feat: multi-tenant aware STAC API

.github/workflows/data/noaa-emergency-response.json

@@ -3,6 +3,9 @@
     "title": "NOAA Emergency Response Imagery",
     "description": "NOAA Emergency Response Imagery hosted on AWS Public Dataset.",
     "stac_version": "1.0.0",
+    "properties": {
+        "tenant": "test-tenant"
+    },
     "license": "public-domain",
     "links": [],
     "extent": {

stac_api/runtime/src/app.py

@@ -1,4 +1,4 @@
-"""FastAPI application using PGStac.
+"""FastAPI application using PGStac with integrated tenant filtering.
 Based on https://github.com/developmentseed/eoAPI/tree/master/src/eoapi/stac
 """
 
@@ -27,8 +27,10 @@
 from starlette.templating import Jinja2Templates
 from starlette_cramjam.middleware import CompressionMiddleware
 
-from .core import VedaCrudClient
 from .monitoring import LoggerRouteHandler, logger, metrics, tracer
+from .tenant_client import TenantAwareVedaCrudClient
+from .tenant_middleware import TenantMiddleware
+from .tenant_routes import create_tenant_router
 from .validation import ValidationMiddleware
 
 from eoapi.auth_utils import OpenIdConnectAuth, OpenIdConnectSettings
@@ -54,6 +56,8 @@ async def lifespan(app: FastAPI):
     await close_db_connection(app)
 
 
+tenant_client = TenantAwareVedaCrudClient(pgstac_search_model=post_request_model)
+
 api = StacApi(
     app=FastAPI(
         title=f"{api_settings.project_name} STAC API",
@@ -76,17 +80,28 @@ async def lifespan(app: FastAPI):
     description=api_settings.project_description,
     settings=api_settings,
     extensions=application_extensions,
-    client=VedaCrudClient(pgstac_search_model=post_request_model),
+    client=tenant_client,
     search_get_request_model=get_request_model,
     search_post_request_model=post_request_model,
     collections_get_request_model=collections_get_request_model,
     items_get_request_model=items_get_request_model,
     response_class=ORJSONResponse,
-    middlewares=[Middleware(CompressionMiddleware), Middleware(ValidationMiddleware)],
+    middlewares=[
+        Middleware(CompressionMiddleware),
+        Middleware(ValidationMiddleware),
+        Middleware(TenantMiddleware),
+    ],
     router=APIRouter(route_class=LoggerRouteHandler),
 )
 app = api.app
 
+# Add tenant-specific routes
+logger.info("Creating tenant router...")
+tenant_router = create_tenant_router(tenant_client)
+logger.info(f"Registering tenant router with {len(tenant_router.routes)} routes")
+app.include_router(tenant_router, tags=["Tenant-specific endpoints"])
+logger.info("Tenant router registered successfully")
+
 # Set all CORS enabled origins
 if api_settings.cors_origins:
     app.add_middleware(
@@ -143,6 +158,20 @@ async def viewer_page(request: Request):
     )
 
 
+@app.get("/{tenant}/index.html", response_class=HTMLResponse)
+async def tenant_viewer_page(request: Request, tenant: str):
+    """Tenant-specific search viewer."""
+    return templates.TemplateResponse(
+        "stac-viewer.html",
+        {
+            "request": request,
+            "endpoint": str(request.url).replace("/index.html", f"/{tenant}"),
+            "tenant": tenant,
+        },
+        media_type="text/html",
+    )
+
+
 # If the correlation header is used in the UI, we can analyze traces that originate from a given user or client
 @app.middleware("http")
 async def add_correlation_id(request: Request, call_next):