Files
DECNET/decnet/web/router/ttp/api_get_by_identity.py
anti f2b3393669 chore: relicense to AGPL-3.0-or-later and add SPDX headers
Replaces LICENSE (GPLv3 -> AGPLv3) and prepends
`SPDX-License-Identifier: AGPL-3.0-or-later` to every source file
across decnet/, decnet_web/, tests/, scripts/, and tools/.

Rationale: closes the GPLv3 ASP loophole so any party operating a
modified DECNET as a network service must offer their modified
source. Personal copyright (Samuel Paschuan) + inbound=outbound
contributions make a future unilateral relicense infeasible.

- LICENSE: full AGPL-3.0 text (gnu.org/licenses/agpl-3.0.txt)
- COPYRIGHT: project copyright notice
- tools/add_spdx_headers.py: idempotent header injector
  (shebang- and PEP 263-aware)

Touches 1565 source files (.py, .ts, .tsx, .js, .jsx, .css, .sh).
No behavior change; comments only.
2026-05-22 21:04:16 -04:00

37 lines
1.1 KiB
Python

# SPDX-License-Identifier: AGPL-3.0-or-later
"""GET /api/v1/ttp/by-identity/{identity_uuid} — Identity-scoped TTP rollup.
Primary endpoint for the IdentityDetail "TTPs Observed" section. See
TTP_TAGGING.md §"UI surface". Empty at contract phase (E.1.9).
"""
from __future__ import annotations
from typing import Any
from fastapi import APIRouter, Depends
from decnet.telemetry import traced as _traced
from decnet.web.db.models import IdentityTechniqueRow
from decnet.web.dependencies import repo, require_viewer
router = APIRouter()
@router.get(
"/ttp/by-identity/{identity_uuid}",
tags=["TTP Tagging"],
response_model=list[IdentityTechniqueRow],
responses={
401: {"description": "Could not validate credentials"},
403: {"description": "Insufficient permissions"},
404: {"description": "Identity not found"},
},
)
@_traced("api.ttp.by_identity")
async def api_ttp_by_identity(
identity_uuid: str,
user: dict[str, Any] = Depends(require_viewer),
) -> list[IdentityTechniqueRow]:
"""Per-Identity TTP heatmap rows."""
return await repo.list_techniques_by_identity(identity_uuid)