v2.1: 新增通知提醒功能和安全增强

功能:
- 通知提醒系统: 还款日提醒、逾期提醒、系统消息横幅、登录时通知
- 通知中心UI: 铃铛图标 + 下拉列表 + 未读徽章
- 定时任务: APScheduler 每小时检查即将到期的还款
- 邮件通知: SMTP 发送还款提醒和安全警告
- 异常登录通知: 3/5/10次失败触发网页和邮件通知

安全:
- 登录安全告警: 异常登录次数达到阈值时发送通知
- 密码重置链接: 一次性使用, 5分钟有效期
- 登录频率限制: IP级和账户级限制

技术:
- 后端: FastAPI + SQLAlchemy + PostgreSQL
- 前端: 纯 HTML/CSS/JS
- 部署: Docker Compose (新增 build 配置)
This commit is contained in:
OP
2026-06-28 18:06:56 +08:00
commit ffca168dbe
41 changed files with 4834 additions and 0 deletions

View File

@@ -0,0 +1,171 @@
from datetime import datetime
from sqlalchemy import Column, Integer, String, Float, DateTime, ForeignKey, Enum, Text, JSON
from sqlalchemy.orm import relationship, DeclarativeBase
import enum
class Base(DeclarativeBase):
pass
class UserRole(str, enum.Enum):
USER = "user"
ADMIN = "admin"
class UserStatus(str, enum.Enum):
ACTIVE = "active"
PENDING = "pending"
DISABLED = "disabled"
class DebtStatus(str, enum.Enum):
ACTIVE = "active"
PAID = "paid"
OVERDUE = "overdue"
CLOSED = "closed"
class RateType(str, enum.Enum):
ANNUAL = "annual"
MONTHLY = "monthly"
class RepaymentMethod(str, enum.Enum):
EQUAL_INSTALLMENT = "equal_installment"
INTEREST_FIRST = "interest_first"
LUMP_SUM = "lump_sum"
class PlanStatus(str, enum.Enum):
PENDING = "pending"
PAID = "paid"
OVERDUE = "overdue"
class NotificationType(str, enum.Enum):
REPAYMENT_DUE = "repayment_due"
REPAYMENT_OVERDUE = "repayment_overdue"
SYSTEM = "system"
ACCOUNT = "account"
class Group(Base):
__tablename__ = "groups"
id = Column(Integer, primary_key=True, index=True)
name = Column(String(100), nullable=False)
description = Column(Text, default="")
created_at = Column(DateTime, default=lambda: datetime.utcnow())
members = relationship("User", back_populates="group")
class User(Base):
__tablename__ = "users"
id = Column(Integer, primary_key=True, index=True)
email = Column(String(255), unique=True, index=True, nullable=False)
real_email = Column(String(255), default="")
password_hash = Column(String(255), nullable=False)
nickname = Column(String(100), default="")
role = Column(String(20), default=UserRole.USER.value)
status = Column(String(20), default=UserStatus.ACTIVE.value)
group_id = Column(Integer, ForeignKey("groups.id"), nullable=True)
created_at = Column(DateTime, default=lambda: datetime.utcnow())
group = relationship("Group", back_populates="members")
debts = relationship("Debt", back_populates="user")
audit_logs = relationship("AuditLog", back_populates="user")
class Debt(Base):
__tablename__ = "debts"
id = Column(Integer, primary_key=True, index=True)
user_id = Column(Integer, ForeignKey("users.id"), nullable=False)
creditor_name = Column(String(255), nullable=False)
amount = Column(Integer, nullable=False)
borrow_date = Column(DateTime, nullable=False)
interest_rate = Column(Float, nullable=False)
rate_type = Column(String(20), default=RateType.ANNUAL.value)
repayment_method = Column(String(30), nullable=False)
period_count = Column(Integer, nullable=False)
period_unit = Column(String(10), default="month")
status = Column(String(20), default=DebtStatus.ACTIVE.value)
purpose = Column(String(255), default="")
notes = Column(Text, default="")
created_at = Column(DateTime, default=lambda: datetime.utcnow())
schedule_data = Column(JSON, default=list)
paid_periods = Column(JSON, default=list)
user = relationship("User", back_populates="debts")
plans = relationship("RepaymentPlan", back_populates="debt", cascade="all, delete-orphan")
records = relationship("RepaymentRecord", back_populates="debt", cascade="all, delete-orphan")
class RepaymentPlan(Base):
__tablename__ = "repayment_plans"
id = Column(Integer, primary_key=True, index=True)
debt_id = Column(Integer, ForeignKey("debts.id"), nullable=False)
due_date = Column(DateTime, nullable=False)
principal_due = Column(Integer, nullable=False)
interest_due = Column(Integer, nullable=False)
total_due = Column(Integer, nullable=False)
status = Column(String(20), default=PlanStatus.PENDING.value)
debt = relationship("Debt", back_populates="plans")
records = relationship("RepaymentRecord", back_populates="plan")
class RepaymentRecord(Base):
__tablename__ = "repayment_records"
id = Column(Integer, primary_key=True, index=True)
debt_id = Column(Integer, ForeignKey("debts.id"), nullable=False)
plan_id = Column(Integer, ForeignKey("repayment_plans.id"), nullable=True)
amount = Column(Integer, nullable=False)
paid_date = Column(DateTime, nullable=False)
notes = Column(Text, default="")
created_at = Column(DateTime, default=lambda: datetime.utcnow())
debt = relationship("Debt", back_populates="records")
plan = relationship("RepaymentPlan", back_populates="records")
class SystemSetting(Base):
__tablename__ = "system_settings"
key = Column(String(100), primary_key=True)
value = Column(Text, nullable=False)
class AuditLog(Base):
__tablename__ = "audit_logs"
id = Column(Integer, primary_key=True, index=True)
user_id = Column(Integer, ForeignKey("users.id"), nullable=True)
action = Column(String(50), nullable=False)
target_type = Column(String(50), default="")
target_id = Column(Integer, nullable=True)
details = Column(JSON, default=dict)
created_at = Column(DateTime, default=lambda: datetime.utcnow())
user = relationship("User", back_populates="audit_logs")
class Notification(Base):
__tablename__ = "notifications"
id = Column(Integer, primary_key=True, index=True)
user_id = Column(Integer, ForeignKey("users.id"), nullable=False, index=True)
title = Column(String(255), nullable=False)
message = Column(Text, nullable=False)
type = Column(String(30), default=NotificationType.SYSTEM.value)
is_read = Column(Integer, default=0)
related_debt_id = Column(Integer, nullable=True)
related_plan_id = Column(Integer, nullable=True)
created_at = Column(DateTime, default=lambda: datetime.utcnow())
user = relationship("User", backref="notifications")