Includes MFA-capable authentication, session and CSRF security, password recovery, listing lifecycle and ownership rules, inventory image metadata, local ImageStorage, migrations, tests, and implementation status documentation. Verification: npm test (62 passing) and integration suite (14 passing).
14 lines
652 B
SQL
14 lines
652 B
SQL
CREATE TABLE "sessions" (
|
|
"id" uuid PRIMARY KEY DEFAULT gen_random_uuid() NOT NULL,
|
|
"user_id" uuid NOT NULL REFERENCES "users"("id"),
|
|
"session_token_hash" text NOT NULL,
|
|
"expires_at" timestamp with time zone NOT NULL,
|
|
"last_activity_at" timestamp with time zone DEFAULT now() NOT NULL,
|
|
"ip_address" text,
|
|
"user_agent" text,
|
|
"revoked_at" timestamp with time zone,
|
|
"created_at" timestamp with time zone DEFAULT now() NOT NULL,
|
|
CONSTRAINT "sessions_token_hash_unique" UNIQUE("session_token_hash")
|
|
);
|
|
CREATE INDEX "sessions_user_id_index" ON "sessions" ("user_id");
|
|
CREATE INDEX "sessions_expires_at_index" ON "sessions" ("expires_at"); |