mirror of
https://github.com/maybe-finance/maybe.git
synced 2025-07-25 08:09:38 +02:00
9336719242
- Replace API keys with OAuth2 tokens for mobile apps - Add device tracking and management for mobile sessions - Implement 30-day token expiration with refresh tokens - Add MFA/2FA support for mobile login - Create dedicated auth endpoints (signup/login/refresh) - Skip CSRF protection for API endpoints - Return plaintext tokens (not hashed) in responses - Track devices with unique IDs and metadata - Enable seamless native mobile experience without OAuth redirects This provides enterprise-grade security for the iOS/Android apps while maintaining a completely native authentication flow. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
17 lines
521 B
Ruby
17 lines
521 B
Ruby
class CreateMobileDevices < ActiveRecord::Migration[7.2]
|
|
def change
|
|
create_table :mobile_devices, id: :uuid do |t|
|
|
t.references :user, null: false, foreign_key: true, type: :uuid
|
|
t.string :device_id
|
|
t.string :device_name
|
|
t.string :device_type
|
|
t.string :os_version
|
|
t.string :app_version
|
|
t.datetime :last_seen_at
|
|
|
|
t.timestamps
|
|
end
|
|
add_index :mobile_devices, :device_id, unique: true
|
|
add_index :mobile_devices, [:user_id, :device_id], unique: true
|
|
end
|
|
end
|