Commit Graph

23 Commits

Author SHA1 Message Date
Xiaoxia AI bfbaddbd9a style: normalize python formatting gates 2026-06-21 06:52:19 +08:00
Xiaoxia AI 4b4602a0fd refactor(schema): mark sqlalchemy models as schema mainline 2026-06-21 06:30:55 +08:00
Xiaoxia AI 788de9a245 refactor(adapters): deprecate postgres repository path 2026-06-21 02:15:56 +08:00
Xiaoxia AI d25bd753a2 refactor(api): guard route adapter boundaries 2026-06-21 02:02:55 +08:00
Xiaoxia AI 0e93d2e71f refactor(domain): move auth infrastructure to adapters 2026-06-21 00:46:56 +08:00
Xiaoxia AI 57310f33d4 fix(auth): harden simple auth and router imports 2026-06-21 00:27:58 +08:00
Xiaoxia AI 4e33158d8d feat(quota): add quota checking and management system
- Implement QuotaChecker for project and storage limits
- Check project count before creation (respect max_projects)
- Check storage availability before upload
- Get quota status with usage percentages
- Update storage usage (increase/decrease)
- Define warning levels (normal/warning/critical/exceeded)
- Add ProjectRepository interface for project counting
- Add 14 comprehensive unit tests (all passed)

Phase 4 Task 22/68 completed
2026-06-17 07:24:14 +08:00
Xiaoxia AI dba2fe94ac feat(subscription): add upgrade and cancel subscription use cases
- Implement UpgradeSubscriptionUseCase (Free→Pro→Enterprise)
- Prevent downgrades (must use cancel to return to Free)
- Auto-set quotas and expiration date on upgrade
- Implement CancelSubscriptionUseCase to downgrade to Free
- Only workspace owner can manage subscription
- Add 8 comprehensive unit tests (all passed)

Phase 4 Task 21/68 completed
2026-06-17 07:20:34 +08:00
Xiaoxia AI 80c29ba940 feat(permissions): add permission system and checker
- Implement PermissionChecker for workspace access control
- Define Permission constants for all operations
- Define ROLE_PERMISSIONS mapping (Owner/Admin/Member/Viewer)
- Support workspace/member/project/asset permission checks
- Helper functions: check_is_owner, check_can_manage_members, etc.
- Add 15 comprehensive unit tests (all passed)

Phase 4 Task 20/68 completed
2026-06-17 07:16:02 +08:00
Xiaoxia AI 0a2137c2aa feat(workspace): add list members use case
- Implement ListMembersUseCase to get all workspace members
- Return member info with user details (username, email, display_name)
- Show role, inviter, and join time for each member
- Only workspace members can view member list
- Add 6 comprehensive unit tests (all passed)

Phase 4 Task 18/68 completed
2026-06-17 07:06:33 +08:00
Xiaoxia AI ee3935abdc feat(workspace): add list workspaces and get detail use cases
- Implement ListWorkspacesUseCase to get user's all workspaces
- Return workspace info with user's role and member count
- Implement GetWorkspaceDetailUseCase with permission check
- Show detailed subscription and storage info
- Verify user is member before showing details
- Add 8 comprehensive unit tests (all passed)

Phase 4 Task 17/68 completed
2026-06-17 07:04:55 +08:00
Xiaoxia AI a222c7f278 feat(workspace): add update member role use case
- Implement UpdateMemberRoleUseCase with role-based permission
- Owner/Admin can change roles, but Admin cannot change other Admins
- Cannot change owner's role or change your own role
- Cannot change to owner role (owner is unique)
- Validate role not already assigned
- Add 8 comprehensive unit tests (all passed)

Phase 4 Task 16/68 completed
2026-06-17 05:12:34 +08:00
Xiaoxia AI 8ff42a1bf9 feat(workspace): add remove member and leave workspace use cases
- Implement RemoveMemberUseCase with role-based permission
- Owner/Admin can remove members, but Admin cannot remove other Admins
- Cannot remove workspace owner or remove yourself
- Implement LeaveWorkspaceUseCase for self-removal
- Owner cannot leave (must transfer ownership or delete workspace first)
- Add 9 comprehensive unit tests (all passed)

Phase 4 Task 15/68 completed
2026-06-17 05:10:06 +08:00
Xiaoxia AI 82240d7953 feat(workspace): add accept and decline invitation use cases
- Implement AcceptInvitationUseCase with validation
- Check invitation status, expiration, and email match
- Auto-create WorkspaceMember on accept
- Handle case when user is already a member
- Implement DeclineInvitationUseCase to reject invitations
- Update invitation status (accepted/declined/expired)
- Add 9 comprehensive unit tests (all passed)

Phase 4 Task 14/68 completed
2026-06-17 05:08:31 +08:00
Xiaoxia AI 5d77d334ee feat(workspace): add invite member use case
- Implement InviteMemberUseCase with role-based permission check
- Only owner/admin can invite members (not regular members)
- Cannot invite as owner (owner is unique per workspace)
- Check for duplicate invitations and existing members
- Generate invitation token with 7-day expiration
- Send invitation email with accept link
- Add 7 comprehensive unit tests (all passed)

Phase 4 Task 13/68 completed
2026-06-17 05:06:57 +08:00
Xiaoxia AI 7a03f9636a feat(workspace): add create workspace use case
- Implement CreateWorkspaceUseCase with subscription plan support
- Auto-configure quotas based on plan (free/pro/enterprise)
- Auto-create owner membership record on workspace creation
- Validate workspace name (required, max 100 chars)
- Validate owner user exists before creation
- Add 7 comprehensive unit tests (all passed)

Phase 4 Task 12/68 completed
2026-06-17 01:28:09 +08:00
Xiaoxia AI e46cda2416 feat(auth): add password reset functionality
- Implement RequestPasswordResetUseCase to generate reset token
- Send password reset email with 1-hour expiration
- Implement ResetPasswordUseCase to verify token and update password
- Security: return success even if user not exists (avoid enumeration)
- Validate new password strength before reset
- Clear reset token after successful password change
- Add 9 comprehensive unit tests (all passed)

Phase 4 Task 8/68 completed
2026-06-17 01:25:53 +08:00
Xiaoxia AI f0d0edf449 feat(auth): add login, logout and refresh token use cases
- Implement LoginUseCase with password verification and JWT token generation
- Generate user_auth token (without workspace) for initial login
- Create session with refresh_token in Redis
- Track last_login_at and last_login_ip
- Implement LogoutUseCase for single device or all devices
- Add RefreshTokenUseCase placeholder (to be implemented)
- Add 9 comprehensive unit tests (all passed)

Phase 4 Task 7/68 completed
2026-06-17 01:24:45 +08:00
Xiaoxia AI e9e874404c feat(auth): add user registration with email verification
- Implement RegisterUserUseCase with password validation and email verification
- Implement VerifyEmailUseCase for email confirmation
- Add UserRepository interface and InMemoryUserRepository implementation
- Support duplicate email/username checking
- Generate verification tokens and send verification emails
- Add 9 comprehensive unit tests (all passed)

Phase 4 Task 6/68 completed
2026-06-17 01:20:40 +08:00
Xiaoxia AI 298ab93358 feat(auth): add email service with SMTP support
- Implement EmailService class with configurable SMTP
- Support verification/password-reset/invitation email templates
- Support HTML and plain text fallback
- Support CC/BCC recipients
- Add 8 comprehensive unit tests with Mock SMTP (all passed)

Phase 4 Task 4/68 completed
2026-06-17 01:17:19 +08:00
Xiaoxia AI 86ea3c7eef feat(auth): add Redis session store for refresh tokens
- Implement SessionStore class with Redis backend
- Support save/get/delete session and refresh_token
- Support user multi-device sessions management
- Add last_active tracking and force logout all devices
- Add 10 comprehensive unit tests with Mock Redis (all passed)
- Install redis dependency

Phase 4 Task 3/68 completed
2026-06-17 01:15:08 +08:00
Xiaoxia AI 1d8d7bddb9 feat(auth): add bcrypt password hasher with strength validator
- Implement PasswordHasher class with bcrypt (cost=12)
- Add PasswordValidator for password strength checking
- Support min length, uppercase, lowercase, digit, special chars
- Add 18 comprehensive unit tests (all passed)
- Install bcrypt dependency

Phase 4 Task 2/68 completed
2026-06-17 01:08:10 +08:00
Xiaoxia AI 2380bd9b92 feat(auth): add JWT service with sign/verify/refresh functionality
- Implement JWTService class with access_token and refresh_token support
- Add token type validation (access vs refresh)
- Add comprehensive unit tests (9 tests all passed)
- Install PyJWT dependency

Phase 4 Task 1/68 completed
2026-06-17 01:01:22 +08:00