Stefano Bertelli
0546b44507
Complete Python/NiceGUI rewrite of the Wirezone (Elixir/Phoenix) VPN management platform. All 10 implementation phases delivered. Core stack: - NiceGUI reactive UI with SQLModel ORM on PostgreSQL (asyncpg) - Alembic migrations, Valkey/Redis cache, pydantic-settings config - WireGuard management via subprocess (wg/ip/nft CLIs) - 164 tests passing, 35% code coverage Features: - User/device/rule CRUD with admin and unprivileged roles - Full device config form with per-device WG overrides - WireGuard client config generation with QR codes - REST API (v0) with Bearer token auth for all resources - TOTP MFA with QR registration and challenge flow - OIDC SSO with authlib (provider registry, auto-create users) - Magic link passwordless sign-in via email - SAML SP-initiated SSO with IdP metadata parsing - WebAuthn/FIDO2 security key registration - nftables firewall with per-user chains and masquerade - Background tasks: WG stats polling, VPN session expiry, OIDC token refresh, WAN connectivity checks - Startup reconciliation (DB ↔ WireGuard state sync) - In-memory notification system with header badge - Admin UI: users, devices, rules, settings (3 tabs), diagnostics - Loguru logging with optional timestamped file output Deployment: - Multi-stage Dockerfile (python:3.13-slim) - Docker Compose prod stack (bridge networking, NET_ADMIN, nftables) - Forgejo CI: tests → semantic versioning → Docker registry push - Health endpoint at /api/health
27 lines
848 B
Python
27 lines
848 B
Python
from datetime import datetime
|
|
|
|
from wiregui.utils.time import utcnow
|
|
from uuid import UUID, uuid4
|
|
|
|
from sqlmodel import Field, JSON, Column, Relationship, SQLModel
|
|
|
|
|
|
class OIDCConnection(SQLModel, table=True):
|
|
__tablename__ = "oidc_connections"
|
|
|
|
id: UUID = Field(default_factory=uuid4, primary_key=True)
|
|
provider: str
|
|
refresh_token: str | None = None # encrypted at application level
|
|
refresh_response: dict | None = Field(default=None, sa_column=Column(JSON))
|
|
refreshed_at: datetime | None = None
|
|
|
|
user_id: UUID = Field(foreign_key="users.id", index=True)
|
|
|
|
inserted_at: datetime = Field(default_factory=utcnow)
|
|
updated_at: datetime = Field(default_factory=utcnow)
|
|
|
|
# Relationships
|
|
user: "User" = Relationship(back_populates="oidc_connections")
|
|
|
|
|
|
from wiregui.models.user import User # noqa: E402, F401
|