bonaminandClaude Opus 5.5
96a014ecbe
Sites now enforce their license offline (client-services KI-006): the
cloud is needed to renew a license, not to run it. Each heartbeat carries
license_token = base64url(payload).base64url(signature), payload
{v:1, site_id, active, locked, lock_reason, expires_at, issued_at}, signed
with LICENSE_SIGNING_KEY (base64 raw Ed25519 private key, cloud .env). The
matching public key is built into the site code, so a stored token can't be
edited and a clock can't be set before issued_at unnoticed.
Additive field only (old sites ignore it). Without the key the field is
null and a warning is logged. Pins cryptography==46.0.4 (was transitive).
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
78 lines
1.9 KiB
Python
78 lines
1.9 KiB
Python
from datetime import datetime
|
|
from pydantic import BaseModel
|
|
|
|
|
|
class SiteCreate(BaseModel):
|
|
name: str
|
|
owner_name: str
|
|
contact_email: str
|
|
license_expires_at: datetime
|
|
|
|
|
|
class SiteUpdate(BaseModel):
|
|
name: str | None = None
|
|
owner_name: str | None = None
|
|
contact_email: str | None = None
|
|
license_expires_at: datetime | None = None
|
|
waiter_domain: str | None = None
|
|
menu_mode: str | None = None
|
|
menu_display_name: str | None = None
|
|
menu_tagline_en: str | None = None
|
|
menu_tagline_gr: str | None = None
|
|
menu_blurb_en: str | None = None
|
|
menu_blurb_gr: str | None = None
|
|
menu_hours: str | None = None
|
|
|
|
|
|
class SiteOut(BaseModel):
|
|
id: int
|
|
site_id: str
|
|
name: str
|
|
owner_name: str
|
|
contact_email: str
|
|
is_active: bool
|
|
is_locked: bool
|
|
lock_reason: str | None
|
|
license_expires_at: datetime
|
|
created_at: datetime
|
|
last_seen_at: datetime | None
|
|
last_seen_ip: str | None
|
|
last_seen_local_ip: str | None
|
|
waiter_domain: str | None
|
|
menu_mode: str
|
|
menu_display_name: str | None
|
|
menu_tagline_en: str | None
|
|
menu_tagline_gr: str | None
|
|
menu_blurb_en: str | None
|
|
menu_blurb_gr: str | None
|
|
menu_hours: str | None
|
|
menu_header_image_url: str | None
|
|
|
|
model_config = {"from_attributes": True}
|
|
|
|
|
|
class SiteCreatedOut(SiteOut):
|
|
secret_key: str
|
|
|
|
|
|
class LockRequest(BaseModel):
|
|
reason: str
|
|
|
|
|
|
class HeartbeatRequest(BaseModel):
|
|
version: str = "1.0.0"
|
|
uptime_seconds: int = 0
|
|
local_ip: str | None = None
|
|
|
|
|
|
class HeartbeatResponse(BaseModel):
|
|
licensed: bool
|
|
locked: bool
|
|
lock_reason: str | None
|
|
expires_at: datetime
|
|
latest_version: str | None = None
|
|
waiter_domain: str | None = None
|
|
site_numeric_id: int | None = None # cloud DB pk — needed by Connect sync loops
|
|
# Signed license the site stores and enforces offline (services/license_token.py)
|
|
license_token: str | None = None
|