wangjia
bcc114088c
ci-pangolin / Lint — shellcheck (push) Successful in 9s
ci-pangolin / OpenAPI Sync Check (push) Successful in 17s
ci-pangolin / Redline Scan — 脱敏 (UI 文案) (push) Successful in 5s
ci-pangolin / Flutter — analyze + test (push) Successful in 26s
ci-pangolin / Portable SQL — 可移植性 (mysql/sqlite) (push) Successful in 5s
ci-pangolin / Codegen Drift — token 生成物未漂移 (push) Successful in 5s
ci-pangolin / Go — build + test (push) Successful in 12s
ci-pangolin / E2E Smoke — L4 进程级端到端 (push) Successful in 15s
ci-pangolin / Go — integration (mysql/redis testcontainers) (push) Failing after 4m4s
ci-pangolin / Golden — 视觉回归 (components + auth) (push) Successful in 15s
后端:新端点 POST /v1/me/devices/{uuid}/logout(ForceLogout:吊销该设备会话+
丢 Redis JTI,设备留列表)。DeleteDevice 增强:先吊销会话再删设备(FK ON DELETE
CASCADE 清理会话行)+ 按 dp_uuid 吊销数据面凭证。CredentialRevoker 接口改
per-device RevokeDevice(dpUUID),由 nodes.Service 实现(查 connect_credentials
持有节点→推 CommandTypeRevoke + 删凭证行),main 注入替 NoopRevoker;devices 注入
SessionPort/JTIRevoker。修 SQLite 跨连接死锁(会话吊销移到 delete tx 之前)。
migration 000016 sessions FK 加 ON DELETE CASCADE。
客户端:account_api.forceLogout + devicesProvider.forceLogout(UI 留 P6)。
测试:ForceLogout(吊销会话+JTI+设备保留+403/404)+ DeleteDevice(级联+按 dp_uuid
吊销);NoopRevoker 改 dp_uuid;全量 server/flutter 测试绿。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
30 lines
1.4 KiB
SQL
30 lines
1.4 KiB
SQL
-- 会话 + 设备元数据（设备 & 会话管理 P2）
|
|
--
|
|
-- ① sessions：每次登录一条，绑定 device + refresh-token JTI，支撑「按设备强制退出 /
|
|
-- 最后登录时间 / 会话历史」。refresh 轮换更新 refresh_jti+last_active；登出/强制退出
|
|
-- 置 revoked_at。Redis 白名单仍作快速校验，sessions 是可查询的权威记录。
|
|
-- ② devices.client_version：该设备最近上报的客户端版本（列表展示）。
|
|
-- ③ devices.totp_trusted_until：预留——未来 2FA「信任设备」过期点；清除登录信息时清空。
|
|
--
|
|
-- 注：devices 唯一键 UNIQUE(uuid)→UNIQUE(user_id,uuid) 与 platform CHECK 加 linux 需
|
|
-- SQLite 表重建，风险隔离到单独迁移，不在本迁移内做。
|
|
|
|
CREATE TABLE sessions (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
user_id INTEGER NOT NULL,
|
|
device_id INTEGER NOT NULL,
|
|
refresh_jti TEXT NOT NULL UNIQUE,
|
|
client_ip TEXT NULL,
|
|
client_version TEXT NULL,
|
|
created_at DATETIME NOT NULL,
|
|
last_active DATETIME NULL,
|
|
revoked_at DATETIME NULL,
|
|
FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
|
|
FOREIGN KEY (device_id) REFERENCES devices(id) ON DELETE CASCADE
|
|
);
|
|
CREATE INDEX idx_sessions_user ON sessions (user_id);
|
|
CREATE INDEX idx_sessions_device ON sessions (device_id);
|
|
|
|
ALTER TABLE devices ADD COLUMN client_version TEXT NULL;
|
|
ALTER TABLE devices ADD COLUMN totp_trusted_until DATETIME NULL;
|