Kyle Pope
27c65ce40d
Backend: - Add Literal types for status/priority fields (project_task, todo, project schemas) - Add AccentColor Literal validation to prevent CSS injection (settings schema) - Add PIN max-length (72 char bcrypt limit) validation - Fix event date filtering to use correct range overlap logic - Add revocation check to auth_status endpoint for consistency - Config: env-aware SECRET_KEY fail-fast, configurable COOKIE_SECURE Frontend: - Add withCredentials to axios for cross-origin cookie support - Replace .toISOString() with local date formatter in DashboardPage - Replace `as any` casts with proper indexed type access in forms - Nginx: add CSP, Referrer-Policy headers; remove deprecated X-XSS-Protection - Nginx: duplicate security headers in static asset location block Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
48 lines
1.1 KiB
Python
48 lines
1.1 KiB
Python
from pydantic import BaseModel, ConfigDict, field_validator
|
|
from datetime import datetime
|
|
from typing import Literal, Optional
|
|
|
|
AccentColor = Literal["cyan", "blue", "green", "purple", "red", "orange", "pink", "yellow"]
|
|
|
|
|
|
def _validate_pin_length(v: str, label: str = "PIN") -> str:
|
|
if len(v) < 4:
|
|
raise ValueError(f'{label} must be at least 4 characters')
|
|
if len(v) > 72:
|
|
raise ValueError(f'{label} must be at most 72 characters')
|
|
return v
|
|
|
|
|
|
class SettingsCreate(BaseModel):
|
|
pin: str
|
|
|
|
@field_validator('pin')
|
|
@classmethod
|
|
def pin_length(cls, v: str) -> str:
|
|
return _validate_pin_length(v)
|
|
|
|
|
|
class SettingsUpdate(BaseModel):
|
|
accent_color: Optional[AccentColor] = None
|
|
upcoming_days: int | None = None
|
|
|
|
|
|
class SettingsResponse(BaseModel):
|
|
id: int
|
|
accent_color: str
|
|
upcoming_days: int
|
|
created_at: datetime
|
|
updated_at: datetime
|
|
|
|
model_config = ConfigDict(from_attributes=True)
|
|
|
|
|
|
class ChangePinRequest(BaseModel):
|
|
old_pin: str
|
|
new_pin: str
|
|
|
|
@field_validator('new_pin')
|
|
@classmethod
|
|
def new_pin_length(cls, v: str) -> str:
|
|
return _validate_pin_length(v, "New PIN")
|