Upload app/modules/auth/schemas.py with huggingface_hub

app/modules/auth/schemas.py

@@ -0,0 +1,114 @@
+from datetime import datetime
+
+from pydantic import BaseModel, Field
+
+
+# Authentication models
+class LoginRequest(BaseModel):
+    email: str = Field(pattern=r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$")
+    password: str = Field(min_length=8)
+    mfa_code: str | None = None
+
+
+class TokenResponse(BaseModel):
+    access_token: str
+    refresh_token: str
+    token_type: str = "bearer"
+    expires_in: int = 1800  # 30 minutes
+
+
+class UserCreateRequest(BaseModel):
+    username: str = Field(min_length=3, max_length=50)
+    email: str = Field(pattern=r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$")
+    full_name: str = Field(min_length=1, max_length=100)
+    role: str = Field(pattern=r"^(analyst|senior_analyst|investigator|manager|admin)$")
+
+
+class RegisterRequest(BaseModel):
+    username: str = Field(min_length=3, max_length=50)
+    email: str = Field(pattern=r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$")
+    password: str = Field(min_length=8, max_length=128)
+    full_name: str = Field(min_length=1, max_length=100)
+    role: str | None = "ANALYST"  # Default role
+
+
+class UserProfileResponse(BaseModel):
+    id: str
+    username: str
+    email: str
+    full_name: str
+    role: str
+    is_active: bool
+    mfa_enabled: bool
+    created_at: datetime
+    last_login: datetime | None
+
+
+class RegisterResponse(BaseModel):
+    user_id: str
+    username: str
+    email: str
+    message: str
+    created_at: datetime
+
+
+class MFAVerifyRequest(BaseModel):
+    code: str
+
+
+class MFASetupResponse(BaseModel):
+    secret: str
+    otpauth_url: str
+
+
+class MFAVerifyResponse(BaseModel):
+    verified: bool
+    message: str
+
+
+# Password Reset Schemas
+class PasswordResetRequest(BaseModel):
+    email: str = Field(pattern=r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$")
+
+
+class PasswordResetConfirm(BaseModel):
+    token: str = Field(min_length=10)
+    password: str = Field(min_length=8, max_length=128)
+
+
+# Session Management Schemas
+class SessionInfo(BaseModel):
+    id: str
+    device_type: str = Field(enum=["desktop", "mobile", "tablet"])
+    device_name: str
+    browser: str
+    ip_address: str
+    location: str
+    last_active: str
+    is_current_session: bool
+    is_trusted: bool
+
+
+# Security Monitoring Schemas
+class LoginAttempt(BaseModel):
+    id: str
+    timestamp: str
+    email: str
+    ip_address: str
+    user_agent: str
+    location: str
+    success: bool
+    failure_reason: str | None
+    device_type: str = Field(enum=["desktop", "mobile", "tablet"])
+
+
+class SecurityMetrics(BaseModel):
+    total_attempts: int
+    successful_logins: int
+    failed_attempts: int
+    unique_ips: int
+    suspicious_activities: int
+    blocked_ips: int
+    average_response_time: int
+    peak_hours: list[str]
+    recent_attempts: list[LoginAttempt]