103 lines
4.0 KiB
Python
103 lines
4.0 KiB
Python
"""Phase 1: Benutzer, Sessions, Mail-Token, Einstellungen, Rate Limiting
|
|
|
|
Revision ID: 0001
|
|
Revises:
|
|
Create Date: 2026-08-07
|
|
"""
|
|
from collections.abc import Sequence
|
|
|
|
import sqlalchemy as sa
|
|
from alembic import op
|
|
|
|
revision: str = "0001"
|
|
down_revision: str | None = None
|
|
branch_labels: str | Sequence[str] | None = None
|
|
depends_on: str | Sequence[str] | None = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
"user",
|
|
sa.Column("id", sa.String(36), primary_key=True),
|
|
sa.Column("email", sa.String(255), nullable=False),
|
|
sa.Column("display_name", sa.String(80), nullable=True),
|
|
sa.Column("password_hash", sa.String(255), nullable=False),
|
|
sa.Column("verified_at", sa.DateTime(), nullable=True),
|
|
sa.Column("is_admin", sa.Boolean(), nullable=False, server_default=sa.text("0")),
|
|
sa.Column("is_active", sa.Boolean(), nullable=False, server_default=sa.text("1")),
|
|
sa.Column("created_at", sa.DateTime(), nullable=False,
|
|
server_default=sa.func.now()),
|
|
sa.UniqueConstraint("email", name="uq_user_email"),
|
|
mysql_engine="InnoDB",
|
|
mysql_charset="utf8mb4",
|
|
mysql_collate="utf8mb4_unicode_ci",
|
|
)
|
|
|
|
op.create_table(
|
|
"user_session",
|
|
sa.Column("id", sa.String(36), primary_key=True),
|
|
sa.Column("token_hash", sa.String(64), nullable=False),
|
|
sa.Column("user_id", sa.String(36), nullable=False),
|
|
sa.Column("csrf_token", sa.String(64), nullable=False),
|
|
sa.Column("created_at", sa.DateTime(), nullable=False,
|
|
server_default=sa.func.now()),
|
|
sa.Column("last_seen_at", sa.DateTime(), nullable=False,
|
|
server_default=sa.func.now()),
|
|
sa.Column("expires_at", sa.DateTime(), nullable=False),
|
|
sa.ForeignKeyConstraint(["user_id"], ["user.id"], ondelete="CASCADE"),
|
|
sa.UniqueConstraint("token_hash", name="uq_user_session_token"),
|
|
mysql_engine="InnoDB",
|
|
mysql_charset="utf8mb4",
|
|
mysql_collate="utf8mb4_unicode_ci",
|
|
)
|
|
op.create_index("ix_user_session_expires", "user_session", ["expires_at"])
|
|
|
|
op.create_table(
|
|
"email_token",
|
|
sa.Column("id", sa.String(36), primary_key=True),
|
|
sa.Column("token_hash", sa.String(64), nullable=False),
|
|
sa.Column("user_id", sa.String(36), nullable=False),
|
|
sa.Column("purpose", sa.String(32), nullable=False),
|
|
sa.Column("expires_at", sa.DateTime(), nullable=False),
|
|
sa.Column("used_at", sa.DateTime(), nullable=True),
|
|
sa.Column("created_at", sa.DateTime(), nullable=False,
|
|
server_default=sa.func.now()),
|
|
sa.ForeignKeyConstraint(["user_id"], ["user.id"], ondelete="CASCADE"),
|
|
sa.UniqueConstraint("token_hash", name="uq_email_token_token"),
|
|
mysql_engine="InnoDB",
|
|
mysql_charset="utf8mb4",
|
|
mysql_collate="utf8mb4_unicode_ci",
|
|
)
|
|
op.create_index("ix_email_token_user_purpose", "email_token", ["user_id", "purpose"])
|
|
|
|
op.create_table(
|
|
"setting",
|
|
sa.Column("key", sa.String(64), primary_key=True),
|
|
sa.Column("value", sa.String(255), nullable=False),
|
|
sa.Column("updated_at", sa.DateTime(), nullable=False,
|
|
server_default=sa.func.now()),
|
|
mysql_engine="InnoDB",
|
|
mysql_charset="utf8mb4",
|
|
mysql_collate="utf8mb4_unicode_ci",
|
|
)
|
|
|
|
op.create_table(
|
|
"rate_limit",
|
|
sa.Column("bucket", sa.String(160), primary_key=True),
|
|
sa.Column("window_start", sa.DateTime(), primary_key=True),
|
|
sa.Column("count", sa.Integer(), nullable=False, server_default=sa.text("0")),
|
|
mysql_engine="InnoDB",
|
|
mysql_charset="utf8mb4",
|
|
mysql_collate="utf8mb4_unicode_ci",
|
|
)
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_table("rate_limit")
|
|
op.drop_table("setting")
|
|
op.drop_index("ix_email_token_user_purpose", table_name="email_token")
|
|
op.drop_table("email_token")
|
|
op.drop_index("ix_user_session_expires", table_name="user_session")
|
|
op.drop_table("user_session")
|
|
op.drop_table("user")
|