Fix setup.py to read dependencies from requirements.in

[Copilot]

The setup.py was reading dependencies from the pip-compile generated requirements.txt, which includes comment lines (e.g., # via pydantic). These comments were incorrectly being parsed as dependencies.

Changes

• Read from requirements.in instead of requirements.txt for clean dependency declarations
• Add filtering to skip empty lines and comments
• Include requirements.in in data_files for source distribution

# Before: parsed all lines including comments
with open(path.join(here, "requirements.txt"), encoding="utf-8") as f:
    all_reqs = f.read().split("\n")
install_requires = [x.strip() for x in all_reqs if "git+" not in x]

# After: reads clean source file with proper filtering
with open(path.join(here, "requirements.in"), encoding="utf-8") as f:
    all_reqs = f.read().split("\n")
install_requires = [x.strip() for x in all_reqs if x.strip() and not x.startswith("#") and "git+" not in x]

Package now correctly declares: fastapi, pycasbin >= 2.0.0, pydantic >= 2.11.7, < 3.0.0

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Casbin/PyCasbin Dependency Issue</issue_title>
<issue_description>fastapi-casbin-auth==1.20.0 seems to depend on casbin==1.43.0 instead of pycasbin.

From what I understood in Casbin vs. PyCasbin thread, it should depend on pycasbin.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Casbin/PyCasbin Dependency Issue #5

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[Copilot]

Pull request overview

This PR fixes a critical bug where setup.py was incorrectly parsing dependencies from the pip-compile generated requirements.txt file, which contained comment lines that were being treated as actual dependencies. The fix switches to reading from the clean requirements.in source file and adds proper filtering logic.

Key Changes

• Changed dependency source from requirements.txt to requirements.in for clean, pip-compile-free declarations
• Added filtering logic to skip empty lines and comment lines (lines starting with #)
• Included requirements.in in data_files for source distribution alongside requirements.txt

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review for a chance to win a $100 gift card. Take the survey.

[Copilot]

The comment filtering check not x.startswith("#") is applied to the unstripped line x, while the empty line check uses x.strip(). This means a line with leading whitespace followed by # (e.g., " # comment") would not be filtered out and could be included in install_requires.

Apply the startswith("#") check to the stripped version:

install_requires = [x.strip() for x in all_reqs if x.strip() and not x.strip().startswith("#") and "git+" not in x]

Or more efficiently, strip once:

stripped_reqs = [x.strip() for x in all_reqs]
install_requires = [x for x in stripped_reqs if x and not x.startswith("#") and "git+" not in x]

Suggested change

	install_requires = [x.strip() for x in all_reqs if x.strip() and not x.startswith("#") and "git+" not in x]
	stripped_reqs = [x.strip() for x in all_reqs]
	install_requires = [x for x in stripped_reqs if x and not x.startswith("#") and "git+" not in x]