mirror of
https://github.com/rgrgogu/new_starr.git
synced 2026-09-27 00:12:54 +08:00
kennethobsequioandClaude Sonnet 5
eaa6d2276a
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
59 lines
2.7 KiB
JavaScript
59 lines
2.7 KiB
JavaScript
/***********************************************************************************************************************************************************************
|
|
* File Name: trusted_devices.mdl.js
|
|
* Type of Program: Model
|
|
* Description: Sequelize model for the `trusted_devices` table.
|
|
* One rolling row per (user_id, fingerprint_hash) — lets a login
|
|
* from an already-verified device skip the OTP gate until the
|
|
* trust window lapses or is explicitly revoked.
|
|
* Has a Many-to-One relationship with Users and UserSessions.
|
|
* Author: Kenneth Obsequio
|
|
* Date Created: Jul. 5, 2026
|
|
***********************************************************************************************************************************************************************/
|
|
const { DataTypes } = require('sequelize');
|
|
const sequelize = require('../../config/db.config');
|
|
const mdl_Users = require('./users.mdl');
|
|
const mdl_UserSessions = require('./user_sessions.mdl');
|
|
|
|
const mdl_TrustedDevices = sequelize.define('TrustedDevices', {
|
|
id: { type: DataTypes.BIGINT, primaryKey: true, autoIncrement: true },
|
|
user_id: {
|
|
type: DataTypes.BIGINT,
|
|
allowNull: false,
|
|
references: { model: mdl_Users, key: 'user_id' },
|
|
},
|
|
|
|
// SHA-256 of the opaque token stored in the `device_trust` cookie.
|
|
device_token_hash: { type: DataTypes.TEXT, allowNull: false },
|
|
|
|
// SHA-256 of `browser|os|device` parsed from the User-Agent header.
|
|
fingerprint_hash: { type: DataTypes.TEXT, allowNull: false },
|
|
|
|
// Most recent user_sessions row minted for this device — lets a single
|
|
// session termination revoke just this device's trust.
|
|
last_session_id: {
|
|
type: DataTypes.BIGINT,
|
|
allowNull: true,
|
|
references: { model: mdl_UserSessions, key: 'session_id' },
|
|
},
|
|
|
|
expires_at: { type: DataTypes.DATE, allowNull: false },
|
|
revoked_at: { type: DataTypes.DATE, allowNull: true },
|
|
|
|
// ── Audit trails ────────────────────────────────────────────────────────────
|
|
createdBy: { type: DataTypes.BIGINT, allowNull: true, label: "Created By" },
|
|
updatedBy: { type: DataTypes.BIGINT, allowNull: true, label: "Modified By" },
|
|
deletedBy: { type: DataTypes.BIGINT, allowNull: true, label: "Deleted By" },
|
|
}, {
|
|
tableName: 'trusted_devices',
|
|
timestamps: true,
|
|
paranoid: true, // enables soft delete — sets deleted_at instead of DELETE
|
|
});
|
|
|
|
// Associations
|
|
mdl_TrustedDevices.belongsTo(mdl_Users, { foreignKey: 'user_id' });
|
|
mdl_Users.hasMany(mdl_TrustedDevices, { foreignKey: 'user_id' });
|
|
|
|
mdl_TrustedDevices.belongsTo(mdl_UserSessions, { foreignKey: 'last_session_id' });
|
|
|
|
module.exports = mdl_TrustedDevices;
|