gfds

migrations/add_deleted_user_ghost.sql

@@ -0,0 +1,13 @@
+-- Migration: deleted_user ghost account
+-- Deleted users' comments, tags, halls, reports, etc. are reassigned to this system account
+-- (see /api/v2/admin/users/delete, which also creates it on first use).
+-- It can never log in: password '!' matches no hash, it is not activated and it is banned.
+
+INSERT INTO public."user" (login, "user", password, admin, is_moderator, activated, banned, ban_reason, created_at)
+VALUES ('deleted_user', 'deleted_user', '!', false, false, false, true, 'System account', now())
+ON CONFLICT (login) DO NOTHING;
+
+INSERT INTO public.user_options (user_id, mode, theme, fullscreen, avatar, avatar_file, display_name)
+SELECT id, 0, 'amoled', 0, NULL, 'default.png', 'deleted user'
+FROM public."user" WHERE login = 'deleted_user'
+ON CONFLICT (user_id) DO NOTHING;

migrations/add_invite_requests.sql

@@ -0,0 +1,19 @@
+-- Migration: invite_requests
+-- Tracks anonymous users requesting invite tokens from admins
+
+CREATE TABLE IF NOT EXISTS public.invite_requests (
+    id SERIAL PRIMARY KEY,
+    user_id INTEGER REFERENCES public."user"(id) ON DELETE SET NULL,
+    fingerprint VARCHAR(128) NOT NULL,
+    ip_hash VARCHAR(128),
+    reason TEXT DEFAULT '',
+    status VARCHAR(16) DEFAULT 'pending' CHECK (status IN ('pending', 'approved', 'denied', 'revoked')),
+    token_id INTEGER REFERENCES public.invite_tokens(id) ON DELETE SET NULL,
+    reviewed_by INTEGER REFERENCES public."user"(id) ON DELETE SET NULL,
+    reviewed_at TIMESTAMP WITH TIME ZONE,
+    created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_invite_requests_fingerprint ON public.invite_requests(fingerprint);
+CREATE INDEX IF NOT EXISTS idx_invite_requests_status ON public.invite_requests(status);
+CREATE INDEX IF NOT EXISTS idx_invite_requests_pending ON public.invite_requests(created_at) WHERE (status = 'pending');

migrations/add_session_passkey_credential.sql

@@ -0,0 +1,6 @@
+-- Migration: remember which passkey opened a session
+-- Set on passkey sign-in (registered and anonymous). The passkey a session is using can't be deleted
+-- from that session, and the settings page marks it as "This session". NULL = password login or a
+-- session from before this column existed.
+
+ALTER TABLE public.user_sessions ADD COLUMN IF NOT EXISTS passkey_credential_id TEXT;