62 lines
1.9 KiB
Python
62 lines
1.9 KiB
Python
# app/db/repositories/password_reset.py
|
||
import hashlib
|
||
from typing import Optional, Dict, Any
|
||
from datetime import datetime, timedelta, timezone
|
||
|
||
from asyncpg import Connection
|
||
from app.db.queries.queries import queries
|
||
|
||
|
||
class PasswordResetRepository:
|
||
def __init__(self, conn: Connection) -> None:
|
||
self.connection = conn
|
||
|
||
@staticmethod
|
||
def _hash(token: str) -> str:
|
||
return hashlib.sha256(token.encode("utf-8")).hexdigest()
|
||
|
||
async def create(
|
||
self,
|
||
*,
|
||
user_id: int,
|
||
token: str,
|
||
ttl_minutes: int,
|
||
request_ip: Optional[str],
|
||
user_agent: Optional[str],
|
||
) -> Dict[str, Any]:
|
||
"""
|
||
创建一次性重置令牌（仅存 token 的哈希）。
|
||
返回数据库返回的行（dict/record 兼容为 Dict[str, Any]）。
|
||
"""
|
||
return await queries.create_password_reset_token(
|
||
self.connection,
|
||
user_id=user_id,
|
||
token_hash=self._hash(token),
|
||
expires_at=datetime.now(timezone.utc) + timedelta(minutes=ttl_minutes),
|
||
request_ip=request_ip,
|
||
user_agent=user_agent,
|
||
)
|
||
|
||
async def get_valid(self, *, token: str) -> Optional[Dict[str, Any]]:
|
||
"""
|
||
根据明文 token 查找并校验是否可用：
|
||
- 存在
|
||
- 未使用
|
||
- 未过期
|
||
返回行 dict；无效则返回 None。
|
||
"""
|
||
row = await queries.get_password_reset_token_by_hash(
|
||
self.connection, token_hash=self._hash(token)
|
||
)
|
||
if not row:
|
||
return None
|
||
if row["used_at"] is not None:
|
||
return None
|
||
if row["expires_at"] <= datetime.now(timezone.utc):
|
||
return None
|
||
return row
|
||
|
||
async def mark_used(self, *, token_id: int) -> None:
|
||
"""将重置令牌标记为已使用。"""
|
||
await queries.mark_password_reset_token_used(self.connection, id=token_id)
|