Publish curated Unraid-AppOps-Gateway source from 034c9f844d2455850ba37b31379b7edaa786583e

backend/app/db/models.py

@@ -9,6 +9,44 @@ from sqlmodel import Column, Field, SQLModel
 from ..core.time import utc_now
 
 
+class GatewayUser(SQLModel, table=True):
+    __tablename__ = "gateway_users"
+    id: str = Field(primary_key=True)
+    provider: str
+    issuer: str
+    subject: str
+    email: str = ""
+    display_name: str = ""
+    role: str = "read_only"
+    enabled: bool = True
+    permissions: list[str] = Field(default_factory=list, sa_column=Column(JSON))
+    created_at: datetime = Field(default_factory=utc_now)
+    last_login: datetime = Field(default_factory=utc_now)
+
+
+class UserSession(SQLModel, table=True):
+    __tablename__ = "user_sessions"
+    id: str = Field(primary_key=True)  # SHA-256 of the opaque cookie, never the cookie itself.
+    user_id: str = Field(index=True)
+    expires_at: int = Field(index=True)
+
+
+class LoginFlow(SQLModel, table=True):
+    __tablename__ = "login_flows"
+    id: str = Field(primary_key=True)
+    provider: str
+    browser_hash: str
+    nonce: str
+    verifier: str
+    expires_at: int = Field(index=True)
+
+
+class BootstrapGrant(SQLModel, table=True):
+    __tablename__ = "user_bootstrap_grants"
+    id: str = Field(primary_key=True)
+    user_id: str
+
+
 class App(SQLModel, table=True):
     id: str = Field(primary_key=True)
     name: str