Pawla Abdul
cf16415720
Better-Auth creates users via raw SQL INSERT (not through SQLAlchemy), so it bypasses ORM defaults and causes HTTP 500 on sign-up/sign-in. Adds PostgreSQL server_default so INSERT without email_inbound_token auto-generates a URL-safe token matching Python secrets.token_urlsafe(16). Co-Authored-By: Paperclip <noreply@paperclip.ing>
64 lines
2.7 KiB
Python
64 lines
2.7 KiB
Python
"""User and UserStoreAccount models."""
|
|
|
|
import secrets
|
|
import uuid
|
|
from datetime import datetime
|
|
from typing import TYPE_CHECKING
|
|
|
|
from sqlalchemy import JSON, Boolean, DateTime, ForeignKey, String, Text, UniqueConstraint, text
|
|
from sqlalchemy.orm import Mapped, mapped_column, relationship
|
|
|
|
from cartsnitch_common.constants import AccountStatus
|
|
from cartsnitch_common.models.base import Base, TimestampMixin, UUIDPrimaryKeyMixin
|
|
|
|
if TYPE_CHECKING:
|
|
from cartsnitch_common.models.purchase import Purchase
|
|
from cartsnitch_common.models.store import Store
|
|
|
|
|
|
class User(UUIDPrimaryKeyMixin, TimestampMixin, Base):
|
|
"""Application user."""
|
|
|
|
__tablename__ = "users"
|
|
|
|
email: Mapped[str] = mapped_column(String(255), nullable=False, unique=True)
|
|
email_inbound_token: Mapped[str] = mapped_column(
|
|
String(22),
|
|
nullable=False,
|
|
unique=True,
|
|
default=lambda: secrets.token_urlsafe(16),
|
|
server_default=text(
|
|
"replace(replace(trim(trailing '=' from encode(gen_random_bytes(16), 'base64')), '+', '-'), '/', '_')"
|
|
),
|
|
)
|
|
hashed_password: Mapped[str | None] = mapped_column(String(255), nullable=True)
|
|
display_name: Mapped[str | None] = mapped_column(String(100))
|
|
email_verified: Mapped[bool] = mapped_column(Boolean, nullable=False, server_default="false")
|
|
image: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
|
|
# Relationships
|
|
store_accounts: Mapped[list["UserStoreAccount"]] = relationship(back_populates="user")
|
|
purchases: Mapped[list["Purchase"]] = relationship(back_populates="user")
|
|
|
|
|
|
class UserStoreAccount(UUIDPrimaryKeyMixin, TimestampMixin, Base):
|
|
"""Link between a user and their retailer account credentials."""
|
|
|
|
__tablename__ = "user_store_accounts"
|
|
__table_args__ = (UniqueConstraint("user_id", "store_id", name="uq_user_store_account"),)
|
|
|
|
user_id: Mapped[uuid.UUID] = mapped_column(ForeignKey("users.id"), nullable=False)
|
|
store_id: Mapped[uuid.UUID] = mapped_column(ForeignKey("stores.id"), nullable=False)
|
|
# WARNING: Contains retailer session cookies/tokens. Encryption-at-rest
|
|
# required before production deployment (e.g., pgcrypto or app-level encryption).
|
|
session_data: Mapped[dict | None] = mapped_column(JSON)
|
|
session_expires_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
|
|
last_sync_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
|
|
status: Mapped[AccountStatus] = mapped_column(
|
|
String(20), nullable=False, default=AccountStatus.ACTIVE
|
|
)
|
|
|
|
# Relationships
|
|
user: Mapped["User"] = relationship(back_populates="store_accounts")
|
|
store: Mapped["Store"] = relationship(back_populates="user_accounts")
|