Merge branch 'main' of github.com:stac-utils/stac-fastapi-elasticsearch into extend_datetime_search

Author: rhysrevans3

CHANGELOG.md

@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Changed
+
+- Updated stac-fastapi libraries to v3.0.0a1 [#265](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/265)
+
+### Fixed
+
+- API sort extension tests [#264](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/264)
+- Basic auth permission fix for checking route path instead of absolute path [#266](https://github.com/stac-utils/stac-fastapi-elasticsearch-opensearch/pull/266)
+
 ## [v3.0.0a1]
 
 ### Changed

stac_fastapi/core/setup.py

@@ -9,9 +9,10 @@
     "fastapi-slim",
     "attrs>=23.2.0",
     "pydantic[dotenv]",
-    "stac-fastapi.types==3.0.0a",
-    "stac-fastapi.api==3.0.0a",
-    "stac-fastapi.extensions==3.0.0a",
+    "stac_pydantic>=3",
+    "stac-fastapi.types==3.0.0a1",
+    "stac-fastapi.api==3.0.0a1",
+    "stac-fastapi.extensions==3.0.0a1",
     "orjson",
     "overrides",
     "geojson-pydantic",

stac_fastapi/core/stac_fastapi/core/basic_auth.py

@@ -61,7 +61,7 @@ def has_access(
         )
 
     permissions = user.get("permissions", [])
-    path = request.url.path
+    path = request.scope.get("route").path
     method = request.method
 
     if permissions == "*":

stac_fastapi/tests/basic_auth/test_basic_auth.py

@@ -74,7 +74,7 @@ async def test_delete_resource_insufficient_permissions(app_client_basic_auth, c
 
     assert response.status_code == 403
     assert response.json() == {
-        "detail": "Insufficient permissions for [DELETE /collections/test-collection]"
+        "detail": "Insufficient permissions for [DELETE /collections/{collection_id}]"
     }