🚀 TaskTeam SaaS API

Production-style multi-tenant SaaS backend built with:

• FastAPI
• Async SQLAlchemy (2.0 style)
• JWT Authentication (Access + Refresh with rotation)
• Role-Based Access Control (RBAC)
• Clean Architecture (API → Service → Repository → DB)
• Dockerized & published to GHCR

---

🏗 Architecture

API Layer → FastAPI Routers
Service Layer → Business Logic & Permissions
Repository Layer → Database Queries
Database → Async SQLAlchemy ORM

Project structure:

app/ ├── api/

├── core/

├── db/

├── models/

├── repositories/

├── schemas/

├── services/

├── main.py

.env

---

🔐 Authentication

• JWT Access Token
• Refresh Token with rotation
• Token revocation support
• Secure password hashing (bcrypt)
• Role-based permissions

Roles:

owner → Full control
admin → Manage projects & members
member → Limited access

---

🛠 Tech Stack

• FastAPI
• Async SQLAlchemy
• SQLite (default)
• PostgreSQL (supported)
• python-jose (JWT)
• Passlib (bcrypt)
• Pytest (async testing)
• Docker

---

⚙️ Default Configuration

By default:

• Database: sqlite+aiosqlite
• Secret Key: auto-generated if not provided
• Access token expiry: 30 minutes
• Refresh token expiry: 7 days

---

🐳 Docker (GHCR)

Prebuilt image:

ghcr.io/yovsefx/taskteam_saas:latest

Run with default configuration:

docker run -p 8000:8000 ghcr.io/yovsefx/taskteam_saas:latest

Run with custom environment variables (PostgreSQL example):

docker run -p 8000:8000 \\
  -e DATABASE_URL="postgresql+asyncpg://user:password@host:5432/dbname" \\
  -e SECRET_KEY="your-secret-key" \\
  -e ACCESS_TOKEN_EXPIRE_MINUTES=30 \\
  -e REFRESH_TOKEN_EXPIRE_DAYS=14 \\
  ghcr.io/yovsefx/taskteam_saas:latest

---

🚀 Run Locally

uvicorn app.main:app --reload

API Docs: http://127.0.0.1:8000/docs