cc60ba17ea
Complete v0.5.0 implementation: Database (@db-engineer): - 3 migrations: users, api_keys, report_schedules tables - Foreign keys, indexes, constraints, enums Backend (@backend-dev): - JWT authentication service with bcrypt (cost=12) - Auth endpoints: /register, /login, /refresh, /me - API Keys service with hash storage and prefix validation - API Keys endpoints: CRUD + rotate - Security module with JWT HS256 Frontend (@frontend-dev): - Login/Register pages with validation - AuthContext with localStorage persistence - Protected routes implementation - API Keys management UI (create, revoke, rotate) - Header with user dropdown DevOps (@devops-engineer): - .env.example and .env.production.example - docker-compose.scheduler.yml - scripts/setup-secrets.sh - INFRASTRUCTURE_SETUP.md QA (@qa-engineer): - 85 E2E tests: auth.spec.ts, apikeys.spec.ts, scenarios.spec.ts, regression-v050.spec.ts - auth-helpers.ts with 20+ utility functions - Test plans and documentation Architecture (@spec-architect): - SECURITY.md with best practices - SECURITY-CHECKLIST.md pre-deployment - Updated architecture.md with auth flows - Updated README.md with v0.5.0 features Documentation: - Updated todo.md with v0.5.0 status - Added docs/README.md index - Complete setup instructions Dependencies added: - bcrypt, python-jose, passlib, email-validator Tested: JWT auth flow, API keys CRUD, protected routes, 85 E2E tests ready Closes: v0.5.0 milestone
70 lines
2.1 KiB
Python
70 lines
2.1 KiB
Python
"""create api keys table
|
|
|
|
Revision ID: 6512af98fb22
|
|
Revises: 60582e23992d
|
|
Create Date: 2026-04-07 14:01:00.000000
|
|
|
|
"""
|
|
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
from sqlalchemy.dialects import postgresql
|
|
|
|
|
|
# revision identifiers, used by Alembic.
|
|
revision: str = "6512af98fb22"
|
|
down_revision: Union[str, Sequence[str], None] = "60582e23992d"
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
"""Upgrade schema."""
|
|
# Create api_keys table
|
|
op.create_table(
|
|
"api_keys",
|
|
sa.Column(
|
|
"id",
|
|
postgresql.UUID(as_uuid=True),
|
|
primary_key=True,
|
|
server_default=sa.text("uuid_generate_v4()"),
|
|
),
|
|
sa.Column(
|
|
"user_id",
|
|
postgresql.UUID(as_uuid=True),
|
|
sa.ForeignKey("users.id", ondelete="CASCADE"),
|
|
nullable=False,
|
|
),
|
|
sa.Column("key_hash", sa.String(255), nullable=False, unique=True),
|
|
sa.Column("key_prefix", sa.String(8), nullable=False),
|
|
sa.Column("name", sa.String(255), nullable=True),
|
|
sa.Column("scopes", postgresql.JSONB(), server_default="[]"),
|
|
sa.Column("last_used_at", sa.TIMESTAMP(timezone=True), nullable=True),
|
|
sa.Column("expires_at", sa.TIMESTAMP(timezone=True), nullable=True),
|
|
sa.Column(
|
|
"is_active", sa.Boolean(), nullable=False, server_default=sa.text("true")
|
|
),
|
|
sa.Column(
|
|
"created_at",
|
|
sa.TIMESTAMP(timezone=True),
|
|
server_default=sa.text("NOW()"),
|
|
nullable=False,
|
|
),
|
|
)
|
|
|
|
# Add indexes
|
|
op.create_index("idx_api_keys_key_hash", "api_keys", ["key_hash"], unique=True)
|
|
op.create_index("idx_api_keys_user_id", "api_keys", ["user_id"])
|
|
|
|
|
|
def downgrade() -> None:
|
|
"""Downgrade schema."""
|
|
# Drop indexes
|
|
op.drop_index("idx_api_keys_user_id", table_name="api_keys")
|
|
op.drop_index("idx_api_keys_key_hash", table_name="api_keys")
|
|
|
|
# Drop table
|
|
op.drop_table("api_keys")
|