import uuid from datetime import datetime from sqlalchemy import DateTime, ForeignKey, String, Uuid, func from sqlalchemy.orm import Mapped, mapped_column from app.database import Base class RefreshToken(Base): __tablename__ = "refresh_tokens" id: Mapped[uuid.UUID] = mapped_column(Uuid, primary_key=True, default=uuid.uuid4) user_id: Mapped[uuid.UUID] = mapped_column( Uuid, ForeignKey("users.id", ondelete="CASCADE"), nullable=False, index=True ) # SHA-256 hash of the raw token (never store raw tokens) token_hash: Mapped[str] = mapped_column(String(64), unique=True, nullable=False) expires_at: Mapped[datetime] = mapped_column(DateTime(timezone=False), nullable=False) revoked_at: Mapped[datetime | None] = mapped_column(DateTime(timezone=False), nullable=True) created_at: Mapped[datetime] = mapped_column( DateTime(timezone=False), nullable=False, server_default=func.now() )