Files

108 lines
3.9 KiB
Python

from datetime import datetime
from typing import TYPE_CHECKING
from sqlalchemy import Boolean, DateTime, Index, String, Text
from sqlalchemy.orm import Mapped, mapped_column, relationship
from sqlalchemy.sql import func
from backend.models.database import Base
if TYPE_CHECKING:
from backend.models.check_in_task import CheckInTask
class User(Base):
"""用户模型 - 账户信息"""
__tablename__ = "users"
id: Mapped[int] = mapped_column(primary_key=True, index=True, autoincrement=True)
jwt_sub: Mapped[str | None] = mapped_column(
String(200),
unique=True,
nullable=True,
index=True,
comment="QQ 扫码登录的唯一用户标识(注册时为空)",
)
alias: Mapped[str] = mapped_column(
String(50), unique=True, nullable=False, index=True, comment="用户别名(用于登录)"
)
email: Mapped[str | None] = mapped_column(
String(100), nullable=True, comment="用户邮箱(用于接收通知)"
)
email_verified_at: Mapped[datetime | None] = mapped_column(
DateTime(timezone=True), nullable=True, comment="邮箱验证时间"
)
email_verification_code_hash: Mapped[str | None] = mapped_column(
String(200), nullable=True, comment="邮箱验证码哈希"
)
email_verification_expires_at: Mapped[datetime | None] = mapped_column(
DateTime(timezone=True), nullable=True, comment="邮箱验证码过期时间"
)
password_hash: Mapped[str | None] = mapped_column(
String(200), nullable=True, comment="密码哈希(bcrypt加密)"
)
authorization: Mapped[str | None] = mapped_column(
Text, nullable=True, comment="当前有效的 QQ Token"
)
jwt_exp: Mapped[str] = mapped_column(String(20), default="0", comment="Token 过期时间戳")
token_expiring_notified: Mapped[bool] = mapped_column(
Boolean,
default=False,
nullable=False,
comment="Token 即将过期提醒是否已发送(过期前30分钟)",
)
token_expired_notified: Mapped[bool] = mapped_column(
Boolean,
default=False,
nullable=False,
comment="Token 已过期提醒是否已发送(过期后30分钟内)",
)
role: Mapped[str] = mapped_column(
String(20), default="user", index=True, comment="角色: user/admin"
)
is_approved: Mapped[bool] = mapped_column(
Boolean, default=False, index=True, comment="是否已通过管理员审批"
)
# 账户锁定相关字段
failed_login_attempts: Mapped[int] = mapped_column(
default=0, nullable=False, comment="连续登录失败次数"
)
locked_until: Mapped[datetime | None] = mapped_column(
DateTime(timezone=True), nullable=True, comment="账户锁定到期时间"
)
last_failed_login: Mapped[datetime | None] = mapped_column(
DateTime(timezone=True), nullable=True, comment="最后一次登录失败时间"
)
created_at: Mapped[datetime] = mapped_column(
DateTime(timezone=True), server_default=func.now(), comment="创建时间"
)
updated_at: Mapped[datetime | None] = mapped_column(
DateTime(timezone=True), onupdate=func.now(), comment="更新时间"
)
# 关联打卡任务
tasks: Mapped[list["CheckInTask"]] = relationship(
back_populates="user", cascade="all, delete-orphan"
)
# 添加复合索引:加速审批管理查询
__table_args__ = (
Index("ix_user_role_approved", "role", "is_approved"), # 管理员查询待审批用户
)
def __repr__(self):
return f"<User(id={self.id}, alias={self.alias}, jwt_sub={self.jwt_sub}, role={self.role})>"
@property
def is_admin(self) -> bool:
"""判断是否为管理员"""
return self.role == "admin"
@property
def email_verified(self) -> bool:
"""判断当前邮箱是否已验证"""
return bool(self.email and self.email_verified_at)