From 295827338e398fc8e796bcb64774aabe3dacfc17 Mon Sep 17 00:00:00 2001
From: HassanRady <hassan.khaled.rady@gmail.com>
Date: Thu, 16 Jul 2026 12:20:32 +0300
Subject: [PATCH] feat: add pagination limits to user and item list endpoints

---
 backend/app/api/routes/items.py | 7 +++++--
 backend/app/api/routes/users.py | 6 ++++--
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/backend/app/api/routes/items.py b/backend/app/api/routes/items.py
index f0eb30e4ce..a3c744ec1b 100644
--- a/backend/app/api/routes/items.py
+++ b/backend/app/api/routes/items.py
@@ -1,7 +1,7 @@
 import uuid
 from typing import Any
 
-from fastapi import APIRouter, HTTPException
+from fastapi import APIRouter, HTTPException, Query
 from sqlmodel import col, func, select
 
 from app.api.deps import CurrentUser, SessionDep
@@ -12,7 +12,10 @@
 
 @router.get("/", response_model=ItemsPublic)
 def read_items(
-    session: SessionDep, current_user: CurrentUser, skip: int = 0, limit: int = 100
+    session: SessionDep,
+    current_user: CurrentUser,
+    skip: int = 0,
+    limit: int = Query(default=100, le=100),
 ) -> Any:
     """
     Retrieve items.
diff --git a/backend/app/api/routes/users.py b/backend/app/api/routes/users.py
index 1748f58484..c61de40b78 100644
--- a/backend/app/api/routes/users.py
+++ b/backend/app/api/routes/users.py
@@ -1,7 +1,7 @@
 import uuid
 from typing import Any
 
-from fastapi import APIRouter, Depends, HTTPException
+from fastapi import APIRouter, Depends, HTTPException, Query
 from sqlmodel import col, delete, func, select
 
 from app import crud
@@ -34,7 +34,9 @@
     dependencies=[Depends(get_current_active_superuser)],
     response_model=UsersPublic,
 )
-def read_users(session: SessionDep, skip: int = 0, limit: int = 100) -> Any:
+def read_users(
+    session: SessionDep, skip: int = 0, limit: int = Query(default=100, le=100)
+) -> Any:
     """
     Retrieve users.
     """