65 lines
3.0 KiB
Python
65 lines
3.0 KiB
Python
"""add users and database-backed auth sessions
|
|
|
|
Revision ID: 20260814_01
|
|
Revises:
|
|
Create Date: 2026-08-14 18:00:00
|
|
"""
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
|
|
revision: str = "20260814_01"
|
|
down_revision: Union[str, Sequence[str], None] = None
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
"users",
|
|
sa.Column("id", sa.BigInteger(), autoincrement=True, nullable=False),
|
|
sa.Column("username", sa.String(length=64), nullable=False),
|
|
sa.Column("password_hash", sa.String(length=255), nullable=False),
|
|
sa.Column("password_algo", sa.String(length=16), nullable=False, server_default="argon2id"),
|
|
sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.true()),
|
|
sa.Column("failed_login_count", sa.Integer(), nullable=False, server_default="0"),
|
|
sa.Column("locked_until", sa.DateTime(timezone=True), nullable=True),
|
|
sa.Column("password_changed_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("last_login_at", sa.DateTime(timezone=True), nullable=True),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
sa.UniqueConstraint("username", name="uq_users_username"),
|
|
)
|
|
op.create_index("ix_users_is_active", "users", ["is_active"])
|
|
|
|
op.create_table(
|
|
"auth_sessions",
|
|
sa.Column("id", sa.BigInteger(), autoincrement=True, nullable=False),
|
|
sa.Column("user_id", sa.BigInteger(), nullable=False),
|
|
sa.Column("token_hash", sa.String(length=64), nullable=False),
|
|
sa.Column("created_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("expires_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("last_seen_at", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("revoked_at", sa.DateTime(timezone=True), nullable=True),
|
|
sa.Column("ip_address", sa.String(length=45), nullable=True),
|
|
sa.Column("user_agent", sa.String(length=512), nullable=True),
|
|
sa.ForeignKeyConstraint(["user_id"], ["users.id"], ondelete="CASCADE"),
|
|
sa.PrimaryKeyConstraint("id"),
|
|
sa.UniqueConstraint("token_hash", name="uq_auth_sessions_token_hash"),
|
|
)
|
|
op.create_index("ix_auth_sessions_user_id", "auth_sessions", ["user_id"])
|
|
op.create_index("ix_auth_sessions_expires_at", "auth_sessions", ["expires_at"])
|
|
op.create_index("ix_auth_sessions_revoked_at", "auth_sessions", ["revoked_at"])
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_index("ix_auth_sessions_revoked_at", table_name="auth_sessions")
|
|
op.drop_index("ix_auth_sessions_expires_at", table_name="auth_sessions")
|
|
op.drop_index("ix_auth_sessions_user_id", table_name="auth_sessions")
|
|
op.drop_table("auth_sessions")
|
|
op.drop_index("ix_users_is_active", table_name="users")
|
|
op.drop_table("users")
|