wangjia
2f298f0a0a
ci-pangolin / Lint — shellcheck (push) Successful in 8s
ci-pangolin / OpenAPI Sync Check (push) Successful in 18s
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 6s
ci-pangolin / Flutter — analyze + test (push) Successful in 24s
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 5s
ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Successful in 4s
ci-pangolin / Go — build + test (push) Successful in 11s
ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Successful in 14s
ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 4m13s
ci-pangolin / Golden — 视觉回归 (components + auth) (push) Successful in 14s
migration 000016(mysql+sqlite,含 down):新增 sessions 表(绑 device+refresh JTI) + devices 加 client_version/totp_trusted_until。devices 唯一键改 + platform CHECK 加 linux(需 SQLite 表重建)拆出后续迁移,降风险。 后端:新 internal/sessions Store(Create/Rotate/Revoke/RevokeByDevice/ LastLoginByDevice);TokenManager 外露 refresh JTI(IssueWithJTI/RefreshWithJTI/ ParseRefreshJTI);auth.Service 注入 SessionStore——登录建会话、刷新轮换、登出吊销; DeviceRegistrar 返回 deviceID;ReportUsage 心跳 touch devices.last_seen(在线判定); devices.ListDevices 经 LastLoginSource 注入返回 online(last_seen<3min)/client_version/ last_login;RegisterIfAbsent 存 client_version。 客户端:Device model 加 online/clientVersion/lastLogin(fromJson 自动解析)。 测试:sessions store 3 例 + ListDevices 在线/最后登录 + device model 2 例 + migration v16;全量 go test/flutter test 绿。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
30 lines
1.4 KiB
SQL
30 lines
1.4 KiB
SQL
-- 会话 + 设备元数据（设备 & 会话管理 P2）
|
|
--
|
|
-- ① sessions：每次登录一条，绑定 device + refresh-token JTI，支撑「按设备强制退出 /
|
|
-- 最后登录时间 / 会话历史」。refresh 轮换更新 refresh_jti+last_active；登出/强制退出
|
|
-- 置 revoked_at。Redis 白名单仍作快速校验，sessions 是可查询的权威记录。
|
|
-- ② devices.client_version：该设备最近上报的客户端版本（列表展示）。
|
|
-- ③ devices.totp_trusted_until：预留——未来 2FA「信任设备」过期点；清除登录信息时清空。
|
|
--
|
|
-- 注：devices 唯一键 UNIQUE(uuid)→UNIQUE(user_id,uuid) 与 platform CHECK 加 linux 需
|
|
-- SQLite 表重建，风险隔离到单独迁移，不在本迁移内做。
|
|
|
|
CREATE TABLE sessions (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
user_id INTEGER NOT NULL,
|
|
device_id INTEGER NOT NULL,
|
|
refresh_jti TEXT NOT NULL UNIQUE,
|
|
client_ip TEXT NULL,
|
|
client_version TEXT NULL,
|
|
created_at DATETIME NOT NULL,
|
|
last_active DATETIME NULL,
|
|
revoked_at DATETIME NULL,
|
|
FOREIGN KEY (user_id) REFERENCES users(id),
|
|
FOREIGN KEY (device_id) REFERENCES devices(id)
|
|
);
|
|
CREATE INDEX idx_sessions_user ON sessions (user_id);
|
|
CREATE INDEX idx_sessions_device ON sessions (device_id);
|
|
|
|
ALTER TABLE devices ADD COLUMN client_version TEXT NULL;
|
|
ALTER TABLE devices ADD COLUMN totp_trusted_until DATETIME NULL;
|