Update auth/models.py

auth/models.py

@@ -1,13 +1,155 @@
-from sqlalchemy import Column, Integer, String, DateTime
+"""
+models.py
+Enterprise ORM Models
+Basyx Whisper V10.1
+"""
+
 from datetime import datetime
-from .database import Base
+import uuid
+
+from sqlalchemy import (
+    Column,
+    String,
+    DateTime,
+    Boolean,
+    Index,
+    func,
+)
+from sqlalchemy.dialects.postgresql import UUID
+from sqlalchemy.orm import validates
+
+from database import Base
+
 
+# ==========================================================
+# USER MODEL
+# ==========================================================
 
 class User(Base):
+    """
+    Enterprise-grade User table
+    """
+
     __tablename__ = "users"
 
-    id = Column(Integer, primary_key=True, index=True)
-    email = Column(String, unique=True, index=True)
-    username = Column(String)
-    password_hash = Column(String)
-    createdAt = Column(DateTime, default=datetime.utcnow)
+    # ------------------------------------------------------
+    # Primary Identifier
+    # ------------------------------------------------------
+
+    id = Column(
+        UUID(as_uuid=True),
+        primary_key=True,
+        default=uuid.uuid4,
+        unique=True,
+        nullable=False,
+    )
+
+    # ------------------------------------------------------
+    # Identity Fields
+    # ------------------------------------------------------
+
+    email = Column(
+        String(255),
+        unique=True,
+        nullable=False,
+        index=True,
+    )
+
+    username = Column(
+        String(50),
+        unique=True,
+        nullable=False,
+        index=True,
+    )
+
+    password_hash = Column(
+        String(255),
+        nullable=False,
+    )
+
+    # ------------------------------------------------------
+    # Account State
+    # ------------------------------------------------------
+
+    is_active = Column(
+        Boolean,
+        default=True,
+        nullable=False,
+    )
+
+    is_verified = Column(
+        Boolean,
+        default=False,
+        nullable=False,
+    )
+
+    # ------------------------------------------------------
+    # Audit Fields
+    # ------------------------------------------------------
+
+    created_at = Column(
+        DateTime(timezone=True),
+        server_default=func.now(),
+        nullable=False,
+    )
+
+    updated_at = Column(
+        DateTime(timezone=True),
+        server_default=func.now(),
+        onupdate=func.now(),
+        nullable=False,
+    )
+
+    # ------------------------------------------------------
+    # VALIDATION LAYER
+    # ------------------------------------------------------
+
+    @validates("email")
+    def validate_email(self, key, value):
+        value = value.strip().lower()
+
+        if "@" not in value:
+            raise ValueError("Invalid email address")
+
+        if len(value) > 255:
+            raise ValueError("Email too long")
+
+        return value
+
+    @validates("username")
+    def validate_username(self, key, value):
+        value = value.strip()
+
+        if len(value) < 3:
+            raise ValueError("Username must be at least 3 characters")
+
+        if len(value) > 50:
+            raise ValueError("Username too long")
+
+        return value
+
+    # ------------------------------------------------------
+    # SERIALIZATION SAFE OUTPUT
+    # ------------------------------------------------------
+
+    def to_dict(self):
+        """
+        Safe public serialization
+        NEVER expose password_hash
+        """
+
+        return {
+            "id": str(self.id),
+            "email": self.email,
+            "username": self.username,
+            "createdAt": self.created_at.isoformat(),
+        }
+
+
+# ==========================================================
+# ENTERPRISE INDEX STRATEGY
+# ==========================================================
+
+Index("idx_users_email_unique", User.email, unique=True)
+Index("idx_users_username_unique", User.username, unique=True)
+Index("idx_users_created_at", User.created_at)