patrick
cead46c1e1
Mitarbeiter scannen einen am Eingang ausgehängten QR-Code mit dem Privat-Handy
(/stamp?t=<token>), melden sich per Personalnummer + PIN an und stempeln ein/aus.
Eigener öffentlicher Endpunkt-Pfad, da der Kiosk-PIN-Login Ed25519-Geräte-
Signaturen verlangt, die ein Privat-Handy nicht hat.
Backend:
- Company.public_stamp_enabled (opt-in, default OFF) + rotierbares
public_stamp_token_hash (SHA-256) + created_at; Migration 0033
- Router /time/public: company/auth/action (slowapi-Limits, AuditLog)
- kiosk_auth_service.login_pin_public() reused PIN-Lockout, keyed auf
(public:company_id, personnel_number)
- public_stamp_session_service: 120s Redis-Kurz-Session
- Admin-Token-Endpunkte in companies.py (GET/rotate/DELETE)
Frontend:
- Public-Route /stamp (PublicStampPage)
- Stempel-PIN-Verwaltung in ProfilePage (reused POST /users/{id}/kiosk-pin)
- QR-Generierung/Druck/Toggle in CompanySettingsPage
Sicherheit: schwächer als Kiosk (keine Geräte-Signatur/Nonce/IP-Whitelist),
bewusster BYOD-Komfort-Tradeoff; Schutz über PIN + Lockout + opt-in.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
104 lines
3.4 KiB
Python
104 lines
3.4 KiB
Python
import uuid
|
||
from datetime import datetime
|
||
from typing import Literal
|
||
|
||
from pydantic import BaseModel, ConfigDict, Field
|
||
|
||
|
||
PersonnelNumberModeT = Literal["manual", "auto"]
|
||
|
||
|
||
class CompanySettingsUpdate(BaseModel):
|
||
"""Validiertes Sub-Schema für das company.settings JSONB-Feld.
|
||
|
||
Nur bekannte Top-Level-Keys sind erlaubt (extra="forbid").
|
||
Derzeit genutzte Keys: carryover_expires_month, carryover_expires_day
|
||
(gelesen in absences.py für Resturlaub-Verfall-Berechnung).
|
||
"""
|
||
model_config = ConfigDict(extra="forbid")
|
||
|
||
carryover_expires_month: int | None = Field(None, ge=1, le=12)
|
||
carryover_expires_day: int | None = Field(None, ge=1, le=31)
|
||
|
||
|
||
class CompanyOut(BaseModel):
|
||
model_config = {"from_attributes": True}
|
||
|
||
id: uuid.UUID
|
||
name: str
|
||
slug: str
|
||
plan: str
|
||
logo_url: str | None
|
||
country: str
|
||
state: str | None
|
||
settings: dict
|
||
personnel_number_required: bool = False
|
||
personnel_number_mode: PersonnelNumberModeT = "manual"
|
||
personnel_number_next: int = 1
|
||
mobile_stamping_enabled: bool = True
|
||
overtime_overdraft_allowed: bool = True
|
||
overtime_warning_threshold_hours: int = 0
|
||
overtime_cap_hours: int | None = None
|
||
overtime_expiry_enabled: bool = False
|
||
overtime_expiry_month: int = 3
|
||
overtime_expiry_day: int = 31
|
||
overtime_max_carryover_hours: int | None = None
|
||
kiosk_require_approval: bool = True
|
||
kiosk_track_current_user: bool = True
|
||
kiosk_heartbeat_interval_sec: int = 30
|
||
public_stamp_enabled: bool = False
|
||
|
||
|
||
class PublicStampTokenStatus(BaseModel):
|
||
"""Status des öffentlichen QR-Stempel-Tokens (kein Klartext)."""
|
||
enabled: bool
|
||
configured: bool
|
||
created_at: datetime | None = None
|
||
|
||
|
||
class PublicStampTokenRotated(BaseModel):
|
||
"""Antwort beim Rotieren – enthält Klartext-Token + fertige URL (nur einmalig)."""
|
||
token: str = Field(..., description="Klartext-Token, wird nur einmal angezeigt.")
|
||
public_url: str
|
||
created_at: datetime
|
||
|
||
|
||
class CompanyUpdate(BaseModel):
|
||
name: str | None = Field(None, min_length=2, max_length=255)
|
||
state: str | None = Field(None, max_length=10)
|
||
settings: CompanySettingsUpdate | None = None
|
||
personnel_number_required: bool | None = None
|
||
personnel_number_mode: PersonnelNumberModeT | None = None
|
||
personnel_number_next: int | None = Field(None, ge=1)
|
||
mobile_stamping_enabled: bool | None = None
|
||
overtime_overdraft_allowed: bool | None = None
|
||
overtime_warning_threshold_hours: int | None = Field(None, ge=0)
|
||
overtime_cap_hours: int | None = Field(None, ge=1, le=9999)
|
||
overtime_expiry_enabled: bool | None = None
|
||
overtime_expiry_month: int | None = Field(None, ge=1, le=12)
|
||
overtime_expiry_day: int | None = Field(None, ge=1, le=31)
|
||
overtime_max_carryover_hours: int | None = Field(None, ge=0, le=9999)
|
||
kiosk_require_approval: bool | None = None
|
||
kiosk_track_current_user: bool | None = None
|
||
kiosk_heartbeat_interval_sec: int | None = Field(None, ge=10, le=120)
|
||
public_stamp_enabled: bool | None = None
|
||
|
||
|
||
class DepartmentOut(BaseModel):
|
||
model_config = {"from_attributes": True}
|
||
|
||
id: uuid.UUID
|
||
company_id: uuid.UUID
|
||
name: str
|
||
manager_id: uuid.UUID | None
|
||
|
||
|
||
class DepartmentCreate(BaseModel):
|
||
name: str = Field(min_length=1, max_length=255)
|
||
manager_id: uuid.UUID | None = None
|
||
|
||
|
||
class DepartmentUpdate(BaseModel):
|
||
name: str | None = Field(None, min_length=1, max_length=255)
|
||
manager_id: uuid.UUID | None = None
|