from django.contrib.auth.models import AbstractBaseUser, PermissionsMixin, Group, Permission from django.contrib.auth.base_user import BaseUserManager from django.db import models from django.utils import timezone from django.core.validators import RegexValidator from apps.core.models import BaseModel import uuid class UserManager(BaseUserManager): """ Custom user manager for email-based authentication. """ def create_user(self, email, password=None, **extra_fields): if not email: raise ValueError('The Email field must be set') email = self.normalize_email(email) user = self.model(email=email, **extra_fields) user.set_password(password) user.save(using=self._db) return user def create_superuser(self, email, password=None, **extra_fields): extra_fields.setdefault('is_staff', True) extra_fields.setdefault('is_superuser', True) extra_fields.setdefault('is_active', True) extra_fields.setdefault('email_verified', True) if extra_fields.get('is_staff') is not True: raise ValueError('Superuser must have is_staff=True.') if extra_fields.get('is_superuser') is not True: raise ValueError('Superuser must have is_superuser=True.') return self.create_user(email, password, **extra_fields) class User(AbstractBaseUser, PermissionsMixin, BaseModel): """ Custom user model with email-based authentication. """ id = models.UUIDField(primary_key=True, default=uuid.uuid4, editable=False) email = models.EmailField(unique=True, db_index=True) first_name = models.CharField(max_length=30, blank=True) last_name = models.CharField(max_length=30, blank=True) phone_number = models.CharField( max_length=20, blank=True, validators=[ RegexValidator( regex=r'^\+?1?\d{9,15}$', message="Phone number must be entered in the format: '+999999999'. Up to 15 digits allowed." ) ] ) avatar = models.ImageField(upload_to='avatars/', blank=True, null=True) bio = models.TextField(max_length=500, blank=True) birth_date = models.DateField(blank=True, null=True) # Account status is_active = models.BooleanField(default=True) is_staff = models.BooleanField(default=False) email_verified = models.BooleanField(default=False) email_verification_token = models.CharField(max_length=100, blank=True) # Authentication last_login_ip = models.GenericIPAddressField(blank=True, null=True) failed_login_attempts = models.PositiveIntegerField(default=0) account_locked_until = models.DateTimeField(blank=True, null=True) # Preferences timezone = models.CharField(max_length=50, default='UTC') language = models.CharField(max_length=10, default='en') receive_notifications = models.BooleanField(default=True) objects = UserManager() USERNAME_FIELD = 'email' REQUIRED_FIELDS = ['first_name', 'last_name'] class Meta: db_table = 'accounts_user' verbose_name = 'User' verbose_name_plural = 'Users' indexes = [ models.Index(fields=['email']), models.Index(fields=['is_active']), models.Index(fields=['email_verified']), ] def __str__(self): return self.email @property def full_name(self): return f"{self.first_name} {self.last_name}".strip() @property def is_account_locked(self): if self.account_locked_until: return timezone.now() < self.account_locked_until return False def lock_account(self, duration_minutes=30): """Lock account for specified duration.""" self.account_locked_until = timezone.now() + timezone.timedelta(minutes=duration_minutes) self.save(update_fields=['account_locked_until']) def unlock_account(self): """Unlock account and reset failed attempts.""" self.account_locked_until = None self.failed_login_attempts = 0 self.save(update_fields=['account_locked_until', 'failed_login_attempts']) def increment_failed_login(self): """Increment failed login attempts.""" self.failed_login_attempts += 1 if self.failed_login_attempts >= 5: # Lock after 5 failed attempts self.lock_account() self.save(update_fields=['failed_login_attempts']) def reset_failed_login(self): """Reset failed login attempts on successful login.""" self.failed_login_attempts = 0 self.save(update_fields=['failed_login_attempts']) class Role(BaseModel): """ Custom role model for RBAC. """ ROLE_CHOICES = [ ('admin', 'Administrator'), ('manager', 'Manager'), ('user', 'User'), ] name = models.CharField(max_length=50, unique=True, choices=ROLE_CHOICES) description = models.TextField(blank=True) permissions = models.ManyToManyField(Permission, blank=True) is_default = models.BooleanField(default=False) class Meta: db_table = 'accounts_role' verbose_name = 'Role' verbose_name_plural = 'Roles' def __str__(self): return self.get_name_display() class UserRole(BaseModel): """ Through model for User-Role relationship. """ user = models.ForeignKey(User, on_delete=models.CASCADE, related_name='user_roles') role = models.ForeignKey(Role, on_delete=models.CASCADE, related_name='role_users') assigned_by = models.ForeignKey( User, on_delete=models.SET_NULL, null=True, blank=True, related_name='assigned_roles' ) assigned_at = models.DateTimeField(auto_now_add=True) expires_at = models.DateTimeField(blank=True, null=True) class Meta: db_table = 'accounts_user_role' unique_together = ['user', 'role'] verbose_name = 'User Role' verbose_name_plural = 'User Roles' indexes = [ models.Index(fields=['user', 'role']), models.Index(fields=['expires_at']), ] def __str__(self): return f"{self.user.email} - {self.role.name}" @property def is_expired(self): if self.expires_at: return timezone.now() > self.expires_at return False class UserProfile(BaseModel): """ Extended user profile information. """ user = models.OneToOneField(User, on_delete=models.CASCADE, related_name='profile') company = models.CharField(max_length=100, blank=True) job_title = models.CharField(max_length=100, blank=True) website = models.URLField(blank=True) location = models.CharField(max_length=100, blank=True) # Social links linkedin_url = models.URLField(blank=True) twitter_url = models.URLField(blank=True) github_url = models.URLField(blank=True) # Privacy settings profile_visibility = models.CharField( max_length=20, choices=[ ('public', 'Public'), ('private', 'Private'), ('contacts', 'Contacts Only'), ], default='public' ) class Meta: db_table = 'accounts_user_profile' verbose_name = 'User Profile' verbose_name_plural = 'User Profiles' def __str__(self): return f"{self.user.email} Profile"