admin_scopes.issubset(auth.scopes)
+    return settings.admin_scopes.issubset(auth.scopes)
 
 
 def lei_association_check(func: DecoratedCallable) -> DecoratedCallable: