mohd
46af911a06
What I implemented Phone-first auth endpoints with OTP → JWT issuance. views.py urls.py Phone normalization (KSA-focused, E.164 or Saudi mobile) and validation. phone.py serializers.py OTP protections: rate limit, resend cooldown, attempt counting. otp.py models.py Email is now optional to allow phone-only users. models.py 0002_phone_auth_fields.py Admin OTP visibility improved. admin.py Risks updated. risks.md
35 lines
1009 B
Python
35 lines
1009 B
Python
from django.db import migrations, models
|
|
|
|
|
|
class Migration(migrations.Migration):
|
|
dependencies = [
|
|
("accounts", "0001_initial"),
|
|
]
|
|
|
|
operations = [
|
|
migrations.AlterField(
|
|
model_name="user",
|
|
name="email",
|
|
field=models.EmailField(blank=True, max_length=254, null=True, unique=True),
|
|
),
|
|
migrations.AddField(
|
|
model_name="phoneotp",
|
|
name="attempt_count",
|
|
field=models.PositiveSmallIntegerField(default=0),
|
|
),
|
|
migrations.AddField(
|
|
model_name="phoneotp",
|
|
name="max_attempts",
|
|
field=models.PositiveSmallIntegerField(default=5),
|
|
),
|
|
migrations.AddField(
|
|
model_name="phoneotp",
|
|
name="purpose",
|
|
field=models.CharField(
|
|
choices=[("auth", "Authentication"), ("verify", "Phone Verification")],
|
|
default="auth",
|
|
max_length=20,
|
|
),
|
|
),
|
|
]
|