patrick
981bde3dc1
Migration 0021_kiosk_security (eingeklinkt zwischen 0020 und 0022): - kiosk_devices: token_hash + is_active → status enum(pending/approved/revoked) - kiosk_devices: public_key, key_algorithm, enrollment_token_hash/expires_at - kiosk_devices: last_heartbeat_at, client_version, offline_queue_size - kiosk_devices: current_user_id (DSGVO), ip_whitelist (CIDR) - companies: kiosk_require_approval, kiosk_track_current_user, kiosk_heartbeat_interval_sec Model KioskDevice: komplett überarbeitet (KioskDeviceStatus Enum) Model Company: 3 neue Kiosk-Felder Bestehende Geräte: status=revoked (müssen neu enrolled werden) Existing servers: SQL manuell angewendet (Alembic skip bei inserted migrations) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
58 lines
2.5 KiB
Python
58 lines
2.5 KiB
Python
import enum
|
|
import uuid
|
|
from datetime import datetime
|
|
from typing import TYPE_CHECKING
|
|
|
|
from sqlalchemy import Boolean, DateTime, Integer, String, Text
|
|
from sqlalchemy.dialects.postgresql import JSONB, UUID
|
|
from sqlalchemy.orm import Mapped, mapped_column, relationship
|
|
|
|
from app.core.database import Base
|
|
|
|
if TYPE_CHECKING:
|
|
from app.models.user import User
|
|
from app.models.department import Department
|
|
|
|
|
|
class PersonnelNumberMode(str, enum.Enum):
|
|
MANUAL = "manual"
|
|
AUTO = "auto"
|
|
|
|
|
|
class Company(Base):
|
|
__tablename__ = "companies"
|
|
|
|
id: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
|
|
name: Mapped[str] = mapped_column(String(255), nullable=False)
|
|
slug: Mapped[str] = mapped_column(String(100), unique=True, nullable=False)
|
|
plan: Mapped[str] = mapped_column(String(50), default="trial")
|
|
logo_url: Mapped[str | None] = mapped_column(Text)
|
|
country: Mapped[str] = mapped_column(String(10), default="DE")
|
|
state: Mapped[str | None] = mapped_column(String(10))
|
|
settings: Mapped[dict] = mapped_column(JSONB, default=dict)
|
|
|
|
# Personalnummern-Konfiguration
|
|
personnel_number_required: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
|
|
personnel_number_mode: Mapped[str] = mapped_column(String(10), nullable=False, default=PersonnelNumberMode.MANUAL.value)
|
|
personnel_number_next: Mapped[int] = mapped_column(Integer, nullable=False, default=1)
|
|
|
|
# Krankmeldungs-Konfiguration: Default-Schwelle für AU-Pflicht (in Tagen).
|
|
# Pro AbsenceType via certificate_after_days überschreibbar.
|
|
sick_note_required_after_days: Mapped[int] = mapped_column(Integer, nullable=False, default=3)
|
|
|
|
# Busylight-Pull: SHA-256-Hash des per-Firma-Tokens (Klartext nie in DB).
|
|
busylight_pull_token_hash: Mapped[str | None] = mapped_column(String(64), unique=True)
|
|
busylight_token_created_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
|
|
|
|
# Kiosk-Konfiguration
|
|
kiosk_require_approval: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
kiosk_track_current_user: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
kiosk_heartbeat_interval_sec: Mapped[int] = mapped_column(Integer, nullable=False, default=30)
|
|
|
|
# Relationships
|
|
users: Mapped[list["User"]] = relationship("User", back_populates="company", lazy="noload")
|
|
departments: Mapped[list["Department"]] = relationship("Department", back_populates="company", lazy="noload")
|
|
|
|
def __repr__(self) -> str:
|
|
return f"<Company {self.name}>"
|