53 lines
2 KiB
Python
53 lines
2 KiB
Python
"""Access-management domain models (SQLModel tables)."""
|
|
|
|
from datetime import datetime
|
|
from uuid import UUID, uuid4
|
|
|
|
from sqlmodel import Field, SQLModel
|
|
|
|
from .base import ts_column, utcnow
|
|
|
|
|
|
class User(SQLModel, table=True):
|
|
"""A person with API access. Role is member or admin."""
|
|
|
|
__tablename__ = "users"
|
|
|
|
id: UUID = Field(default_factory=uuid4, primary_key=True)
|
|
email: str = Field(index=True, unique=True, max_length=320)
|
|
name: str = Field(default="", max_length=200)
|
|
# member | admin
|
|
role: str = Field(default="member", max_length=20)
|
|
tenant_id: str = Field(default="default", max_length=200)
|
|
created_at: datetime = Field(default_factory=utcnow, sa_column=ts_column())
|
|
|
|
|
|
class AccessRequest(SQLModel, table=True):
|
|
"""A public request for access; an admin approves or rejects it."""
|
|
|
|
__tablename__ = "access_requests"
|
|
|
|
id: UUID = Field(default_factory=uuid4, primary_key=True)
|
|
name: str = Field(max_length=200)
|
|
email: str = Field(index=True, max_length=320)
|
|
reason: str = Field(default="", max_length=2000)
|
|
# pending | approved | rejected
|
|
status: str = Field(default="pending", index=True, max_length=20)
|
|
created_at: datetime = Field(default_factory=utcnow, sa_column=ts_column())
|
|
decided_at: datetime | None = Field(default=None, sa_column=ts_column())
|
|
decided_by: str | None = Field(default=None, max_length=320)
|
|
|
|
|
|
class MagicLinkToken(SQLModel, table=True):
|
|
"""A single-use 15-minute login token. Only the sha256 is stored."""
|
|
|
|
__tablename__ = "magic_link_tokens"
|
|
|
|
id: UUID = Field(default_factory=uuid4, primary_key=True)
|
|
user_id: UUID = Field(foreign_key="users.id", index=True)
|
|
token_hash: str = Field(index=True, unique=True, max_length=64)
|
|
expires_at: datetime = Field(sa_column=ts_column())
|
|
# Set before the session JWT is minted, so a reused token can never
|
|
# mint a second session.
|
|
used_at: datetime | None = Field(default=None, sa_column=ts_column())
|
|
created_at: datetime = Field(default_factory=utcnow, sa_column=ts_column())
|