Files
Grow/prisma/schema.prisma
T
arnaudne f59a6c5d8a feat: REST API v1 + API key management + Swagger docs
**API system**
- ApiKey model: SHA-256-hashed tokens (gw_<hex>), per-family, scoped
- Migration: 20260615210000_api_keys
- src/lib/api-auth.ts: verifyApiKey(), hasScope(), generateApiKey(), prepareKey()

**V1 endpoints** (all require Bearer gw_ token):
- GET  /api/v1/babies              — list family babies (any read scope)
- GET  /api/v1/events              — query events (events:read), babyId/type/from/to/limit/offset
- POST /api/v1/events              — log event (events:write), full metadata support
- GET  /api/v1/growth              — growth logs (growth:read)
- POST /api/v1/growth              — add measurement (growth:write), weight in grams
- GET  /api/v1/summary             — today's counts + sleep + last feed (summary:read)
- GET  /api/v1/milk                — stock lots + totalMl (milk:read)

**API key management**
- GET  /api/api-keys               — list keys (session auth)
- POST /api/api-keys               — create key, returns raw token once (session auth)
- DELETE /api/api-keys/[id]        — revoke key (session auth)

**Documentation**
- GET /api/v1/openapi.json         — OpenAPI 3.0 spec (CORS open)
- GET /api-docs                    — Swagger UI (CDN, dark themed)

**Settings UI** — "Clés API" section: create key with scope checkboxes, copy token banner (shown once), revoke, link to /api-docs

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-15 17:33:25 +02:00

282 lines
7.3 KiB
Plaintext

generator client {
provider = "prisma-client"
output = "../src/generated/prisma"
}
datasource db {
provider = "postgresql"
}
enum UserRole {
PARENT
READONLY
DOCTOR
}
model User {
id String @id @default(cuid())
email String @unique
name String
password String?
image String?
role UserRole @default(PARENT)
isSuperAdmin Boolean @default(false)
pushoverUserKey String?
familyId String?
family Family? @relation(fields: [familyId], references: [id])
events Event[]
sessions Session[]
accounts Account[]
doctorNotes DoctorNote[]
journalNotes JournalNote[]
passwordResetTokens PasswordResetToken[]
forcedLogoutAt DateTime?
createdAt DateTime @default(now())
}
model PasswordResetToken {
id String @id @default(cuid())
userId String
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
token String @unique @default(cuid())
expiresAt DateTime
used Boolean @default(false)
createdAt DateTime @default(now())
}
model SystemConfig {
key String @id
value String
updatedAt DateTime @updatedAt
}
model Account {
id String @id @default(cuid())
userId String
type String
provider String
providerAccountId String
refresh_token String?
access_token String?
expires_at Int?
token_type String?
scope String?
id_token String?
session_state String?
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
@@unique([provider, providerAccountId])
}
model Session {
id String @id @default(cuid())
sessionToken String @unique
userId String
expires DateTime
user User @relation(fields: [userId], references: [id], onDelete: Cascade)
}
model VerificationToken {
identifier String
token String @unique
expires DateTime
@@unique([identifier, token])
}
model Family {
id String @id @default(cuid())
name String
inviteCode String @unique @default(cuid())
users User[]
babies Baby[]
eventTemplates EventTemplate[]
apiKeys ApiKey[]
pinnedNote String?
pinnedNoteUpdatedAt DateTime?
pinnedNoteAuthor String?
createdAt DateTime @default(now())
}
model ApiKey {
id String @id @default(cuid())
familyId String
family Family @relation(fields: [familyId], references: [id], onDelete: Cascade)
name String
keyHash String @unique
keyPrefix String
scopes String[]
lastUsedAt DateTime?
createdAt DateTime @default(now())
}
model EventTemplate {
id String @id @default(cuid())
familyId String
family Family @relation(fields: [familyId], references: [id], onDelete: Cascade)
label String
type EventType
metadata Json?
sortOrder Int @default(0)
createdAt DateTime @default(now())
}
model Baby {
id String @id @default(cuid())
name String
birthDate DateTime
gender String?
familyId String
family Family @relation(fields: [familyId], references: [id])
events Event[]
growthLogs GrowthLog[]
doctorNotes DoctorNote[]
journalNotes JournalNote[]
milestones Milestone[]
vaccinations Vaccination[]
medicationReminders MedicationReminder[]
milkStocks MilkStock[]
createdAt DateTime @default(now())
}
model Event {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
userId String
user User @relation(fields: [userId], references: [id])
type EventType
startedAt DateTime
endedAt DateTime?
notes String?
metadata Json?
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
}
enum EventType {
BREASTFEED
BOTTLE
PUMP
DIAPER_WET
DIAPER_STOOL
NAP
NIGHT_SLEEP
MEDICATION
TEMPERATURE
BATH
WALK
TUMMY_TIME
SYMPTOM
}
model GrowthLog {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
date DateTime
weight Float?
height Float?
headCirc Float?
notes String?
createdAt DateTime @default(now())
}
model DoctorNote {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
userId String
user User @relation(fields: [userId], references: [id])
content String
date DateTime @default(now())
createdAt DateTime @default(now())
}
model JournalNote {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
userId String
user User @relation(fields: [userId], references: [id])
date DateTime
content String
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
}
model Milestone {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
title String
date DateTime
notes String?
icon String?
createdAt DateTime @default(now())
}
model Vaccination {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
name String
date DateTime?
dueDate DateTime?
notes String?
done Boolean @default(false)
createdAt DateTime @default(now())
}
model AuditLog {
id String @id @default(cuid())
userId String
userName String
action String
targetId String?
familyId String?
detail String?
createdAt DateTime @default(now())
}
model MedicationProfile {
id String @id @default(cuid())
familyId String
name String
molecule String?
defaultDose String?
unit String @default("mL")
intervalHours Float @default(6)
minIntervalHours Float?
isPreset Boolean @default(false)
createdAt DateTime @default(now())
}
model MilkStock {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
volume Float
storedAt DateTime @default(now())
expiresAt DateTime
location String @default("fridge")
notes String?
used Boolean @default(false)
usedAt DateTime?
createdAt DateTime @default(now())
}
model MedicationReminder {
id String @id @default(cuid())
babyId String
baby Baby @relation(fields: [babyId], references: [id], onDelete: Cascade)
name String
dose String?
unit String?
intervalHours Float
startAt DateTime
enabled Boolean @default(true)
lastSentAt DateTime?
createdAt DateTime @default(now())
}