genichin
e6b6a8715b
Core Implementation (BAT-010):
- Add daemon registry schema and CRUD operations (req-023)
- Implement single-daemon asset assignment constraint (one asset per daemon)
- Add daemon_id field to service_token for daemon identification
- Add daemon.py CLI module for daemon management commands
- Add 20260513_0016_daemon_model.py migration for daemon tables
API Changes:
- GET /v1/assets: include daemon_id in AssetResponse
- POST /v1/assets/{asset_id}/ledger/trades: require daemon token binding
- GET /v1/user_info: include daemon metadata
- Enhanced service-token rotate to preserve daemon bindings
CLI Commands:
- pfhub daemon register --name <name> --runtime-id <runtime-id>
- pfhub daemon list
- pfhub daemon get <daemon-id>
- pfhub daemon revoke <daemon-id>
Requirements (REQ-023, REQ-028):
- REQ-023: Daemon Registry and Service Token Daemon Binding (Interface, Approved)
* AC-1: daemon CRUD operations
* AC-2: service token daemon binding for POST /v1/assets/{asset_id}/ledger/trades
* AC-3: single daemon per asset (exact-one assignment model)
- REQ-028: README.md Daemon Provisioning Runbook update (Documentation, Approved)
Documentation:
- Add dcy-006 Discovery for daemon-id and single-daemon asset assignment
- Update README.md with Daemon Provisioning Runbook section
- Add BAT-010 batch documentation with planning, implementation, verification
- Update rel-006 release document (daemon model implementation)
- Update data-model.md with daemon and daemon_asset_assignment tables
- Update interface-contract.md with daemon registry APIs
- Update runtime-flows.md with daemon lifecycle flows
Breaking Changes:
- REQ-005~009, REQ-011~012 status reverted to Approved due to revised contract
* daemon_id field addition and exact-one asset assignment requirement
* Existing Implemented evidence invalidated by contract revision
* BAT-001/002/008 re-verification required
Testing:
- Add test_daemon_registry.py for daemon CRUD operations
- Add test_daemon_assignment.py for single-asset assignment constraints
- Update test_auth.py, test_cli.py, test_v1.py for daemon support
- Verify daemon token binding in trade endpoint authorization
Impact:
- Database: 2 new tables (daemons, daemon_asset_assignments)
- Migration: 20260513_0016 creates daemon model schema
- CLI: 4 new daemon subcommands
- API: daemon_id propagation through v1 endpoints
- Verification: BAT-001/002/008 re-verification gates next release
104 lines
2.8 KiB
Python
104 lines
2.8 KiB
Python
"""Authentication request and response schemas."""
|
|
|
|
from __future__ import annotations
|
|
|
|
from datetime import datetime
|
|
from typing import Literal
|
|
|
|
from pydantic import BaseModel, Field, field_validator
|
|
|
|
from app.schemas.user import UserResponse
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
username: str = Field(min_length=1)
|
|
password: str = Field(min_length=1)
|
|
|
|
@field_validator("username")
|
|
@classmethod
|
|
def normalize_username(cls, value: str) -> str:
|
|
normalized = value.strip()
|
|
if not normalized:
|
|
raise ValueError("username은 비어 있을 수 없습니다")
|
|
return normalized
|
|
|
|
|
|
class TokenResponse(BaseModel):
|
|
access_token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
expires_at: datetime | None = None
|
|
permission: Literal["read", "trade-write", "admin"]
|
|
user: UserResponse
|
|
|
|
|
|
class CreateClientTokenRequest(BaseModel):
|
|
name: str = Field(min_length=1)
|
|
permission: Literal["read", "trade-write", "admin"] | None = None
|
|
expires_in_days: int | None = Field(default=None, ge=1, le=3650)
|
|
|
|
@field_validator("name")
|
|
@classmethod
|
|
def normalize_name(cls, value: str) -> str:
|
|
normalized = value.strip()
|
|
if not normalized:
|
|
raise ValueError("name은 비어 있을 수 없습니다")
|
|
return normalized
|
|
|
|
|
|
class AuthTokenResponse(BaseModel):
|
|
id: str
|
|
user_id: str
|
|
name: str
|
|
token_prefix: str
|
|
permission: Literal["read", "trade-write", "admin"]
|
|
token_type: Literal["session", "client", "service"]
|
|
expires_at: datetime | None = None
|
|
last_used_at: datetime | None = None
|
|
revoked_at: datetime | None = None
|
|
created_at: datetime | None = None
|
|
|
|
|
|
class IssuedClientTokenResponse(BaseModel):
|
|
token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
auth_token: AuthTokenResponse
|
|
|
|
|
|
class IssuedServiceToken(BaseModel):
|
|
token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
auth_token: AuthTokenResponse
|
|
|
|
|
|
class IssueServiceTokenRequest(BaseModel):
|
|
name: str = Field(min_length=1)
|
|
username: str = Field(min_length=1)
|
|
permission: Literal["read", "trade-write", "admin"] = "read"
|
|
expires_in_days: int | None = Field(default=None, ge=1, le=3650)
|
|
no_expiry: bool = False
|
|
daemon_id: str | None = None
|
|
|
|
|
|
class IssueServiceTokenApiResponse(BaseModel):
|
|
token: str
|
|
token_type: Literal["bearer"] = "bearer"
|
|
runtime_id: str | None = None
|
|
daemon_id: str | None = None
|
|
auth_token: AuthTokenResponse
|
|
|
|
|
|
class ServiceTokenIssueCliResponse(BaseModel):
|
|
token_id: str
|
|
name: str
|
|
expires_at: datetime | None = None
|
|
revoked: bool
|
|
runtime_id: str | None = None
|
|
daemon_id: str | None = None
|
|
token: str | None = None
|
|
|
|
|
|
class ServiceTokenRevokeCliResponse(BaseModel):
|
|
token_id: str
|
|
name: str
|
|
revoked: bool
|
|
revoked_at: datetime | None = None |