Add complete NexaMFA push MFA system with: - FastAPI backend with PostgreSQL, Redis, OIDC provider, and Prometheus metrics - React TypeScript admin console - Android Kotlin/Jetpack Compose app with biometric authentication - Docker Compose deployment configuration - Gitea CI workflow for backend, frontend, and Android builds - Environment configuration template with security settings - Documentation for security model, deployment
28 lines
1.3 KiB
Python
28 lines
1.3 KiB
Python
from datetime import datetime
|
|
import uuid
|
|
|
|
from sqlalchemy import JSON, Boolean, DateTime, ForeignKey, String, Text, func
|
|
from sqlalchemy.orm import Mapped, mapped_column, relationship
|
|
|
|
from app.core.database import Base
|
|
|
|
|
|
class Device(Base):
|
|
__tablename__ = "devices"
|
|
|
|
id: Mapped[uuid.UUID] = mapped_column(primary_key=True, default=uuid.uuid4)
|
|
user_id: Mapped[uuid.UUID] = mapped_column(ForeignKey("users.id", ondelete="CASCADE"), index=True)
|
|
name: Mapped[str] = mapped_column(String(255))
|
|
platform: Mapped[str] = mapped_column(String(64), default="android")
|
|
public_key_pem: Mapped[str] = mapped_column(Text)
|
|
public_key_alg: Mapped[str] = mapped_column(String(64), default="ES256")
|
|
fcm_token: Mapped[str | None] = mapped_column(Text, nullable=True)
|
|
app_version: Mapped[str | None] = mapped_column(String(64), nullable=True)
|
|
attestation: Mapped[dict | None] = mapped_column(JSON, nullable=True)
|
|
is_revoked: Mapped[bool] = mapped_column(Boolean, default=False, index=True)
|
|
revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
|
last_seen_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True), nullable=True)
|
|
created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), server_default=func.now())
|
|
|
|
user = relationship("User", back_populates="devices")
|