feat: another security sweep

2026-02-04 22:02:24 -08:00
parent 5eae636f2f
commit 9caf74945a
10 changed files with 416 additions and 36 deletions
@@ -163,22 +163,23 @@ enum MangaStatus {
 }

 model User {
-  id           String       @id @default(auto()) @map("_id") @db.ObjectId
-  discordId    String       @unique
-  username     String
-  email        String       @unique
-  avatar       String?
-  isAdmin      Boolean      @default(false)
-  isBanned     Boolean      @default(false)
-  inDiscord    Boolean      @default(false)
-  isVip        Boolean      @default(false)
-  isMod        Boolean      @default(false)
-  isStaff      Boolean      @default(false)
-  createdAt    DateTime     @default(now())
-  updatedAt    DateTime     @updatedAt
-  comments     Comment[]
-  suggestions  Suggestion[]
-  likes        Like[]
+  id            String         @id @default(auto()) @map("_id") @db.ObjectId
+  discordId     String         @unique
+  username      String
+  email         String         @unique
+  avatar        String?
+  isAdmin       Boolean        @default(false)
+  isBanned      Boolean        @default(false)
+  inDiscord     Boolean        @default(false)
+  isVip         Boolean        @default(false)
+  isMod         Boolean        @default(false)
+  isStaff       Boolean        @default(false)
+  createdAt     DateTime       @default(now())
+  updatedAt     DateTime       @updatedAt
+  comments      Comment[]
+  suggestions   Suggestion[]
+  likes         Like[]
+  refreshTokens RefreshToken[]
 }

 model Comment {
@@ -289,3 +290,15 @@ model Like {

  @@unique([userId, entityType, entityId])
 }
+
+model RefreshToken {
+  id           String    @id @default(auto()) @map("_id") @db.ObjectId
+  token        String    @unique
+  userId       String    @db.ObjectId
+  user         User      @relation(fields: [userId], references: [id])
+  expiresAt    DateTime
+  createdAt    DateTime  @default(now())
+
+  @@index([userId])
+  @@index([expiresAt])
+}