patrick
cead46c1e1
Mitarbeiter scannen einen am Eingang ausgehängten QR-Code mit dem Privat-Handy
(/stamp?t=<token>), melden sich per Personalnummer + PIN an und stempeln ein/aus.
Eigener öffentlicher Endpunkt-Pfad, da der Kiosk-PIN-Login Ed25519-Geräte-
Signaturen verlangt, die ein Privat-Handy nicht hat.
Backend:
- Company.public_stamp_enabled (opt-in, default OFF) + rotierbares
public_stamp_token_hash (SHA-256) + created_at; Migration 0033
- Router /time/public: company/auth/action (slowapi-Limits, AuditLog)
- kiosk_auth_service.login_pin_public() reused PIN-Lockout, keyed auf
(public:company_id, personnel_number)
- public_stamp_session_service: 120s Redis-Kurz-Session
- Admin-Token-Endpunkte in companies.py (GET/rotate/DELETE)
Frontend:
- Public-Route /stamp (PublicStampPage)
- Stempel-PIN-Verwaltung in ProfilePage (reused POST /users/{id}/kiosk-pin)
- QR-Generierung/Druck/Toggle in CompanySettingsPage
Sicherheit: schwächer als Kiosk (keine Geräte-Signatur/Nonce/IP-Whitelist),
bewusster BYOD-Komfort-Tradeoff; Schutz über PIN + Lockout + opt-in.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
79 lines
4.0 KiB
Python
79 lines
4.0 KiB
Python
import enum
|
|
import uuid
|
|
from datetime import datetime
|
|
from typing import TYPE_CHECKING
|
|
|
|
from sqlalchemy import Boolean, DateTime, Integer, String, Text
|
|
from sqlalchemy.dialects.postgresql import JSONB, UUID
|
|
from sqlalchemy.orm import Mapped, mapped_column, relationship
|
|
|
|
from app.core.database import Base
|
|
|
|
if TYPE_CHECKING:
|
|
from app.models.user import User
|
|
from app.models.department import Department
|
|
|
|
|
|
class PersonnelNumberMode(str, enum.Enum):
|
|
MANUAL = "manual"
|
|
AUTO = "auto"
|
|
|
|
|
|
class Company(Base):
|
|
__tablename__ = "companies"
|
|
|
|
id: Mapped[uuid.UUID] = mapped_column(UUID(as_uuid=True), primary_key=True, default=uuid.uuid4)
|
|
name: Mapped[str] = mapped_column(String(255), nullable=False)
|
|
slug: Mapped[str] = mapped_column(String(100), unique=True, nullable=False)
|
|
plan: Mapped[str] = mapped_column(String(50), default="trial")
|
|
logo_url: Mapped[str | None] = mapped_column(Text)
|
|
country: Mapped[str] = mapped_column(String(10), default="DE")
|
|
state: Mapped[str | None] = mapped_column(String(10))
|
|
settings: Mapped[dict] = mapped_column(JSONB, default=dict)
|
|
|
|
# Personalnummern-Konfiguration
|
|
personnel_number_required: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
|
|
personnel_number_mode: Mapped[str] = mapped_column(String(10), nullable=False, default=PersonnelNumberMode.MANUAL.value)
|
|
personnel_number_next: Mapped[int] = mapped_column(Integer, nullable=False, default=1)
|
|
|
|
# Krankmeldungs-Konfiguration: Default-Schwelle für AU-Pflicht (in Tagen).
|
|
# Pro AbsenceType via certificate_after_days überschreibbar.
|
|
sick_note_required_after_days: Mapped[int] = mapped_column(Integer, nullable=False, default=3)
|
|
|
|
# Busylight-Pull: SHA-256-Hash des per-Firma-Tokens (Klartext nie in DB).
|
|
busylight_pull_token_hash: Mapped[str | None] = mapped_column(String(64), unique=True)
|
|
busylight_token_created_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
|
|
|
|
# Öffentliches QR-Stempeln: statischer firmenweiter QR-Code → /stamp?t=<token>.
|
|
# Mitarbeiter scannt mit Privat-Handy, meldet sich per Personalnummer + PIN an.
|
|
# Opt-in (default OFF). Token gehasht in DB (SHA-256), Klartext nur beim Rotieren.
|
|
public_stamp_enabled: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
|
|
public_stamp_token_hash: Mapped[str | None] = mapped_column(String(64), unique=True)
|
|
public_stamp_token_created_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
|
|
|
|
# Kiosk-Konfiguration
|
|
kiosk_require_approval: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
kiosk_track_current_user: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
kiosk_heartbeat_interval_sec: Mapped[int] = mapped_column(Integer, nullable=False, default=30)
|
|
|
|
# Mobile-Konfiguration
|
|
mobile_stamping_enabled: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
|
|
# Freizeitausgleich-Konfiguration
|
|
overtime_overdraft_allowed: Mapped[bool] = mapped_column(Boolean, nullable=False, default=True)
|
|
overtime_warning_threshold_hours: Mapped[int] = mapped_column(Integer, nullable=False, default=0)
|
|
# Überstunden-Kappung
|
|
overtime_cap_hours: Mapped[int | None] = mapped_column(Integer, nullable=True)
|
|
# Überstunden-Verfall
|
|
overtime_expiry_enabled: Mapped[bool] = mapped_column(Boolean, nullable=False, default=False)
|
|
overtime_expiry_month: Mapped[int] = mapped_column(Integer, nullable=False, default=3) # März
|
|
overtime_expiry_day: Mapped[int] = mapped_column(Integer, nullable=False, default=31) # 31.
|
|
overtime_max_carryover_hours: Mapped[int | None] = mapped_column(Integer, nullable=True) # None = alles
|
|
|
|
# Relationships
|
|
users: Mapped[list["User"]] = relationship("User", back_populates="company", lazy="noload")
|
|
departments: Mapped[list["Department"]] = relationship("Department", back_populates="company", lazy="noload")
|
|
|
|
def __repr__(self) -> str:
|
|
return f"<Company {self.name}>"
|