Private
Public Access
ksmithandClaude Sonnet 5
b26643527d
Replaces the stateless signed-cookie session (bare user_id) with a real server-side sessions table -- the cookie now just carries an opaque session id, resolved against the DB on every request. Each session records IP address (respects X-Forwarded-For), a parsed device label, and last-seen time (throttled updates, not written on every request). New GET/DELETE /api/auth/sessions endpoints and an "Active sessions" section in Profile settings let a user see every device they're logged in from and revoke one they don't recognize -- including their own current session, which just signs them out. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
51 lines
1.6 KiB
Python
51 lines
1.6 KiB
Python
from app.models.admin_audit_log import AdminAuditLog
|
|
from app.models.api_token import ApiToken
|
|
from app.models.base import Base
|
|
from app.models.custom_theme import CustomTheme
|
|
from app.models.event_subscription import EventSubscription
|
|
from app.models.invite import InviteStatus
|
|
from app.models.link_preview import LinkPreview
|
|
from app.models.membership import RoomMembership, RoomRole
|
|
from app.models.message import Message
|
|
from app.models.message_file import MessageFile
|
|
from app.models.message_image import MessageImage
|
|
from app.models.message_mention import MessageMention
|
|
from app.models.message_reaction import MessageReaction
|
|
from app.models.message_room_reference import MessageRoomReference
|
|
from app.models.password_reset import PasswordReset
|
|
from app.models.push_subscription import PushSubscription
|
|
from app.models.room import Room
|
|
from app.models.session import Session
|
|
from app.models.site_invite import SiteInvite
|
|
from app.models.smtp_settings import SmtpSettings
|
|
from app.models.upload_settings import UploadSettings
|
|
from app.models.user import User
|
|
from app.models.webhook_incoming import WebhookIncoming
|
|
|
|
__all__ = [
|
|
"Base",
|
|
"User",
|
|
"Room",
|
|
"RoomMembership",
|
|
"RoomRole",
|
|
"Message",
|
|
"MessageFile",
|
|
"MessageImage",
|
|
"MessageMention",
|
|
"MessageReaction",
|
|
"MessageRoomReference",
|
|
"InviteStatus",
|
|
"PasswordReset",
|
|
"Session",
|
|
"SiteInvite",
|
|
"SmtpSettings",
|
|
"UploadSettings",
|
|
"PushSubscription",
|
|
"AdminAuditLog",
|
|
"ApiToken",
|
|
"WebhookIncoming",
|
|
"EventSubscription",
|
|
"CustomTheme",
|
|
"LinkPreview",
|
|
]
|