fix: Userroles recipe multitenancy features

Author: KShivendu

supertokens_python/recipe/userroles/asyncio/__init__.py

@@ -17,44 +17,50 @@
 
 
 async def add_role_to_user(
-    user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str,
+    user_id: str,
+    role: str,
+    user_context: Union[Dict[str, Any], None] = None,
 ) -> Union[AddRoleToUserOkResult, UnknownRoleError]:
     if user_context is None:
         user_context = {}
     return await UserRolesRecipe.get_instance().recipe_implementation.add_role_to_user(
-        user_id, role, user_context
+        tenant_id, user_id, role, user_context
     )
 
 
 async def remove_user_role(
-    user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str,
+    user_id: str,
+    role: str,
+    user_context: Union[Dict[str, Any], None] = None,
 ) -> Union[RemoveUserRoleOkResult, UnknownRoleError]:
     if user_context is None:
         user_context = {}
     return await UserRolesRecipe.get_instance().recipe_implementation.remove_user_role(
-        user_id, role, user_context
+        tenant_id, user_id, role, user_context
     )
 
 
 async def get_roles_for_user(
-    user_id: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, user_id: str, user_context: Union[Dict[str, Any], None] = None
 ) -> GetRolesForUserOkResult:
     if user_context is None:
         user_context = {}
     return (
         await UserRolesRecipe.get_instance().recipe_implementation.get_roles_for_user(
-            user_id, user_context
+            tenant_id, user_id, user_context
         )
     )
 
 
 async def get_users_that_have_role(
-    role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
 ) -> Union[GetUsersThatHaveRoleOkResult, UnknownRoleError]:
     if user_context is None:
         user_context = {}
     return await UserRolesRecipe.get_instance().recipe_implementation.get_users_that_have_role(
-        role, user_context
+        tenant_id, role, user_context
     )
 
 

supertokens_python/recipe/userroles/interfaces.py

@@ -58,25 +58,25 @@ def __init__(self, roles: List[str]):
 class RecipeInterface(ABC):
     @abstractmethod
     async def add_role_to_user(
-        self, user_id: str, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[AddRoleToUserOkResult, UnknownRoleError]:
         pass
 
     @abstractmethod
     async def remove_user_role(
-        self, user_id: str, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[RemoveUserRoleOkResult, UnknownRoleError]:
         pass
 
     @abstractmethod
     async def get_roles_for_user(
-        self, user_id: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, user_context: Dict[str, Any]
     ) -> GetRolesForUserOkResult:
         pass
 
     @abstractmethod
     async def get_users_that_have_role(
-        self, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[GetUsersThatHaveRoleOkResult, UnknownRoleError]:
         pass
 

supertokens_python/recipe/userroles/recipe.py

@@ -146,12 +146,12 @@ def __init__(self) -> None:
         default_max_age_in_sec = 300
 
         async def fetch_value(
-            user_id: str, _tenant_id: str, user_context: Dict[str, Any]
+            user_id: str, tenant_id: str, user_context: Dict[str, Any]
         ) -> List[str]:
             recipe = UserRolesRecipe.get_instance()
 
             user_roles = await recipe.recipe_implementation.get_roles_for_user(
-                user_id, user_context
+                user_id, tenant_id, user_context
             )
 
             user_permissions: Set[str] = set()
@@ -181,11 +181,11 @@ def __init__(self) -> None:
         default_max_age_in_sec = 300
 
         async def fetch_value(
-            user_id: str, _tenant_id: str, user_context: Dict[str, Any]
+            user_id: str, tenant_id: str, user_context: Dict[str, Any]
         ) -> List[str]:
             recipe = UserRolesRecipe.get_instance()
             res = await recipe.recipe_implementation.get_roles_for_user(
-                user_id, user_context
+                user_id, tenant_id, user_context
             )
             return res.roles
 

supertokens_python/recipe/userroles/recipe_implementation.py

@@ -40,11 +40,11 @@ def __init__(self, querier: Querier):
         self.querier = querier
 
     async def add_role_to_user(
-        self, user_id: str, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[AddRoleToUserOkResult, UnknownRoleError]:
         params = {"userId": user_id, "role": role}
         response = await self.querier.send_put_request(
-            NormalisedURLPath("/recipe/user/role"), params
+            NormalisedURLPath(f"{tenant_id}/recipe/user/role"), params
         )
         if response.get("status") == "OK":
             return AddRoleToUserOkResult(
@@ -53,11 +53,11 @@ async def add_role_to_user(
         return UnknownRoleError()
 
     async def remove_user_role(
-        self, user_id: str, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[RemoveUserRoleOkResult, UnknownRoleError]:
         params = {"userId": user_id, "role": role}
         response = await self.querier.send_post_request(
-            NormalisedURLPath("/recipe/user/role/remove"), params
+            NormalisedURLPath(f"{tenant_id}/recipe/user/role/remove"), params
         )
         if response["status"] == "OK":
             return RemoveUserRoleOkResult(
@@ -66,20 +66,20 @@ async def remove_user_role(
         return UnknownRoleError()
 
     async def get_roles_for_user(
-        self, user_id: str, user_context: Dict[str, Any]
+        self, tenant_id: str, user_id: str, user_context: Dict[str, Any]
     ) -> GetRolesForUserOkResult:
         params = {"userId": user_id}
         response = await self.querier.send_get_request(
-            NormalisedURLPath("/recipe/user/roles"), params
+            NormalisedURLPath(f"{tenant_id}/recipe/user/roles"), params
         )
         return GetRolesForUserOkResult(roles=response["roles"])
 
     async def get_users_that_have_role(
-        self, role: str, user_context: Dict[str, Any]
+        self, tenant_id: str, role: str, user_context: Dict[str, Any]
     ) -> Union[GetUsersThatHaveRoleOkResult, UnknownRoleError]:
         params = {"role": role}
         response = await self.querier.send_get_request(
-            NormalisedURLPath("/recipe/role/users"), params
+            NormalisedURLPath(f"{tenant_id}/recipe/role/users"), params
         )
         if response.get("status") == "OK":
             return GetUsersThatHaveRoleOkResult(users=response["users"])

supertokens_python/recipe/userroles/syncio/__init__.py

@@ -31,35 +31,35 @@
 
 
 def add_role_to_user(
-    user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
 ) -> Union[AddRoleToUserOkResult, UnknownRoleError]:
     from supertokens_python.recipe.userroles.asyncio import add_role_to_user
 
-    return sync(add_role_to_user(user_id, role, user_context))
+    return sync(add_role_to_user(tenant_id, user_id, role, user_context))
 
 
 def remove_user_role(
-    user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, user_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
 ) -> Union[RemoveUserRoleOkResult, UnknownRoleError]:
     from supertokens_python.recipe.userroles.asyncio import remove_user_role
 
-    return sync(remove_user_role(user_id, role, user_context))
+    return sync(remove_user_role(tenant_id, user_id, role, user_context))
 
 
 def get_roles_for_user(
-    user_id: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, user_id: str, user_context: Union[Dict[str, Any], None] = None
 ) -> GetRolesForUserOkResult:
     from supertokens_python.recipe.userroles.asyncio import get_roles_for_user
 
-    return sync(get_roles_for_user(user_id, user_context))
+    return sync(get_roles_for_user(tenant_id, user_id, user_context))
 
 
 def get_users_that_have_role(
-    role: str, user_context: Union[Dict[str, Any], None] = None
+    tenant_id: str, role: str, user_context: Union[Dict[str, Any], None] = None
 ) -> Union[GetUsersThatHaveRoleOkResult, UnknownRoleError]:
     from supertokens_python.recipe.userroles.asyncio import get_users_that_have_role
 
-    return sync(get_users_that_have_role(role, user_context))
+    return sync(get_users_that_have_role(tenant_id, role, user_context))
 
 
 def create_new_role_or_add_permissions(