lukasandClaude Opus 5
8fce86559e
Three strands that only make sense together, so they land together. Registration gate (migration 0016). POST /auth/register was open to anyone who could reach the port. Now the first account on an empty instance is always allowed, becomes the administrator, and closes registration behind itself; after that it takes an admin reopening it. The decision is made under a row lock on app_settings so two simultaneous first signups cannot both see an empty table and both claim administrator. Existing installs keep their oldest account as admin and start closed. Instance default quota (migration 0017). users.quota_bytes is snapshotted at creation from app_settings.default_quota_bytes, so changing the default affects later accounts only and never resizes a mailbox that exists. The panel is a separate app, not a page in the mail client. admin.html is its own Vite entry (5.8 KB next to the client's 1.7 MB; they share only the vendor chunk), with its own administrator sign-in. One nginx now serves two listeners: :80 is the mail client and 404s both /admin.html and /api/admin/*, :81 is the panel. docker-compose publishes them as WEB_PORT and ADMIN_PORT. The boundary is nginx refusing paths on one listener, not process isolation — CurrentAdmin still guards every admin route — so ADMIN_PORT must be restricted to the LAN, which the runbook now covers for both DSM and QNAP. Also QNAP: deploy/webmail.sh finds Container Station's docker under /share/*/.qpkg/container-station/bin, which is off an SSH session's PATH, before anything shells out to it. docs/nas-install.md gains a QuTS hero runbook (§2.6), splits the DSM firewall section into container-to-container (§8.1) and the egress case that makes account-add time out while autodiscovery appears to work (§8.2), and scopes both to Synology. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018SqJYt7jD7oUEkoY68sBZo
84 lines
2.1 KiB
Python
84 lines
2.1 KiB
Python
"""Request/response models for the auth API (SPEC §9.1)."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import uuid
|
|
|
|
from pydantic import BaseModel, Field
|
|
|
|
|
|
class RegisterRequest(BaseModel):
|
|
localpart: str = Field(min_length=3, max_length=30)
|
|
password: str = Field(min_length=8, max_length=1024)
|
|
recovery_email: str | None = None
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
# Accepts either a bare localpart or the full ``localpart@domain`` handle.
|
|
handle: str = Field(min_length=1, max_length=320)
|
|
password: str = Field(min_length=1, max_length=1024)
|
|
totp: str | None = None # required when the account has 2FA enabled
|
|
|
|
|
|
class TotpSetupResponse(BaseModel):
|
|
secret: str # base32, for manual entry
|
|
provisioning_uri: str # otpauth:// URI to render as a QR code
|
|
|
|
|
|
class TotpEnableRequest(BaseModel):
|
|
code: str = Field(min_length=6, max_length=10)
|
|
|
|
|
|
class TotpDisableRequest(BaseModel):
|
|
password: str = Field(min_length=1, max_length=1024)
|
|
|
|
|
|
class SessionOut(BaseModel):
|
|
sid: str
|
|
created: str
|
|
ua: str
|
|
current: bool
|
|
|
|
|
|
class PasswordResetRequestIn(BaseModel):
|
|
handle: str = Field(min_length=1, max_length=320)
|
|
|
|
|
|
class PasswordResetIn(BaseModel):
|
|
token: str = Field(min_length=1)
|
|
password: str = Field(min_length=8, max_length=1024)
|
|
|
|
|
|
class UserOut(BaseModel):
|
|
id: uuid.UUID
|
|
handle: str
|
|
recovery_email: str | None
|
|
settings: dict[str, object]
|
|
totp_enabled: bool = False
|
|
is_admin: bool = False
|
|
|
|
|
|
class RegistrationStatusOut(BaseModel):
|
|
"""Public, unauthenticated: what the signup page should show."""
|
|
|
|
open: bool
|
|
# True when the instance has no users yet, so signup creates the administrator.
|
|
bootstrap: bool
|
|
|
|
|
|
class AdminSettingsOut(BaseModel):
|
|
registration_open: bool
|
|
default_quota_bytes: int
|
|
|
|
|
|
class AdminSettingsIn(BaseModel):
|
|
"""Merge semantics: omitted fields are left as they are."""
|
|
|
|
registration_open: bool | None = None
|
|
# Applies to users created after the change; existing mailboxes keep theirs.
|
|
default_quota_bytes: int | None = Field(default=None, gt=0)
|
|
|
|
|
|
class MessageOut(BaseModel):
|
|
status: str = "ok"
|