dolgolyov.alexei
d86d53f473
Backend:
- max_ai_messages_per_day + max_ai_tokens_per_day on User model (nullable, override)
- Migration 008: add columns + seed default settings (100 msgs, 500K tokens)
- usage_service: count today's messages + tokens, check quota, get limits
- GET /chats/quota returns usage vs limits + reset time
- POST /chats/{id}/messages checks quota before streaming (429 if exceeded)
- Admin user schemas expose both limit fields
- GET /admin/usage returns per-user daily message + token counts
- admin_user_service allows updating both limit fields
Frontend:
- Chat header shows "X/Y messages · XK/YK tokens" with red highlight at limit
- Quota refreshes every 30s via TanStack Query
- Admin usage page with table: user, messages today, tokens today
- Route + sidebar entry for admin usage
- English + Russian translations
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
1.7 KiB
1.7 KiB
Phase 9: OAuth & Account Switching — Subplan
Goal
Allow users to authenticate via Google OAuth, and switch between multiple logged-in accounts without re-entering credentials.
Prerequisites
- Auth system with JWT tokens, User model with oauth_provider/oauth_provider_id columns
- Google Cloud OAuth 2.0 credentials
Tasks
- 9.1 Add
GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,GOOGLE_REDIRECT_URIto config.py + .env.example. Addauthlibto pyproject.toml. - 9.2 Create
backend/app/services/oauth_service.py: register Google provider, get_authorization_url, handle_callback (fetch user info, create/link user, issue tokens). - 9.3 Make
User.hashed_passwordnullable (OAuth users have no password). Migration 008. - 9.4 Add OAuth endpoints to auth.py:
GET /auth/oauth/{provider}/authorize,GET /auth/oauth/{provider}/callback. - 9.5 Add
POST /auth/switchendpoint (accepts refresh token, returns full AuthResponse). - 9.6 Update schemas: add oauth_provider to UserResponse.
- 9.7 Frontend: OAuth API functions, callback route component.
- 9.8 Frontend: OAuth buttons on login form ("Sign in with Google").
- 9.9 Frontend: extend auth-store with accounts array, switchAccount, addAccount.
- 9.10 Frontend: account switcher dropdown in header.
- 9.11 Update routes, i18n (en/ru).
- 9.12 Tests + verification.
Acceptance Criteria
- Google OAuth login works end-to-end
- OAuth user created with oauth_provider="google"
- Existing email users can link to Google
- Multiple accounts stored; switching is instant
- OAuth-only users cannot use password login
- All UI text in en/ru
Status
NOT STARTED