dtoro
348e9c3585
Introduce username/password authentication with admin and user roles.
Each user gets their own media directory under /photos/{username}/ with
isolated photos, folders, heaps, and tags. Admins manage users and
observe the full library from a dedicated Settings page.
Backend:
- User model with bcrypt passwords and JWT access/refresh tokens
- Auth router (login, refresh, setup, change-password, status)
- Admin router (user CRUD with last-admin protection)
- user_id FK added to photos, folders, source_roots, heaps, tags
- All data routers scoped by authenticated user
- Scanner inherits user_id from source root owner
- Thumbnails stored under user-prefixed paths for isolation
- Library endpoints accept ?scope=global for admin cross-user view
- Alembic migration 0009 with data migration for existing installs
- Defensive bootstrap.py handles fresh vs existing DB startup
Frontend:
- AuthContext with token lifecycle, auto-refresh, login/logout
- Login page, first-run setup page, auth gate in App.tsx
- Bearer token interceptor on all API requests
- User identity + logout in left sidebar
- Admin-only Settings page with Library Management and Users tabs
- UserManagement panel (add, edit role, reset password, deactivate)
- Settings shows global stats across all users for admin
- Filter bar, right sidebar, keyboard hints hidden on settings page
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
55 lines
1.9 KiB
Python
55 lines
1.9 KiB
Python
"""Post-init_db bootstrap: run or stamp Alembic migrations.
|
|
|
|
On a FRESH Postgres install, init_db's create_all has already built the
|
|
full schema from the current models. Running `alembic upgrade head` would
|
|
fail because the older migrations try ADD COLUMN on columns that already
|
|
exist. So we detect the fresh-install case (alembic_version table is
|
|
missing or empty) and `stamp head` instead.
|
|
|
|
On an EXISTING install, the alembic_version table has a revision and
|
|
`upgrade head` applies only the new deltas.
|
|
"""
|
|
import subprocess
|
|
import sys
|
|
|
|
from sqlalchemy import create_engine, text, inspect
|
|
from app.config import settings
|
|
|
|
|
|
def run():
|
|
# Use a sync engine for this one-shot script.
|
|
sync_url = settings.database_url.replace("+asyncpg", "").replace("+aiosqlite", "")
|
|
engine = create_engine(sync_url)
|
|
|
|
with engine.connect() as conn:
|
|
inspector = inspect(engine)
|
|
tables = inspector.get_table_names()
|
|
|
|
if "alembic_version" not in tables:
|
|
# Fresh install — create_all built everything. Stamp head.
|
|
print("Fresh install detected — stamping alembic head")
|
|
subprocess.run(
|
|
[sys.executable, "-m", "alembic", "stamp", "head"],
|
|
check=True,
|
|
)
|
|
else:
|
|
row = conn.execute(text("SELECT version_num FROM alembic_version")).first()
|
|
if row is None:
|
|
print("Empty alembic_version — stamping head")
|
|
subprocess.run(
|
|
[sys.executable, "-m", "alembic", "stamp", "head"],
|
|
check=True,
|
|
)
|
|
else:
|
|
print(f"Existing install at revision {row[0]} — running alembic upgrade head")
|
|
subprocess.run(
|
|
[sys.executable, "-m", "alembic", "upgrade", "head"],
|
|
check=True,
|
|
)
|
|
|
|
engine.dispose()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
run()
|