mirror of
https://github.com/tale/headplane.git
synced 2026-07-28 00:28:56 +00:00
Aarnav Tale
684a95b5e8
Security: - Add unique constraint on headscale_user_id to prevent hijacking - linkHeadscaleUser now rejects already-claimed Headscale users - Onboarding dropdown filters out claimed users - onboarding-skip action redirects on rejected claims Maintenance: - Replace probabilistic session pruning with setInterval (15m) - Move pruning out of request path into server startup Co-authored-by: Amp <amp@ampcode.com> Amp-Thread-ID: https://ampcode.com/threads/T-019cce57-c9e1-7732-9709-8288127573a9
23 lines
1.1 KiB
SQL
23 lines
1.1 KiB
SQL
CREATE TABLE `auth_sessions` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`kind` text NOT NULL,
|
|
`user_id` text,
|
|
`api_key_hash` text,
|
|
`api_key_display` text,
|
|
`expires_at` integer NOT NULL,
|
|
`created_at` integer
|
|
);
|
|
--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `role` text DEFAULT 'member' NOT NULL;--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `headscale_user_id` text;--> statement-breakpoint
|
|
CREATE UNIQUE INDEX `users_headscale_user_id_unique` ON `users` (`headscale_user_id`);--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `created_at` integer;--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `updated_at` integer;--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `last_login_at` integer;--> statement-breakpoint
|
|
|
|
-- Backfill role from caps for existing users
|
|
UPDATE `users` SET `role` = 'owner' WHERE `caps` = 65535;--> statement-breakpoint
|
|
UPDATE `users` SET `role` = 'admin' WHERE `caps` = 32767;--> statement-breakpoint
|
|
UPDATE `users` SET `role` = 'network_admin' WHERE `caps` = 30015;--> statement-breakpoint
|
|
UPDATE `users` SET `role` = 'it_admin' WHERE `caps` = 8171;--> statement-breakpoint
|
|
UPDATE `users` SET `role` = 'auditor' WHERE `caps` = 66859; |