30a6d29ca8
Ermöglicht Apps außerhalb des Browsers (z.B. den TUI-Client), sich per Authorization: Bearer <token> zu authentifizieren statt per Session-Cookie. Die neue ApiTokenAuthMiddleware setzt request.user genau wie ein Login, wodurch alle bestehenden books/podcasts/radio-Endpunkte ohne Änderungen token-fähig werden. GET /api/sync/ liefert zusätzlich den kompletten Nutzerzustand (Bücher-Metadaten, Lesefortschritt, Notizen, Podcasts, Sender) in einem Request; Schreiben läuft weiter über die bestehenden Endpunkte, um deren Merge-Semantik (furthest-wins Progress, Notes-Upsert) wiederzuverwenden. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
59 lines
2.2 KiB
Python
59 lines
2.2 KiB
Python
import secrets
|
|
|
|
from django.db import models
|
|
from django.contrib.auth.models import User
|
|
from django.db.models.signals import post_save
|
|
from django.dispatch import receiver
|
|
|
|
|
|
class UserProfile(models.Model):
|
|
user = models.OneToOneField(User, on_delete=models.CASCADE, related_name='profile')
|
|
lastfm_session_key = models.CharField(max_length=100, blank=True)
|
|
lastfm_username = models.CharField(max_length=100, blank=True)
|
|
lastfm_scrobble = models.BooleanField(default=True)
|
|
background_image_data = models.TextField(blank=True) # base64 data URL (legacy)
|
|
background_encrypted = models.TextField(blank=True) # base64 AES-GCM ciphertext
|
|
background_iv = models.CharField(max_length=32, blank=True) # hex IV
|
|
background_mime = models.CharField(max_length=30, blank=True) # e.g. 'image/jpeg'
|
|
focus_station_url = models.URLField(max_length=1000, blank=True)
|
|
focus_station_name = models.CharField(max_length=300, blank=True)
|
|
|
|
def has_lastfm(self) -> bool:
|
|
return bool(self.lastfm_session_key)
|
|
|
|
def __str__(self):
|
|
return f"Profile of {self.user.username}"
|
|
|
|
|
|
@receiver(post_save, sender=User)
|
|
def create_user_profile(sender, instance, created, **kwargs):
|
|
if created:
|
|
UserProfile.objects.create(user=instance)
|
|
|
|
|
|
@receiver(post_save, sender=User)
|
|
def save_user_profile(sender, instance, **kwargs):
|
|
if hasattr(instance, 'profile'):
|
|
instance.profile.save()
|
|
|
|
|
|
def _generate_token():
|
|
return secrets.token_hex(32)
|
|
|
|
|
|
class ApiToken(models.Model):
|
|
"""Personal access token for local/native clients (see accounts.middleware).
|
|
|
|
Sent as `Authorization: Bearer <token>` and treated identically to a
|
|
session login by ApiTokenAuthMiddleware — grants the same access as the
|
|
owning user across the whole app (books, podcasts, radio)."""
|
|
user = models.OneToOneField(User, on_delete=models.CASCADE, related_name='api_token')
|
|
token = models.CharField(max_length=64, unique=True, db_index=True, default=_generate_token)
|
|
created_at = models.DateTimeField(auto_now_add=True)
|
|
|
|
def regenerate(self):
|
|
self.token = _generate_token()
|
|
self.save(update_fields=['token'])
|
|
|
|
def __str__(self):
|
|
return f"ApiToken({self.user.username})"
|