Rescue Paperjet v1 implementation

backend/app/auth/dependencies.py

@@ -1,10 +1,11 @@
 """FastAPI dependencies for authentication and security."""
 
-from fastapi import Request, HTTPException
+from fastapi import HTTPException, Request
 
 from app.auth.session import verify_session
 from app.config import settings
 
+
 def get_current_user(request: Request) -> int:
     """
     Dependency that extracts and validates the session cookie.
@@ -14,11 +15,11 @@ def get_current_user(request: Request) -> int:
     token = request.cookies.get(settings.COOKIE_NAME)
     if not token:
         raise HTTPException(status_code=401, detail="Not authenticated")
-    
+
     user_id = verify_session(token)
     if not user_id:
         raise HTTPException(status_code=401, detail="Session expired or invalid")
-    
+
     return user_id
 
 
@@ -27,9 +28,11 @@ def verify_csrf(request: Request) -> None:
     Dependency to mitigate CSRF for cookie-based auth.
     Requires X-Requested-With header on all mutating requests.
     """
-    if request.method in ["POST", "PUT", "PATCH", "DELETE"]:
-        if request.headers.get("X-Requested-With") != "XMLHttpRequest":
-            raise HTTPException(
-                status_code=403, 
-                detail="CSRF check failed: missing X-Requested-With header"
-            )
+    if (
+        request.method in ["POST", "PUT", "PATCH", "DELETE"]
+        and request.headers.get("X-Requested-With") != "XMLHttpRequest"
+    ):
+        raise HTTPException(
+            status_code=403,
+            detail="CSRF check failed: missing X-Requested-With header",
+        )