ojamoto_models 1.0.0 → 1.0.2

package/migrations/2026000030-create-admin-sessions.js.js

@@ -0,0 +1,45 @@
+"use strict";
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.createTable("admin_sessions", {
+      admin_session_id: {
+        type: Sequelize.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+        allowNull: false,
+      },
+      admin_id: {
+        type: Sequelize.INTEGER,
+        allowNull: false,
+        references: { model: "admin_users", key: "admin_id" },
+        onDelete: "CASCADE",
+        onUpdate: "CASCADE",
+      },
+      ip_address: {
+        type: Sequelize.STRING(45),
+        allowNull: true,
+      },
+      expires_at: {
+        type: Sequelize.DATE,
+        allowNull: false,
+      },
+      revoked: {
+        type: Sequelize.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+      created_at: {
+        type: Sequelize.DATE,
+        allowNull: false,
+      },
+    });
+
+    await queryInterface.addIndex("admin_sessions", ["admin_id"]);
+    await queryInterface.addIndex("admin_sessions", ["admin_id", "revoked"]);
+  },
+
+  async down(queryInterface) {
+    await queryInterface.dropTable("admin_sessions");
+  },
+};

package/migrations/2026000031-add-totp-secret-to-admin-users.js

@@ -0,0 +1,15 @@
+("use strict");
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.addColumn("admin_users", "totp_secret", {
+      type: Sequelize.STRING,
+      allowNull: true,
+      after: "two_factor_enabled",
+      comment: "Base32 TOTP secret",
+    });
+  },
+  async down(queryInterface) {
+    await queryInterface.removeColumn("admin_users", "totp_secret");
+  },
+};

package/migrations/2026000032-add-totp-secret-to-users.js

@@ -0,0 +1,15 @@
+("use strict");
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.addColumn("users", "totp_secret", {
+      type: Sequelize.STRING,
+      allowNull: true,
+      after: "two_factor_enabled",
+      comment: "Base32 TOTP secret",
+    });
+  },
+  async down(queryInterface) {
+    await queryInterface.removeColumn("users", "totp_secret");
+  },
+};

package/migrations/2026000033-add-passwaord-change-to-admin-user.js

@@ -0,0 +1,15 @@
+"use strict";
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.addColumn("admin_users", "must_change_password", {
+      type: Sequelize.BOOLEAN,
+      allowNull: false,
+      defaultValue: false,
+      after: "password_hash",
+    });
+  },
+  async down(queryInterface) {
+    await queryInterface.removeColumn("admin_users", "must_change_password");
+  },
+};

package/migrations/2026000034-add-fields-to-user.js

@@ -0,0 +1,25 @@
+"use strict";
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.addColumn("users", "is_transaction_pin_set", {
+      type: Sequelize.BOOLEAN,
+      allowNull: true,
+      defaultValue: false,
+      after: "transaction_pin_hash",
+    });
+
+    await queryInterface.addColumn("users", "is_seller_profile_created", {
+      type: Sequelize.BOOLEAN,
+      allowNull: true,
+      defaultValue: false,
+      after: "is_transaction_pin_set",
+    });
+  },
+
+  async down(queryInterface) {
+    await queryInterface.removeColumn("users", "is_transaction_pin_set");
+
+    await queryInterface.removeColumn("users", "is_seller_profile_created");
+  },
+};

package/migrations/2026000035-add-field-to-wallet-transactions.js

@@ -0,0 +1,22 @@
+("use strict");
+
+module.exports = {
+  async up(queryInterface, Sequelize) {
+    await queryInterface.addColumn(
+      "wallet_transactions",
+      "provider_reference_id",
+      {
+        type: Sequelize.STRING(100),
+        allowNull: true,
+        after: "user_id",
+        comment: "Flutterwave's own transfer/transaction ID",
+      },
+    );
+  },
+  async down(queryInterface) {
+    await queryInterface.removeColumn(
+      "wallet_transactions",
+      "provider_reference_id",
+    );
+  },
+};

package/models/AdminSession.js

@@ -0,0 +1,55 @@
+"use strict";
+
+const { Model, DataTypes } = require("sequelize");
+
+module.exports = (sequelize) => {
+  class AdminSession extends Model {
+    static associate(models) {
+      AdminSession.belongsTo(models.AdminUser, {
+        foreignKey: "admin_id",
+        as: "admin",
+      });
+    }
+  }
+
+  AdminSession.init(
+    {
+      admin_session_id: {
+        type: DataTypes.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+      },
+      admin_id: {
+        type: DataTypes.INTEGER,
+        allowNull: false,
+        references: { model: "admin_users", key: "admin_id" },
+        onDelete: "CASCADE",
+      },
+      ip_address: {
+        type: DataTypes.STRING(45),
+        allowNull: true,
+      },
+      expires_at: {
+        type: DataTypes.DATE,
+        allowNull: false,
+        comment: "8 hours from issuance — matches admin access token lifetime",
+      },
+      revoked: {
+        type: DataTypes.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+      },
+    },
+    {
+      sequelize,
+      modelName: "AdminSession",
+      tableName: "admin_sessions",
+      timestamps: true,
+      createdAt: "created_at",
+      updatedAt: false,
+    },
+  );
+
+  AdminSession.removeAttribute("id");
+  return AdminSession;
+};

package/models/AdminUser.js

@@ -1,115 +1,132 @@
-"use strict";
-
-const { Model, DataTypes } = require("sequelize");
-const { ADMIN_ROLE, ADMIN_STATUS } = require("../services/constants");
-
-module.exports = (sequelize) => {
-  class AdminUser extends Model {
-    static associate(models) {
-      // Self-referential: who created this admin account
-      AdminUser.belongsTo(models.AdminUser, {
-        foreignKey: "created_by",
-        as: "createdByAdmin",
-      });
-
-      AdminUser.hasMany(models.AdminUser, {
-        foreignKey: "created_by",
-        as: "createdAdmins",
-      });
-
-      // Disputes assigned to this admin
-      AdminUser.hasMany(models.Dispute, {
-        foreignKey: "assigned_admin",
-        as: "assignedDisputes",
-      });
-
-      // Audit logs performed by this admin
-      AdminUser.hasMany(models.AuditLog, {
-        foreignKey: "admin_id",
-        as: "auditLogs",
-      });
-
-      // Notifications
-      AdminUser.hasMany(models.AdminNotification, {
-        foreignKey: "admin_id",
-        as: "notifications",
-      });
-    }
-  }
-
-  AdminUser.init(
-    {
-      admin_id: {
-        type: DataTypes.INTEGER,
-        primaryKey: true,
-        autoIncrement: true,
-      },
-      uuid: {
-        type: DataTypes.UUID,
-        defaultValue: DataTypes.UUIDV4,
-        allowNull: false,
-        unique: true,
-      },
-      first_name: {
-        type: DataTypes.STRING(100),
-        allowNull: false,
-      },
-      last_name: {
-        type: DataTypes.STRING(100),
-        allowNull: false,
-      },
-      email: {
-        type: DataTypes.STRING(255),
-        allowNull: false,
-        unique: true,
-        validate: { isEmail: true },
-      },
-      phone: {
-        type: DataTypes.STRING(20),
-        allowNull: false,
-        unique: true,
-      },
-      password_hash: {
-        type: DataTypes.STRING(255),
-        allowNull: false,
-      },
-      role: {
-        type: DataTypes.ENUM(...Object.values(ADMIN_ROLE)),
-        allowNull: false,
-      },
-      status: {
-        type: DataTypes.ENUM(...Object.values(ADMIN_STATUS)),
-        allowNull: false,
-        defaultValue: ADMIN_STATUS.ACTIVE,
-      },
-      two_factor_enabled: {
-        type: DataTypes.BOOLEAN,
-        allowNull: false,
-        defaultValue: true,
-        comment: "Mandatory for all admin accounts",
-      },
-      last_login_at: {
-        type: DataTypes.DATE,
-        allowNull: true,
-      },
-      created_by: {
-        type: DataTypes.INTEGER,
-        allowNull: true,
-        references: { model: "admin_users", key: "admin_id" },
-        onDelete: "SET NULL",
-        comment: "Which super admin created this account",
-      },
-    },
-    {
-      sequelize,
-      modelName: "AdminUser",
-      tableName: "admin_users",
-      timestamps: true,
-      createdAt: "created_at",
-      updatedAt: "updated_at",
-    },
-  );
-
-  AdminUser.removeAttribute("id");
-  return AdminUser;
-};
+"use strict";
+
+const { Model, DataTypes } = require("sequelize");
+const { ADMIN_ROLE, ADMIN_STATUS } = require("../services/constants");
+
+module.exports = (sequelize) => {
+  class AdminUser extends Model {
+    static associate(models) {
+      // Self-referential: who created this admin account
+      AdminUser.belongsTo(models.AdminUser, {
+        foreignKey: "created_by",
+        as: "createdByAdmin",
+      });
+
+      AdminUser.hasMany(models.AdminUser, {
+        foreignKey: "created_by",
+        as: "createdAdmins",
+      });
+
+      // Disputes assigned to this admin
+      AdminUser.hasMany(models.Dispute, {
+        foreignKey: "assigned_admin",
+        as: "assignedDisputes",
+      });
+
+      // Audit logs performed by this admin
+      AdminUser.hasMany(models.AuditLog, {
+        foreignKey: "admin_id",
+        as: "auditLogs",
+      });
+
+      // Notifications
+      AdminUser.hasMany(models.AdminNotification, {
+        foreignKey: "admin_id",
+        as: "notifications",
+      });
+
+      // Sessions
+      AdminUser.hasMany(models.AdminSession, {
+        foreignKey: "admin_id",
+        as: "sessions",
+      });
+    }
+  }
+
+  AdminUser.init(
+    {
+      admin_id: {
+        type: DataTypes.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+      },
+      uuid: {
+        type: DataTypes.UUID,
+        defaultValue: DataTypes.UUIDV4,
+        allowNull: false,
+        unique: true,
+      },
+      first_name: {
+        type: DataTypes.STRING(100),
+        allowNull: false,
+      },
+      last_name: {
+        type: DataTypes.STRING(100),
+        allowNull: false,
+      },
+      email: {
+        type: DataTypes.STRING(255),
+        allowNull: false,
+        unique: true,
+        validate: { isEmail: true },
+      },
+      phone: {
+        type: DataTypes.STRING(20),
+        allowNull: false,
+        unique: true,
+      },
+      password_hash: {
+        type: DataTypes.STRING(255),
+        allowNull: false,
+      },
+      must_change_password: {
+        type: DataTypes.BOOLEAN,
+        allowNull: false,
+        defaultValue: false,
+        comment:
+          "True after createAdminUser — forces password change before any other action",
+      },
+      role: {
+        type: DataTypes.ENUM(...Object.values(ADMIN_ROLE)),
+        allowNull: false,
+      },
+      status: {
+        type: DataTypes.ENUM(...Object.values(ADMIN_STATUS)),
+        allowNull: false,
+        defaultValue: ADMIN_STATUS.ACTIVE,
+      },
+      two_factor_enabled: {
+        type: DataTypes.BOOLEAN,
+        allowNull: false,
+        defaultValue: true,
+        comment: "Mandatory for all admin accounts",
+      },
+      totp_secret: {
+        type: DataTypes.STRING,
+        allowNull: true,
+      },
+      last_login_at: {
+        type: DataTypes.DATE,
+        allowNull: true,
+      },
+      created_by: {
+        type: DataTypes.INTEGER,
+        allowNull: true,
+        references: { model: "admin_users", key: "admin_id" },
+        onDelete: "SET NULL",
+        comment: "Which super admin created this account",
+      },
+    },
+    {
+      sequelize,
+      modelName: "AdminUser",
+      tableName: "admin_users",
+      timestamps: true,
+      createdAt: "created_at",
+      updatedAt: "updated_at",
+    },
+  );
+
+  AdminUser.removeAttribute("id");
+  return AdminUser;
+};

package/models/AuditLog.js

@@ -1,70 +1,70 @@
-"use strict";
-
-const { Model, DataTypes } = require("sequelize");
-
-module.exports = (sequelize) => {
-  class AuditLog extends Model {
-    static associate(models) {
-      // Actor can be a regular user
-      AuditLog.belongsTo(models.User, {
-        foreignKey: "user_id",
-        as: "user",
-      });
-
-      // Or an admin user — use admin_id to distinguish
-      AuditLog.belongsTo(models.AdminUser, {
-        foreignKey: "admin_id",
-        as: "admin",
-      });
-    }
-  }
-
-  AuditLog.init(
-    {
-      audit_log_id: {
-        type: DataTypes.INTEGER,
-        primaryKey: true,
-        autoIncrement: true,
-      },
-      user_id: {
-        type: DataTypes.INTEGER,
-        allowNull: true,
-        references: { model: "users", key: "user_id" },
-        onDelete: "SET NULL",
-        comment: "Populated when the actor is a regular user",
-      },
-      admin_id: {
-        type: DataTypes.INTEGER,
-        allowNull: true,
-        references: { model: "admin_users", key: "admin_id" },
-        onDelete: "SET NULL",
-        comment: "Populated when the actor is an admin",
-      },
-      action: {
-        type: DataTypes.STRING(255),
-        allowNull: false,
-        comment: "e.g. ESCROW_RELEASED | USER_BANNED | KYC_APPROVED",
-      },
-      metadata_json: {
-        type: DataTypes.JSON,
-        allowNull: true,
-        comment: "Contextual data — before/after values, entity IDs etc.",
-      },
-      ip_address: {
-        type: DataTypes.STRING(45),
-        allowNull: true,
-      },
-    },
-    {
-      sequelize,
-      modelName: "AuditLog",
-      tableName: "audit_logs",
-      timestamps: true,
-      createdAt: "created_at",
-      updatedAt: false,
-    },
-  );
-
-  AuditLog.removeAttribute("id");
-  return AuditLog;
-};
+"use strict";
+
+const { Model, DataTypes } = require("sequelize");
+
+module.exports = (sequelize) => {
+  class AuditLog extends Model {
+    static associate(models) {
+      // Actor can be a regular user
+      AuditLog.belongsTo(models.User, {
+        foreignKey: "user_id",
+        as: "user",
+      });
+
+      // Or an admin user — use admin_id to distinguish
+      AuditLog.belongsTo(models.AdminUser, {
+        foreignKey: "admin_id",
+        as: "admin",
+      });
+    }
+  }
+
+  AuditLog.init(
+    {
+      audit_log_id: {
+        type: DataTypes.INTEGER,
+        primaryKey: true,
+        autoIncrement: true,
+      },
+      user_id: {
+        type: DataTypes.INTEGER,
+        allowNull: true,
+        references: { model: "users", key: "user_id" },
+        onDelete: "SET NULL",
+        comment: "Populated when the actor is a regular user",
+      },
+      admin_id: {
+        type: DataTypes.INTEGER,
+        allowNull: true,
+        references: { model: "admin_users", key: "admin_id" },
+        onDelete: "SET NULL",
+        comment: "Populated when the actor is an admin",
+      },
+      action: {
+        type: DataTypes.STRING(255),
+        allowNull: false,
+        comment: "e.g. ESCROW_RELEASED | USER_BANNED | KYC_APPROVED",
+      },
+      metadata_json: {
+        type: DataTypes.JSON,
+        allowNull: true,
+        comment: "Contextual data — before/after values, entity IDs etc.",
+      },
+      ip_address: {
+        type: DataTypes.STRING(45),
+        allowNull: true,
+      },
+    },
+    {
+      sequelize,
+      modelName: "AuditLog",
+      tableName: "audit_logs",
+      timestamps: true,
+      createdAt: "created_at",
+      updatedAt: false,
+    },
+  );
+
+  AuditLog.removeAttribute("id");
+  return AuditLog;
+};