- Extraccion de helpers en backend: audit_helpers.py, helpers.py - Modularizacion de schemas en archivos individuales por dominio - Reduccion de audit.py en 953 lineas (74% del archivo) - Reduccion de tickets.py en 655 lineas (60% del archivo) - Expansion de auth.py con recuperacion de contrasenia y tokens - Nuevos modulos: core/email.py, core/cache.py - Reorganizacion de scripts a backend/scripts/ - Frontend: refactorizacion de audit page con array-driven components - Frontend: correccion de 11 errores ortograficos en tickets page - Frontend: proxy Docker corregido en vite.config.js - Frontend: nuevas rutas forgot-password, reset-password, organization, profile - Nuevas utilidades TS: colorUtils.ts, dateFormats.ts - 5 nuevos archivos de tests unitarios en backend/tests/unit/ - Eliminacion de 3 scripts temporales de prueba - Documentacion tecnica: CAMBIOS_v1.10.0.md, OPTIMIZACIONES_RENDIMIENTO.md
97 lines
2.5 KiB
Python
97 lines
2.5 KiB
Python
"""
|
|
Auth Schemas - ServiceManagerWeb
|
|
|
|
Pydantic schemas para autenticación y autorización.
|
|
"""
|
|
|
|
from pydantic import BaseModel, EmailStr
|
|
from typing import Optional, List
|
|
|
|
|
|
class LoginRequest(BaseModel):
|
|
"""Schema para solicitud de login."""
|
|
email: EmailStr
|
|
password: str
|
|
tenant_slug: str
|
|
totp_code: Optional[str] = None
|
|
|
|
|
|
class LoginResponse(BaseModel):
|
|
"""Schema de respuesta al login exitoso."""
|
|
access_token: str
|
|
refresh_token: str
|
|
token_type: str = "bearer"
|
|
expires_in: int
|
|
user: dict
|
|
|
|
|
|
class RefreshTokenRequest(BaseModel):
|
|
"""Schema para renovar access token usando refresh token."""
|
|
refresh_token: str
|
|
|
|
|
|
class TokenResponse(BaseModel):
|
|
"""Schema de respuesta al renovar token."""
|
|
access_token: str
|
|
token_type: str = "bearer"
|
|
expires_in: int
|
|
|
|
|
|
# ============================================================
|
|
# 2FA / TOTP Schemas
|
|
# ============================================================
|
|
|
|
class TwoFactorStatusResponse(BaseModel):
|
|
"""Estado actual de 2FA del usuario autenticado."""
|
|
enabled: bool
|
|
|
|
|
|
class TwoFactorSetupResponse(BaseModel):
|
|
"""QR URI y clave manual devueltos al iniciar el setup de 2FA."""
|
|
secret: str
|
|
qr_uri: str
|
|
|
|
|
|
class TwoFactorEnableRequest(BaseModel):
|
|
"""Código TOTP para confirmar y activar 2FA."""
|
|
totp_code: str
|
|
|
|
|
|
class TwoFactorEnableResponse(BaseModel):
|
|
"""Resultado al habilitar 2FA: incluye los códigos de respaldo."""
|
|
enabled: bool
|
|
backup_codes: List[str]
|
|
|
|
|
|
class TwoFactorDisableRequest(BaseModel):
|
|
"""Deshabilitar 2FA verificando con TOTP o código de respaldo."""
|
|
totp_code: Optional[str] = None
|
|
backup_code: Optional[str] = None
|
|
|
|
|
|
# ============================================================
|
|
# Cambio de contraseña
|
|
# ============================================================
|
|
|
|
class ChangePasswordRequest(BaseModel):
|
|
"""Schema para cambio de contraseña del usuario autenticado."""
|
|
current_password: str
|
|
new_password: str
|
|
|
|
model_config = {"json_schema_extra": {"example": {"current_password": "old_pass", "new_password": "new_secure_pass"}}}
|
|
|
|
|
|
# ============================================================
|
|
# Recuperación de contraseña
|
|
# ============================================================
|
|
|
|
class ForgotPasswordRequest(BaseModel):
|
|
"""Solicitar enlace de reseteo de contraseña por email."""
|
|
email: EmailStr
|
|
|
|
|
|
class ResetPasswordRequest(BaseModel):
|
|
"""Aplicar nueva contraseña usando token de reseteo."""
|
|
token: str
|
|
new_password: str
|