chore(__future__): Drop the AnonymousUser asserts and the strict log assertions

[khvn26]

• I have read the Contributing Guide.
• I have added information to docs/ if required so people know about the feature.
• I have filled in the "Changes" section below.
• I have filled in the "How did you test this code" section below.

Changes

Cleanup only — no behaviour changes.

In this PR, we remove the not isinstance(request.user, AnonymousUser) littered across the codebase in favour of a centralised AuthenticatedRequest type, and migrate most of the logging assertions to log.has to avoid having to call log.events.clear() in the functional tests' fixtures.

Stacked on #8307.

How did you test this code?

Green CI is sufficient.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs	Ignored	Preview	Aug 16, 2026 3:38pm
flagsmith-frontend-preview	Ignored	Preview	Aug 16, 2026 3:38pm
flagsmith-frontend-staging	Ignored	Preview	Aug 16, 2026 3:38pm

[coderabbitai]

📝 Walkthrough

Walkthrough

The change adds AuthenticatedRequest with a narrowed authenticated user type. Future flag and segment-override views use this type and no longer require anonymous-user assertions. Integration tests now match relevant structured-log fields instead of comparing complete event lists. Unneeded log resets were removed, and unauthorised deletion checks verify that no matching update event exists. The events catalogue source line was corrected.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Merge Risk: 🔵 Low · up to d54e5

Production behavior is unchanged, but one integration test can pass without verifying the event generated by the tested update request because it may match an earlier setup event. The PR is mergeable with explicit owner follow-up to restore the event boundary or assert the newly generated event.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-api-test:pr-8308	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-e2e:pr-8308	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-frontend:pr-8308	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-api:pr-8308	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-8308	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-8308	Finished ✅	Results ✅

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.78%. Comparing base (b3b2b31) to head (d54e52f).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8308      +/-   ##
==========================================
- Coverage   98.78%   98.78%   -0.01%     
==========================================
  Files        1604     1605       +1     
  Lines       64426    64417       -9     
==========================================
- Hits        63642    63633       -9     
  Misses        784      784              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #19451 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 4 passed

Details

 4 tests across 4 suites
 1 minute, 15 seconds
 d54e52f
 🔄 Run: #19451 (attempt 1)

🗂️ Previous results

✅ private-cloud · depot-ubuntu-latest-16 — run #19451 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 3 passed

Details

 3 tests across 3 suites
 57 seconds
 d54e52f
 🔄 Run: #19451 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #19451 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 41 seconds
 d54e52f
 🔄 Run: #19451 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #19451 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 40.2 seconds
 d54e52f
 🔄 Run: #19451 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #19448 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 55.6 seconds
 649a5ce
 🔄 Run: #19448 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #19448 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 3 passed

Details

 3 tests across 3 suites
 37.8 seconds
 649a5ce
 🔄 Run: #19448 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #19444 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 2 passed

Details

 2 tests across 2 suites
 36.6 seconds
 649a5ce
 🔄 Run: #19444 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #19444 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 3 passed

Details

 3 tests across 3 suites
 40.3 seconds
 649a5ce
 🔄 Run: #19444 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #19444 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 46.5 seconds
 649a5ce
 🔄 Run: #19444 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #19448 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 40.2 seconds
 649a5ce
 🔄 Run: #19448 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #19448 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 41.3 seconds
 649a5ce
 🔄 Run: #19448 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #19444 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 34.4 seconds
 649a5ce
 🔄 Run: #19444 (attempt 1)

[github-actions]

Visual Regression

19 screenshots compared. See report for details.
View full report

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

api/tests/integration/features/future/test_flag_endpoint.py (1)

1238-1238: 🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

Retain a log boundary for this test.

The setup PATCH and the tested PUT both emit flag.updated with the same identity fields and empty segment_overrides__*__segment__ids values. After the reset at Line 1238 was removed, the assertion in Lines 1263-1273 can match the setup event. The test can pass without verifying the PUT event.

Restore log.events.clear() after the setup response, or assert a newly captured event after the PUT.

Suggested fix

     assert setup_response.status_code == 200
+    log.events.clear()

     # When

Also applies to: 1263-1273

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e9f70ce7-8676-43ae-b485-2cd09b6961a5

📥 Commits

Reviewing files that changed from the base of the PR and between b3b2b31 and d54e52f.

📒 Files selected for processing (4)

• api/core/types.py
• api/features/future/views.py
• api/tests/integration/features/future/test_flag_endpoint.py
• docs/docs/deployment-self-hosting/observability/_events-catalogue.md

Included review availability: Your plan includes up to 8 reviews per rolling hour; 7 remain after this review.