Introduce username/password authentication with admin and user roles.
Each user gets their own media directory under /photos/{username}/ with
isolated photos, folders, heaps, and tags. Admins manage users and
observe the full library from a dedicated Settings page.
Backend:
- User model with bcrypt passwords and JWT access/refresh tokens
- Auth router (login, refresh, setup, change-password, status)
- Admin router (user CRUD with last-admin protection)
- user_id FK added to photos, folders, source_roots, heaps, tags
- All data routers scoped by authenticated user
- Scanner inherits user_id from source root owner
- Thumbnails stored under user-prefixed paths for isolation
- Library endpoints accept ?scope=global for admin cross-user view
- Alembic migration 0009 with data migration for existing installs
- Defensive bootstrap.py handles fresh vs existing DB startup
Frontend:
- AuthContext with token lifecycle, auto-refresh, login/logout
- Login page, first-run setup page, auth gate in App.tsx
- Bearer token interceptor on all API requests
- User identity + logout in left sidebar
- Admin-only Settings page with Library Management and Users tabs
- UserManagement panel (add, edit role, reset password, deactivate)
- Settings shows global stats across all users for admin
- Filter bar, right sidebar, keyboard hints hidden on settings page
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
63 lines
1.6 KiB
Plaintext
63 lines
1.6 KiB
Plaintext
# Core dependencies
|
|
fastapi==0.109.0
|
|
uvicorn[standard]==0.27.0
|
|
python-multipart==0.0.6
|
|
|
|
# Database
|
|
sqlalchemy[asyncio]==2.0.25
|
|
aiosqlite==0.19.0 # SQLite escape hatch (docker-compose.sqlite.yml override)
|
|
asyncpg==0.29.0 # async Postgres driver (default)
|
|
psycopg2-binary==2.9.9 # sync Postgres driver, used by Alembic CLI
|
|
pgvector==0.2.5 # pgvector SQLAlchemy types
|
|
alembic==1.13.1
|
|
|
|
# Redis and Celery
|
|
redis==5.0.1
|
|
celery==5.3.6
|
|
flower==2.0.1
|
|
|
|
# Image processing
|
|
# pyvips==2.2.1 # Optional - having compatibility issues, using Pillow as fallback
|
|
# rawpy==0.19.0 # Optional - numpy compatibility issues, using Pillow as fallback
|
|
pillow==10.2.0
|
|
pillow-heif==0.15.0
|
|
imagehash==4.3.1 # perceptual hash for duplicate detection
|
|
imageio==2.33.1
|
|
imageio-ffmpeg==0.4.9
|
|
|
|
# Video processing
|
|
ffmpeg-python==0.2.0
|
|
|
|
# Metadata extraction
|
|
pyexiftool==0.5.6
|
|
|
|
# File watching
|
|
watchfiles==0.21.0
|
|
|
|
# Vision pipeline (ONNX Runtime CPU inference)
|
|
onnxruntime==1.18.1
|
|
open-clip-torch==2.24.0 # tokenizer + export helper; inference via ONNX
|
|
ultralytics==8.4.37 # YOLOv8n export helper; inference via ONNX
|
|
rapidocr-onnxruntime==1.3.22
|
|
scikit-learn==1.4.0 # DBSCAN for face clustering
|
|
insightface>=0.7.3 # RetinaFace + ArcFace face detection/recognition
|
|
numpy>=1.26.0,<2.0
|
|
|
|
# Utilities
|
|
pyyaml==6.0.1
|
|
pydantic==2.5.3
|
|
pydantic-settings==2.1.0
|
|
python-dotenv==1.0.0
|
|
httpx==0.26.0
|
|
aiofiles==23.2.1
|
|
|
|
# Security and authentication
|
|
python-jose[cryptography]==3.3.0
|
|
passlib[bcrypt]==1.7.4
|
|
bcrypt==4.0.1
|
|
|
|
# Development
|
|
pytest==7.4.4
|
|
pytest-asyncio==0.23.3
|
|
black==23.12.1
|
|
ruff==0.1.11 |