Erste Produktivversion

backend/alembic/versions/0012_user_admin.py

@@ -0,0 +1,59 @@
+"""Phase 10: Benutzerverwaltung, Adressänderung, automatische Bereinigung
+
+Revision ID: 0012
+Revises: 0011
+Create Date: 2026-08-08
+"""
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+from alembic import op
+
+revision: str = "0012"
+down_revision: str | None = "0011"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    op.add_column("user", sa.Column("last_seen_at", sa.DateTime(), nullable=True))
+    op.add_column("user", sa.Column("deactivated_at", sa.DateTime(), nullable=True))
+
+    # Bestandskonten nicht sofort der automatischen Deaktivierung
+    # aussetzen: Ohne Startwert waere last_seen_at NULL und damit
+    # scheinbar "nie benutzt". Das Erstellungsdatum ist die
+    # konservativere Annahme.
+    op.execute("UPDATE `user` SET last_seen_at = created_at WHERE last_seen_at IS NULL")
+
+    op.create_table(
+        "email_change",
+        sa.Column("id", sa.String(36), primary_key=True),
+        sa.Column("user_id", sa.String(36), nullable=False),
+        sa.Column("old_email", sa.String(255), nullable=False),
+        sa.Column("new_email", sa.String(255), nullable=False),
+        sa.Column("token_new_hash", sa.String(64), nullable=False),
+        sa.Column("token_old_hash", sa.String(64), nullable=True),
+        sa.Column("requires_old", sa.Boolean(), nullable=False, server_default=sa.text("0")),
+        sa.Column("confirmed_new_at", sa.DateTime(), nullable=True),
+        sa.Column("confirmed_old_at", sa.DateTime(), nullable=True),
+        sa.Column("applied_at", sa.DateTime(), nullable=True),
+        sa.Column("cancelled_at", sa.DateTime(), nullable=True),
+        sa.Column("requested_by", sa.String(36), nullable=True),
+        sa.Column("created_at", sa.DateTime(), nullable=False, server_default=sa.func.now()),
+        sa.Column("expires_at", sa.DateTime(), nullable=False),
+        sa.ForeignKeyConstraint(["user_id"], ["user.id"], ondelete="CASCADE"),
+        sa.ForeignKeyConstraint(["requested_by"], ["user.id"], ondelete="SET NULL"),
+        sa.UniqueConstraint("token_new_hash", name="uq_email_change_token_new"),
+        sa.UniqueConstraint("token_old_hash", name="uq_email_change_token_old"),
+        mysql_engine="InnoDB",
+        mysql_charset="utf8mb4",
+        mysql_collate="utf8mb4_unicode_ci",
+    )
+    op.create_index("ix_email_change_user", "email_change", ["user_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_email_change_user", table_name="email_change")
+    op.drop_table("email_change")
+    op.drop_column("user", "deactivated_at")
+    op.drop_column("user", "last_seen_at")