Add DB viewer access logging, account deletion, and forced password change

Logs a distinct db_viewer_accessed event (not just the earlier
session_created "requested" event) when an admin's browser actually
completes the hand-off into Adminer. Adds a password-confirmed
account-deletion box to Settings, relying on the existing ON DELETE
CASCADE foreign keys to clean up everything the account owns. Adds an
admin-only "require password change" flag that get_current_user
enforces server-side (403 on everything except /auth/me,
/auth/change-password, /auth/logout) - meant for handing a demo
account to someone with a known sample password.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

This commit is contained in:

saksham

2026-08-05 23:41:21 -04:00

co-authored by

Claude Sonnet 5

parent 3d6fe56991

commit 4ee38b6241

23 changed files with 1056 additions and 7 deletions

									
										apps/api/app/schemas/user.py
									
		+1
		
												View File
												
				@@ -14,6 +14,7 @@ class UserResponse(BaseModel):

				    timezone: str

				    is_active: bool

				    is_admin: bool

				    must_change_password: bool

				class MeResponse(UserResponse):