mirror of
https://github.com/tiennm99/DocsGPT.git
synced 2026-10-17 08:13:59 +00:00
Alex
574f96341e
The backend import package is now docsgpt, the name it will carry on PyPI; application was far too generic to install into anyone's site-packages. git mv plus a mechanical rewrite of every import, dotted string and path reference: 734 Python files, the compose files, Dockerfile, workflows, docs, setup scripts, devcontainer, k8s manifests, vscode config, pytest and coverage config, .gitignore. Behaviour is unchanged. Kept for one release: - A top-level application package whose meta-path finder resolves application.x.y to the already-imported docsgpt.x.y object, so old imports and entry points (celery -A application.app.celery, uvicorn application.asgi:asgi_app) keep working with a FutureWarning. - Celery registers every application.* task name as an alias of its docsgpt.* task on start-up, so messages queued by the previous release still run. The redbeat key prefix moves to redbeat:docsgpt:v2: so schedule entries the previous release wrote are left unread instead of firing twice. The backend image builds from the repository root (docker build -f docsgpt/Dockerfile .) so it can ship the alias package; a root .dockerignore allow-lists docsgpt/ and application/ and keeps caches, local data, .env files, the sample index files and the Dockerfile out. Compose and the image workflows point at the new context.
49 lines
1.6 KiB
Python
49 lines
1.6 KiB
Python
"""0017 oidc scim — users.active flag + auth_events audit table.
|
|
|
|
``users.active`` backs SCIM deprovisioning: deactivated users are refused new
|
|
OIDC sessions and their live sessions are denylisted until they expire.
|
|
``auth_events`` is an append-only audit trail of login / logout / provisioning
|
|
events keyed by ``user_id``.
|
|
|
|
Revision ID: 0017_oidc_scim
|
|
Revises: 0016_conversation_visibility
|
|
"""
|
|
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
|
|
|
|
revision: str = "0017_oidc_scim"
|
|
down_revision: Union[str, None] = "0016_conversation_visibility"
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
# IF NOT EXISTS keeps the migration idempotent: re-applying it over a
|
|
# partially-migrated or out-of-band-patched schema must not abort the whole
|
|
# upgrade (which would wedge startup with alembic_version stuck behind head).
|
|
op.execute("ALTER TABLE users ADD COLUMN IF NOT EXISTS active BOOLEAN NOT NULL DEFAULT TRUE;")
|
|
op.execute(
|
|
"""
|
|
CREATE TABLE IF NOT EXISTS auth_events (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
user_id TEXT NOT NULL,
|
|
event TEXT NOT NULL,
|
|
ip TEXT,
|
|
user_agent TEXT,
|
|
metadata JSONB NOT NULL DEFAULT '{}',
|
|
created_at TIMESTAMPTZ NOT NULL DEFAULT now()
|
|
);
|
|
"""
|
|
)
|
|
op.execute(
|
|
"CREATE INDEX IF NOT EXISTS auth_events_user_idx ON auth_events (user_id, created_at DESC);"
|
|
)
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.execute("DROP TABLE IF EXISTS auth_events;")
|
|
op.execute("ALTER TABLE users DROP COLUMN IF EXISTS active;")
|