bvandeusen
3c70ac56b3
- Add OIDC (OpenID Connect) authentication with discovery URL support, group-based role mapping, and token introspection - Add LDAP authentication with bind credentials, group-based role mapping, and configurable attribute names - Add audit log (model, routes, templates) tracking settings changes, plugin enable/disable, login events - Add migrations 0009 (widget variants), 0010 (maintenance windows), 0011 (audit log) - Add optional dependency groups to pyproject.toml: [ldap], [snmp] - Add Settings → Auth tab with OIDC and LDAP configuration forms Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
1.2 KiB
Python
36 lines
1.2 KiB
Python
"""Audit log table
|
|
|
|
Revision ID: 0011_audit_log
|
|
Revises: 0010_maintenance_windows
|
|
Create Date: 2026-03-22
|
|
"""
|
|
from typing import Sequence, Union
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
revision: str = "0011_audit_log"
|
|
down_revision: Union[str, None] = "0010_maintenance_windows"
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
"audit_events",
|
|
sa.Column("id", sa.String(36), primary_key=True),
|
|
sa.Column("timestamp", sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column("user_id", sa.String(36),
|
|
sa.ForeignKey("users.id", ondelete="SET NULL"), nullable=True),
|
|
sa.Column("username", sa.String(64), nullable=False, server_default="system"),
|
|
sa.Column("action", sa.String(64), nullable=False),
|
|
sa.Column("entity_type", sa.String(64), nullable=True),
|
|
sa.Column("entity_id", sa.String(255), nullable=True),
|
|
sa.Column("detail_json", sa.Text, nullable=True),
|
|
)
|
|
op.create_index("ix_audit_events_timestamp", "audit_events", ["timestamp"])
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_index("ix_audit_events_timestamp", "audit_events")
|
|
op.drop_table("audit_events")
|