genichinandClaude Sonnet 4.6
c815ce39b6
BAT-006 (REQ-016/017/018): - client token 발급 경로 제거 (issue_client_token, POST /auth/tokens, 관련 스키마/테스트) - service-token rotate unique index revoked_at IS NULL 조건 추가 (Alembic CONCURRENTLY 마이그레이션) - POST /auth/service-tokens body daemon_id forward 누락 보정 (1-line fix) BAT-007 (REQ-022/023): - daemon deactivate 시 바인딩 service token 자동 revoke (CLI --force 옵션 + revoke_tokens_by_daemon_id) - NULL daemon_id legacy token 진단 CLI (migrate-null-daemon --dry-run) 거버넌스 문서: dcy-003/004 Discovery, REQ-016~023/025~032 신규, BAT-006/007 전체 산출물 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
95 lines
2.5 KiB
Python
95 lines
2.5 KiB
Python
"""Authentication request and response schemas."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from datetime import datetime
|
|
from typing import Literal
|
|
|
|
from pydantic import BaseModel, Field, field_validator
|
|
|
|
from app.schemas.user import UserResponse
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
username: str = Field(min_length=1)
|
|
password: str = Field(min_length=1)
|
|
|
|
@field_validator("username")
|
|
@classmethod
|
|
def normalize_username(cls, value: str) -> str:
|
|
normalized = value.strip()
|
|
if not normalized:
|
|
raise ValueError("username은 비어 있을 수 없습니다")
|
|
return normalized
|
|
|
|
|
|
class TokenResponse(BaseModel):
|
|
access_token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
expires_at: datetime | None = None
|
|
permission: Literal["read", "trade-write", "admin"]
|
|
user: UserResponse
|
|
|
|
|
|
class AuthTokenResponse(BaseModel):
|
|
id: str
|
|
user_id: str
|
|
name: str
|
|
token_prefix: str
|
|
permission: Literal["read", "trade-write", "admin"]
|
|
token_type: Literal["session", "client", "service"]
|
|
daemon_id: str | None = None
|
|
expires_at: datetime | None = None
|
|
last_used_at: datetime | None = None
|
|
revoked_at: datetime | None = None
|
|
created_at: datetime | None = None
|
|
|
|
|
|
class IssuedServiceToken(BaseModel):
|
|
token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
auth_token: AuthTokenResponse
|
|
|
|
|
|
class IssueServiceTokenRequest(BaseModel):
|
|
name: str = Field(min_length=1)
|
|
username: str = Field(min_length=1)
|
|
permission: Literal["read", "trade-write", "admin"] = "read"
|
|
expires_in_days: int | None = Field(default=None, ge=1, le=3650)
|
|
no_expiry: bool = False
|
|
daemon_id: str | None = None
|
|
|
|
|
|
class IssueServiceTokenApiResponse(BaseModel):
|
|
token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
runtime_id: str | None = None
|
|
daemon_id: str | None = None
|
|
auth_token: AuthTokenResponse
|
|
|
|
|
|
class ServiceTokenIssueCliResponse(BaseModel):
|
|
token_id: str
|
|
name: str
|
|
expires_at: datetime | None = None
|
|
revoked: bool
|
|
runtime_id: str | None = None
|
|
daemon_id: str | None = None
|
|
token: str | None = None
|
|
|
|
|
|
class ServiceTokenRebindCliResponse(BaseModel):
|
|
token_id: str
|
|
name: str
|
|
expires_at: datetime | None = None
|
|
revoked: bool
|
|
runtime_id: str | None = None
|
|
daemon_id: str | None = None
|
|
previous_daemon_id: str | None = None
|
|
|
|
|
|
class ServiceTokenRevokeCliResponse(BaseModel):
|
|
token_id: str
|
|
name: str
|
|
revoked: bool
|
|
revoked_at: datetime | None = None |