Skip to main content

max / makenotwork

5.9 KB · 175 lines History Blame Raw
1 //! SSH key, OAuth code, issue, and issue comment models.
2
3 use chrono::{DateTime, Utc};
4 use serde::Serialize;
5 use sqlx::FromRow;
6
7 use super::super::enums::CreatorTier;
8 use super::super::id_types::{
9 GitRepoId, IssueCommentId, IssueId, IssueLabelId, OAuthCodeId, OAuthRefreshTokenId, SshKeyId,
10 SyncAppId, UserId,
11 };
12 use super::super::validated_types::{Email, Username};
13 use crate::currency::SettlementCurrency;
14
15 /// An SSH public key registered by a user for git push access.
16 #[derive(Debug, Clone, FromRow, Serialize)]
17 pub struct DbSshKey {
18 /// Database primary key.
19 pub id: SshKeyId,
20 /// User who owns this key.
21 pub user_id: UserId,
22 /// The SSH public key data (e.g., "ssh-ed25519 AAAA...").
23 pub public_key: String,
24 /// SHA-256 fingerprint (e.g., "SHA256:abc...").
25 pub fingerprint: String,
26 /// Human-readable label for the key (e.g., "laptop").
27 pub label: String,
28 /// When the key was registered.
29 pub created_at: DateTime<Utc>,
30 }
31
32 /// An SSH key joined with its owner's username, for authorized_keys rebuild.
33 #[derive(Debug, Clone, FromRow)]
34 pub struct SshKeyWithUsername {
35 /// SSH key primary key.
36 pub id: SshKeyId,
37 /// The SSH public key data.
38 pub public_key: String,
39 /// Owner's username.
40 pub username: String,
41 }
42
43 /// User info returned by SSH key fingerprint lookup (for CLI auth).
44 #[derive(Debug, Clone, FromRow, Serialize)]
45 pub struct SshKeyUserLookup {
46 pub user_id: UserId,
47 pub username: Username,
48 pub display_name: Option<String>,
49 pub email: Email,
50 pub creator_tier: Option<CreatorTier>,
51 pub can_create_projects: bool,
52 pub suspended: bool,
53 /// The currency this user is paid in, and so the currency every amount the
54 /// CLI renders for them is denominated in. Carried on the login lookup
55 /// because the CLI needs it before any dashboard call returns: a screen that
56 /// waits for revenue data to learn the symbol renders the wrong one first.
57 pub settlement_currency: SettlementCurrency,
58 /// The creator's SSH console theme as a `makeover::ThemeSelection` string,
59 /// or `None` where they have never chosen. Carried on the login lookup for
60 /// the same reason as the currency: the CLI paints its first frame before
61 /// any dashboard call returns, and a console that repaints once the theme
62 /// arrives has already shown the wrong one.
63 pub console_theme: Option<String>,
64 }
65
66 /// An OAuth2 authorization code for PKCE flow.
67 #[derive(Debug, Clone, FromRow)]
68 #[allow(dead_code)] // Fields read via sqlx queries and in route handlers
69 pub struct DbOAuthCode {
70 pub id: OAuthCodeId,
71 /// SHA-256 hex of the authorization code, never the plaintext. Stored and
72 /// looked up by this hash (see `db::oauth`), so a DB read can't surface a
73 /// live, redeemable code, same at-rest contract as refresh-token hashes.
74 pub code: String,
75 pub app_id: SyncAppId,
76 pub user_id: UserId,
77 pub code_challenge: String,
78 pub code_challenge_method: String,
79 pub redirect_uri: String,
80 /// Space-delimited granted scope (e.g. `profile:read perks:read offline_access`).
81 pub scope: String,
82 pub expires_at: DateTime<Utc>,
83 pub used_at: Option<DateTime<Utc>>,
84 pub created_at: DateTime<Utc>,
85 }
86
87 /// A rotating, scoped OAuth refresh token. Stored as a SHA-256 hash; the
88 /// plaintext only ever exists in the token response and the RP's store.
89 #[derive(Debug, Clone, FromRow)]
90 #[allow(dead_code)] // Fields read via sqlx queries and in route handlers
91 pub struct DbOAuthRefreshToken {
92 pub id: OAuthRefreshTokenId,
93 pub token_hash: String,
94 pub app_id: SyncAppId,
95 pub user_id: UserId,
96 pub key: String,
97 pub scope: String,
98 /// Stable across rotations, revoking the chain kills every descendant.
99 pub chain_id: uuid::Uuid,
100 pub expires_at: DateTime<Utc>,
101 pub used_at: Option<DateTime<Utc>>,
102 pub revoked_at: Option<DateTime<Utc>>,
103 /// Compared to `users.jwt_invalidated_at` so password change / suspend
104 /// revokes the whole refresh lineage with no separate revocation system.
105 pub issued_after: DateTime<Utc>,
106 pub created_at: DateTime<Utc>,
107 }
108
109 // ── Git Issue models ──
110
111 /// An issue filed against a git repository.
112 #[derive(Debug, Clone, FromRow, Serialize)]
113 pub struct DbIssue {
114 pub id: IssueId,
115 pub repo_id: GitRepoId,
116 pub number: i32,
117 pub author_user_id: UserId,
118 pub title: String,
119 pub body_markdown: String,
120 pub body_html: String,
121 pub status: super::super::IssueStatus,
122 pub created_at: DateTime<Utc>,
123 pub updated_at: DateTime<Utc>,
124 /// Multithreaded forum thread mirroring this issue. Populated by the
125 /// inbound issues handler when MT is configured; `None` otherwise.
126 pub mt_thread_id: Option<uuid::Uuid>,
127 }
128
129 /// An issue with joined metadata for list display.
130 #[derive(Debug, Clone, FromRow)]
131 pub struct DbIssueWithMeta {
132 pub id: IssueId,
133 pub repo_id: GitRepoId,
134 pub number: i32,
135 pub author_user_id: UserId,
136 pub title: String,
137 pub status: super::super::IssueStatus,
138 pub created_at: DateTime<Utc>,
139 pub updated_at: DateTime<Utc>,
140 pub author_username: String,
141 pub comment_count: i64,
142 }
143
144 /// A comment on an issue.
145 #[derive(Debug, Clone, FromRow, Serialize)]
146 pub struct DbIssueComment {
147 pub id: IssueCommentId,
148 pub issue_id: IssueId,
149 pub author_user_id: UserId,
150 pub body_markdown: String,
151 pub body_html: String,
152 pub created_at: DateTime<Utc>,
153 }
154
155 /// A comment with joined author username.
156 #[derive(Debug, Clone, FromRow)]
157 pub struct DbIssueCommentWithAuthor {
158 pub id: IssueCommentId,
159 pub issue_id: IssueId,
160 pub author_user_id: UserId,
161 pub body_markdown: String,
162 pub body_html: String,
163 pub created_at: DateTime<Utc>,
164 pub author_username: String,
165 }
166
167 /// A label that can be attached to issues within a repo.
168 #[derive(Debug, Clone, FromRow, Serialize)]
169 pub struct DbIssueLabel {
170 pub id: IssueLabelId,
171 pub repo_id: GitRepoId,
172 pub name: String,
173 pub color: String,
174 }
175