diary-news/backend/app/models/api_token.py

"""API Token(给 Android + API Push 短新闻 ingest 用,可独立撤销)。"""
from __future__ import annotations

from datetime import datetime

from sqlalchemy import DateTime, ForeignKey, Integer, String, func
from sqlalchemy.orm import Mapped, mapped_column

from app.database import Base


# Token 用途
TOKEN_PURPOSE_MOBILE = "mobile"    # Android 客户端
TOKEN_PURPOSE_INGEST = "ingest"    # API Push 短新闻 /api/v1/ingest


class ApiToken(Base):
    __tablename__ = "api_tokens"

    id: Mapped[int] = mapped_column(primary_key=True)
    user_id: Mapped[int] = mapped_column(
        ForeignKey("users.id", ondelete="CASCADE"), nullable=False, index=True
    )
    name: Mapped[str] = mapped_column(String(64), nullable=False)  # "Xiaomi-14"
    token_hash: Mapped[str] = mapped_column(String(128), unique=True, nullable=False, index=True)
    # 只存 hash,原始 token 一次性返回给用户
    purpose: Mapped[str] = mapped_column(
        String(16), default=TOKEN_PURPOSE_MOBILE, nullable=False, index=True
    )
    # ingest 专用:绑定的 source_id(purpose=ingest 时使用,mobile 时为 NULL)
    source_id: Mapped[int | None] = mapped_column(
        ForeignKey("sources.id", ondelete="CASCADE"), nullable=True, index=True
    )
    last_used_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
    expires_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
    revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=True))
    created_at: Mapped[datetime] = mapped_column(
        DateTime(timezone=True), server_default=func.now(), nullable=False
    )