Friederich Loheide
61810eb050
Für Empfang, Lobby oder Tagungsraum lässt sich je Site eine öffentliche Seite anlegen (kiosk.php), die auf einem Bildschirm oder Tablet läuft: ein großer Knopf, ein Klick, ein Zugangscode mit QR-Code. Nach einer einstellbaren Anzeigedauer springt der Bildschirm zurück, damit der nächste Gast nicht den Code seines Vorgängers sieht. Verwaltung unter Administration → Display-Seiten: - Site und optionales Voucher-Profil (bestimmt Laufzeit, Geräte, QoS) - eigene Überschrift und Text für den Bildschirm - Codes pro Tag, Wartezeit zwischen zwei Codes, Anzeigedauer - geheimer Link zum Kopieren, als QR-Code anzeigbar und jederzeit erneuerbar (der alte Link gilt dann sofort nicht mehr) Absicherung: der Link ist der Zugang, deshalb Tageslimit und Wartezeit je Display, CSRF-Token am Formular, `noindex` im Kopf und ein Eintrag im Audit-Log für jeden ausgegebenen Code. Webhooks werden für Kiosk-Codes bewusst nicht ausgelöst – ein Empfangsdisplay würde den Kanal fluten. Technik: - neue Tabelle `kiosks`, `vouchers.kiosk_id` hält die Herkunft fest (Migration 0005, database.sql nachgezogen) - includes/Kiosk.php kapselt Token, Limits und Profil-Auflösung - includes/VoucherService.php bündelt die Voucher-Erstellung, die vorher in index.php lag und für den Kiosk ein zweites Mal nötig gewesen wäre - Startbildschirm zeigt zusätzlich einen QR auf sich selbst, damit Gäste die Seite am eigenen Handy öffnen können Tests: 9 neue Fälle für Token-Prüfung, Wartezeit, Tageslimit und Profil-Auflösung (38 Tests gesamt), PHPStan deckt Kiosk.php mit ab. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
192 lines
7.4 KiB
SQL
192 lines
7.4 KiB
SQL
-- UniFi Voucher Management System - Datenbankstruktur
|
|
|
|
CREATE TABLE IF NOT EXISTS `settings` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`setting_key` VARCHAR(100) UNIQUE NOT NULL,
|
|
`setting_value` TEXT,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `sites` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`name` VARCHAR(255) NOT NULL,
|
|
`site_id` VARCHAR(100) NOT NULL,
|
|
`unifi_controller_url` VARCHAR(255) NOT NULL,
|
|
`unifi_username` VARCHAR(100) NOT NULL,
|
|
`unifi_password` VARCHAR(255) NOT NULL,
|
|
`is_active` TINYINT(1) DEFAULT 1,
|
|
`public_access` TINYINT(1) DEFAULT 0,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
|
INDEX `idx_active` (`is_active`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `users` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`email` VARCHAR(255) UNIQUE NOT NULL,
|
|
`name` VARCHAR(255),
|
|
`password_hash` VARCHAR(255),
|
|
`is_admin` TINYINT(1) DEFAULT 0,
|
|
`is_active` TINYINT(1) DEFAULT 1,
|
|
`microsoft_id` VARCHAR(255) UNIQUE,
|
|
`totp_secret` VARCHAR(64) NULL,
|
|
`totp_enabled` TINYINT(1) NOT NULL DEFAULT 0,
|
|
`totp_backup_codes` TEXT NULL,
|
|
`last_login` TIMESTAMP NULL,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
|
INDEX `idx_email` (`email`),
|
|
INDEX `idx_microsoft` (`microsoft_id`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `user_site_access` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`user_id` INT NOT NULL,
|
|
`site_id` INT NOT NULL,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,
|
|
FOREIGN KEY (`site_id`) REFERENCES `sites`(`id`) ON DELETE CASCADE,
|
|
UNIQUE KEY `unique_user_site` (`user_id`, `site_id`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `voucher_templates` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`name` VARCHAR(255) NOT NULL,
|
|
`max_uses` INT NOT NULL DEFAULT 1,
|
|
`expire_minutes` INT NOT NULL DEFAULT 480,
|
|
`description` VARCHAR(500),
|
|
`qos_rate_max_down` INT NULL,
|
|
`qos_rate_max_up` INT NULL,
|
|
`qos_usage_quota` INT NULL,
|
|
`is_active` TINYINT(1) DEFAULT 1,
|
|
`created_by` INT,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON DELETE SET NULL
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `kiosks` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`site_id` INT NOT NULL,
|
|
`template_id` INT NULL,
|
|
`name` VARCHAR(255) NOT NULL,
|
|
`token` VARCHAR(64) NOT NULL,
|
|
`headline` VARCHAR(255) NULL,
|
|
`subline` VARCHAR(500) NULL,
|
|
`is_active` TINYINT(1) NOT NULL DEFAULT 1,
|
|
`daily_limit` INT NOT NULL DEFAULT 100,
|
|
`cooldown_seconds` INT NOT NULL DEFAULT 20,
|
|
`display_seconds` INT NOT NULL DEFAULT 90,
|
|
`last_used_at` TIMESTAMP NULL,
|
|
`created_by` INT NULL,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`updated_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
|
|
UNIQUE KEY `uniq_token` (`token`),
|
|
INDEX `idx_site` (`site_id`),
|
|
FOREIGN KEY (`site_id`) REFERENCES `sites`(`id`) ON DELETE CASCADE,
|
|
FOREIGN KEY (`template_id`) REFERENCES `voucher_templates`(`id`) ON DELETE SET NULL,
|
|
FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON DELETE SET NULL
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `api_keys` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`name` VARCHAR(255) NOT NULL,
|
|
`key_prefix` VARCHAR(16) NOT NULL,
|
|
`key_hash` VARCHAR(255) NOT NULL,
|
|
`scope` VARCHAR(16) NOT NULL DEFAULT 'write',
|
|
`rate_limit` INT NOT NULL DEFAULT 0,
|
|
`created_by` INT,
|
|
`last_used_at` TIMESTAMP NULL,
|
|
`is_active` TINYINT(1) NOT NULL DEFAULT 1,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`created_by`) REFERENCES `users`(`id`) ON DELETE SET NULL,
|
|
INDEX `idx_prefix` (`key_prefix`),
|
|
INDEX `idx_active` (`is_active`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `api_key_hits` (
|
|
`id` BIGINT PRIMARY KEY AUTO_INCREMENT,
|
|
`api_key_id` INT NOT NULL,
|
|
`hit_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
INDEX `idx_key_time` (`api_key_id`, `hit_at`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `vouchers` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`site_id` INT NOT NULL,
|
|
`user_id` INT,
|
|
`kiosk_id` INT NULL,
|
|
`voucher_code` VARCHAR(50) NOT NULL,
|
|
`voucher_name` VARCHAR(255) NOT NULL,
|
|
`max_uses` INT NOT NULL,
|
|
`expire_minutes` INT NOT NULL,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
`unifi_voucher_id` VARCHAR(100),
|
|
`status` ENUM('valid', 'used', 'expired') DEFAULT 'valid',
|
|
`used_count` INT DEFAULT 0,
|
|
`expires_at` TIMESTAMP NULL,
|
|
`synced_from_unifi` TINYINT(1) DEFAULT 0,
|
|
`last_sync` TIMESTAMP NULL,
|
|
FOREIGN KEY (`site_id`) REFERENCES `sites`(`id`) ON DELETE CASCADE,
|
|
FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE SET NULL,
|
|
INDEX `idx_site` (`site_id`),
|
|
INDEX `idx_created` (`created_at`),
|
|
INDEX `idx_unifi_id` (`unifi_voucher_id`),
|
|
INDEX `idx_status` (`status`),
|
|
INDEX `idx_kiosk` (`kiosk_id`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `sessions` (
|
|
`id` VARCHAR(128) PRIMARY KEY,
|
|
`user_id` INT NULL,
|
|
`data` TEXT,
|
|
`expires_at` TIMESTAMP NOT NULL,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,
|
|
INDEX `idx_expires` (`expires_at`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `login_attempts` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`ip_address` VARCHAR(45) NOT NULL,
|
|
`email` VARCHAR(255) NOT NULL,
|
|
`attempted_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
INDEX `idx_ip` (`ip_address`),
|
|
INDEX `idx_email` (`email`),
|
|
INDEX `idx_attempted` (`attempted_at`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `audit_log` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`user_id` INT,
|
|
`action` VARCHAR(100) NOT NULL,
|
|
`entity_type` VARCHAR(50),
|
|
`entity_id` VARCHAR(100),
|
|
`details` TEXT,
|
|
`ip_address` VARCHAR(45),
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE SET NULL,
|
|
INDEX `idx_user` (`user_id`),
|
|
INDEX `idx_action` (`action`),
|
|
INDEX `idx_created` (`created_at`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS `password_reset_tokens` (
|
|
`id` INT PRIMARY KEY AUTO_INCREMENT,
|
|
`user_id` INT NOT NULL,
|
|
`token` VARCHAR(128) NOT NULL,
|
|
`expires_at` TIMESTAMP NOT NULL,
|
|
`used` TINYINT(1) DEFAULT 0,
|
|
`created_at` TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
|
|
FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON DELETE CASCADE,
|
|
UNIQUE KEY `unique_token` (`token`),
|
|
INDEX `idx_expires` (`expires_at`)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
-- Migrations für bestehende Installationen:
|
|
-- ALTER TABLE vouchers ADD COLUMN IF NOT EXISTS `status` ENUM('valid', 'used', 'expired') DEFAULT 'valid';
|
|
-- ALTER TABLE vouchers ADD COLUMN IF NOT EXISTS `used_count` INT DEFAULT 0;
|
|
-- ALTER TABLE vouchers ADD COLUMN IF NOT EXISTS `expires_at` TIMESTAMP NULL;
|
|
-- ALTER TABLE vouchers ADD COLUMN IF NOT EXISTS `synced_from_unifi` TINYINT(1) DEFAULT 0;
|
|
-- ALTER TABLE vouchers ADD COLUMN IF NOT EXISTS `last_sync` TIMESTAMP NULL;
|