53 lines
1.9 KiB
Python
53 lines
1.9 KiB
Python
"""Add users, revocable opaque sessions and shared authentication budgets."""
|
|
|
|
import sqlalchemy as sa
|
|
from alembic import op
|
|
|
|
revision = "0004_auth_sessions"
|
|
down_revision = "0003_retrieval_runs"
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade():
|
|
op.create_table(
|
|
"users",
|
|
sa.Column("id", sa.Integer(), primary_key=True),
|
|
sa.Column("username", sa.String(32), nullable=False, unique=True),
|
|
sa.Column("password_hash", sa.String(255), nullable=False),
|
|
sa.Column("nickname", sa.String(80)),
|
|
sa.Column("email", sa.String(254)),
|
|
sa.Column("role", sa.String(10), nullable=False),
|
|
sa.Column("credential_version", sa.Integer(), nullable=False),
|
|
sa.Column(
|
|
"created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False
|
|
),
|
|
sa.CheckConstraint("role IN ('user', 'admin')", name="ck_users_role"),
|
|
)
|
|
op.create_table(
|
|
"auth_sessions",
|
|
sa.Column("token_hash", sa.String(64), primary_key=True),
|
|
sa.Column(
|
|
"user_id", sa.Integer(), sa.ForeignKey("users.id", ondelete="CASCADE"), nullable=False
|
|
),
|
|
sa.Column("credential_version", sa.Integer(), nullable=False),
|
|
sa.Column(
|
|
"created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False
|
|
),
|
|
sa.Column("expires_at", sa.DateTime(timezone=True), nullable=False),
|
|
)
|
|
op.create_index("ix_auth_sessions_user_id", "auth_sessions", ["user_id"])
|
|
op.create_index("ix_auth_sessions_expires_at", "auth_sessions", ["expires_at"])
|
|
op.create_table(
|
|
"auth_rate_limits",
|
|
sa.Column("key", sa.String(64), primary_key=True),
|
|
sa.Column("window_start", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("attempts", sa.Integer(), nullable=False),
|
|
)
|
|
|
|
|
|
def downgrade():
|
|
op.drop_table("auth_rate_limits")
|
|
op.drop_table("auth_sessions")
|
|
op.drop_table("users")
|