mirror of
https://github.com/hansjone/netx.git
synced 2026-10-09 04:20:45 +08:00
oliver
20c2fcd496
Issue short-lived access JWTs backed by AuthSession rows, HttpOnly cookies with refresh rotation, idle timeout, session management UI, WebCRT ownership caps, and optional Redis login rate limits; new logins revoke other sessions by default. Co-authored-by: Cursor <cursoragent@cursor.com>
50 lines
1.7 KiB
Python
50 lines
1.7 KiB
Python
"""Pydantic schemas for auth / users / audit / API tokens."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
username: str = Field(min_length=1, max_length=64)
|
|
password: str = Field(min_length=1, max_length=256)
|
|
|
|
|
|
class ChangePasswordRequest(BaseModel):
|
|
old_password: str = Field(min_length=1, max_length=256)
|
|
new_password: str = Field(min_length=8, max_length=256)
|
|
|
|
|
|
class RefreshRequest(BaseModel):
|
|
# Optional when refresh token is sent via HttpOnly cookie.
|
|
refresh_token: str = Field(default="", max_length=512)
|
|
|
|
|
|
class UserCreateRequest(BaseModel):
|
|
username: str = Field(min_length=2, max_length=64)
|
|
password: str = Field(min_length=8, max_length=256)
|
|
role: str = Field(default="user")
|
|
scopes: list[str] | None = None
|
|
|
|
|
|
class UserUpdateRequest(BaseModel):
|
|
is_active: bool | None = None
|
|
role: str | None = None
|
|
password: str | None = Field(default=None, min_length=8, max_length=256)
|
|
scopes: list[str] | None = None
|
|
|
|
|
|
class ApiTokenCreateRequest(BaseModel):
|
|
name: str = Field(default="default", max_length=128)
|
|
# Days until expiry; 0 / null = never expires.
|
|
expires_in_days: int | None = Field(default=90, ge=0, le=3650)
|
|
# Admin may create a token for another user; others ignored / forced to self.
|
|
user_id: str | None = None
|
|
# Explicit capability list; empty inherits owner scopes (legacy). Prefer non-empty.
|
|
scopes: list[str] | None = None
|
|
|
|
|
|
class ApiTokenUpdateRequest(BaseModel):
|
|
name: str | None = Field(default=None, max_length=128)
|
|
# Replace token scopes (capped to owner). Empty list clears to inherit owner scopes.
|
|
scopes: list[str] | None = None
|