seaislee1209andClaude Opus 4.8
ba855cc219
- Invitation 模型:team/code(TEAM-XXXX-XXXX唯一)/role/email/月额度/created_by/expires_at(7天)/ used_by/used_at/status(pending/used/revoked/expired);迁移 accounts/0003(未 apply 远程库,rule 3) - RegisterSerializer 加 invite_code:有效码→幂等 get_or_create 成员+标used+跳过额度发放; 无码→开新团队当 owner+试用额度(原逻辑);邀请 role 不许 OWNER 降级 ADMIN;不存在/已用/过期→400 - 端点 /api/auth/team/invitations/(GET列/POST生成)+ <id>/revoke/;权限复用 can_manage_team(超管/团管) 验证: django check 0;apps.accounts 测试 5/5 OK —— 含「凭码加入同团队/角色额度对/不重复发额度/ 未知码400/普通成员生成403」。认证定调:username 为主标识、不用邮箱注册。 ⚠️ Invitation 迁移需用户低峰 apply 到远程 MySQL,前端生成码 e2e 才能跑(逻辑已被测试证)。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
39 lines
1.4 KiB
Python
39 lines
1.4 KiB
Python
from django.urls import path
|
|
|
|
from .views import (
|
|
change_password,
|
|
login,
|
|
login_sessions,
|
|
logout,
|
|
me,
|
|
preferences,
|
|
register,
|
|
revoke_invitation,
|
|
revoke_login_session,
|
|
revoke_other_sessions,
|
|
team_invitations,
|
|
team_member_detail,
|
|
team_member_password,
|
|
team_members,
|
|
update_avatar,
|
|
)
|
|
|
|
|
|
urlpatterns = [
|
|
path("register/", register, name="auth-register"),
|
|
path("login/", login, name="auth-login"),
|
|
path("logout/", logout, name="auth-logout"),
|
|
path("me/", me, name="auth-me"),
|
|
path("me/password/", change_password, name="auth-change-password"),
|
|
path("me/avatar/", update_avatar, name="auth-avatar"),
|
|
path("me/preferences/", preferences, name="auth-preferences"),
|
|
path("me/sessions/", login_sessions, name="auth-sessions"),
|
|
path("me/sessions/revoke-others/", revoke_other_sessions, name="auth-sessions-revoke-others"),
|
|
path("me/sessions/<uuid:session_id>/revoke/", revoke_login_session, name="auth-session-revoke"),
|
|
path("team/members/", team_members, name="team-members"),
|
|
path("team/members/<uuid:member_id>/", team_member_detail, name="team-member-detail"),
|
|
path("team/members/<uuid:member_id>/password/", team_member_password, name="team-member-password"),
|
|
path("team/invitations/", team_invitations, name="team-invitations"),
|
|
path("team/invitations/<uuid:invite_id>/revoke/", revoke_invitation, name="team-invitation-revoke"),
|
|
]
|