Dionisio
f2d35ca792
- JWT secret auto-generates and persists to <STORAGE_PATH>/.jwt_secret - Remove setup token: first admin setup is open until system initialized - Fix schema.sql: move CREATE EXTENSION pg_trgm/ltree to top - Update login UI and auth.js to remove setup token fields
86 lines
2.7 KiB
Rust
Executable File
86 lines
2.7 KiB
Rust
Executable File
//! DTOs for App Password (application-specific passwords for DAV clients).
|
|
|
|
use serde::{Deserialize, Serialize};
|
|
|
|
// ============================================================================
|
|
// Request DTOs
|
|
// ============================================================================
|
|
|
|
/// POST /api/auth/app-passwords — create a new app password
|
|
#[derive(Debug, Deserialize)]
|
|
pub struct CreateAppPasswordRequestDto {
|
|
/// Human-readable label (e.g. "DAVx5 on Pixel 8")
|
|
pub label: String,
|
|
/// Comma-separated scopes (defaults to all DAV protocols)
|
|
#[serde(default = "default_scopes")]
|
|
pub scopes: String,
|
|
/// Optional expiration in days (None = never expires)
|
|
pub expires_in_days: Option<u32>,
|
|
}
|
|
|
|
fn default_scopes() -> String {
|
|
"webdav,caldav,carddav".to_string()
|
|
}
|
|
|
|
// ============================================================================
|
|
// Response DTOs
|
|
// ============================================================================
|
|
|
|
/// Response when an app password is created — includes the plain-text password
|
|
/// that is shown ONCE to the user.
|
|
#[derive(Debug, Serialize)]
|
|
pub struct AppPasswordCreatedResponseDto {
|
|
/// Unique identifier for this app password.
|
|
pub id: String,
|
|
/// The label chosen by the user.
|
|
pub label: String,
|
|
/// The plain-text app password — shown only ONCE.
|
|
/// Format: `oxicloud-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX`
|
|
pub password: String,
|
|
/// The username to use with HTTP Basic Auth.
|
|
pub username: String,
|
|
/// Active scopes.
|
|
pub scopes: String,
|
|
/// Expiration date or null for never.
|
|
pub expires_at: Option<String>,
|
|
/// Usage instructions for common clients.
|
|
pub instructions: AppPasswordInstructions,
|
|
}
|
|
|
|
/// Usage instructions included in the creation response.
|
|
#[derive(Debug, Serialize)]
|
|
pub struct AppPasswordInstructions {
|
|
pub davx5: String,
|
|
pub thunderbird: String,
|
|
pub rclone: String,
|
|
pub curl_example: String,
|
|
}
|
|
|
|
/// Summary of an app password (list view — never includes the plain-text password).
|
|
#[derive(Debug, Serialize)]
|
|
pub struct AppPasswordSummaryDto {
|
|
pub id: String,
|
|
pub label: String,
|
|
/// First 8 chars of the token for identification.
|
|
pub prefix: String,
|
|
pub scopes: String,
|
|
pub created_at: String,
|
|
pub last_used_at: Option<String>,
|
|
pub expires_at: Option<String>,
|
|
pub active: bool,
|
|
}
|
|
|
|
/// Response for list endpoint.
|
|
#[derive(Debug, Serialize)]
|
|
pub struct AppPasswordListResponseDto {
|
|
pub app_passwords: Vec<AppPasswordSummaryDto>,
|
|
pub total: usize,
|
|
}
|
|
|
|
/// Response for revoke endpoint.
|
|
#[derive(Debug, Serialize)]
|
|
pub struct AppPasswordRevokeResponseDto {
|
|
pub status: String,
|
|
pub id: String,
|
|
}
|