Merge pull request #998 from airweave-ai/fix/cannot-use-direct

fix: cannot use direct crud user update method

Author: orhanrauf

backend/airweave/api/deps.py

@@ -50,13 +50,9 @@ async def _authenticate_auth0_user(
         logger.error(f"User {auth0_user.email} not found in database")
         return None, AuthMethod.AUTH0, {}
 
-    # Update last active timestamp using CRUD module
-    user = await crud.user.update(
-        db=db,
-        db_obj=user,
-        obj_in={"last_active_at": datetime.utcnow()},
-        current_user=user,  # User updating their own record
-    )
+    # Update last active timestamp directly (can't use CRUD during auth flow)
+    user.last_active_at = datetime.utcnow()
+    user = await crud.user.update_user_no_auth(db, id=user.id, obj_in=user)
 
     user_context = schemas.User.model_validate(user)
     return user_context, AuthMethod.AUTH0, {"auth0_id": auth0_user.id}

backend/airweave/crud/crud_user.py

@@ -51,6 +51,29 @@ async def get_by_email(self, db: AsyncSession, *, email: str) -> Optional[User]:
             raise NotFoundException(f"User with email {email} not found")
         return db_obj
 
+    async def update_user_no_auth(self, db: AsyncSession, *, id: UUID, obj_in: UserUpdate) -> User:
+        """Update a user without authentication.
+
+        Important: this method is not part of the regular CRUD operations.
+        This is a custom method for updating a user, that does not
+        require a current user. Use responsibly.
+
+        Args:
+            db (AsyncSession): The database session.
+            id (UUID): The UUID of the user to update.
+            obj_in (UserUpdate): The updated user object.
+        """
+        user = await self.get(db, id=id)
+        if not user:
+            raise NotFoundException(f"User with ID {id} not found")
+
+        for field, value in obj_in.model_dump(exclude_unset=True).items():
+            setattr(user, field, value)
+
+        await db.commit()
+        await db.refresh(user)
+        return user
+
     async def get(self, db: AsyncSession, id: UUID, current_user: User) -> Optional[User]:
         """Get a single object by ID.