adding user authentication

migrations/20240320_create_auth_schema.sql

@@ -0,0 +1,62 @@
+-- Create the auth schema
+CREATE SCHEMA IF NOT EXISTS auth;
+
+-- Create the users table
+CREATE TABLE IF NOT EXISTS auth.users (
+    id VARCHAR(36) PRIMARY KEY,
+    username VARCHAR(32) NOT NULL UNIQUE,
+    email VARCHAR(255) NOT NULL UNIQUE,
+    password_hash TEXT NOT NULL,
+    role VARCHAR(10) NOT NULL,
+    storage_quota_bytes BIGINT NOT NULL,
+    storage_used_bytes BIGINT NOT NULL DEFAULT 0,
+    created_at TIMESTAMPTZ NOT NULL,
+    updated_at TIMESTAMPTZ NOT NULL,
+    last_login_at TIMESTAMPTZ,
+    active BOOLEAN NOT NULL DEFAULT TRUE
+);
+
+-- Create an index on username and email for fast lookups
+CREATE INDEX IF NOT EXISTS idx_users_username ON auth.users(username);
+CREATE INDEX IF NOT EXISTS idx_users_email ON auth.users(email);
+
+-- Create the sessions table
+CREATE TABLE IF NOT EXISTS auth.sessions (
+    id VARCHAR(36) PRIMARY KEY,
+    user_id VARCHAR(36) NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+    refresh_token VARCHAR(255) NOT NULL UNIQUE,
+    expires_at TIMESTAMPTZ NOT NULL,
+    ip_address VARCHAR(45), -- to support IPv6
+    user_agent TEXT,
+    created_at TIMESTAMPTZ NOT NULL,
+    revoked BOOLEAN NOT NULL DEFAULT FALSE
+);
+
+-- Create indexes on user_id and refresh_token for fast lookups
+CREATE INDEX IF NOT EXISTS idx_sessions_user_id ON auth.sessions(user_id);
+CREATE INDEX IF NOT EXISTS idx_sessions_refresh_token ON auth.sessions(refresh_token);
+CREATE INDEX IF NOT EXISTS idx_sessions_expires_at ON auth.sessions(expires_at);
+
+-- Create an index for getting active sessions
+CREATE INDEX IF NOT EXISTS idx_sessions_active ON auth.sessions(user_id, revoked, expires_at)
+WHERE NOT revoked AND expires_at > NOW();
+
+-- Create the user_files table to track ownership of files
+CREATE TABLE IF NOT EXISTS auth.user_files (
+    id SERIAL PRIMARY KEY,
+    user_id VARCHAR(36) NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+    file_path TEXT NOT NULL,
+    file_id VARCHAR(255) NOT NULL,
+    size_bytes BIGINT NOT NULL DEFAULT 0,
+    created_at TIMESTAMPTZ NOT NULL,
+    updated_at TIMESTAMPTZ NOT NULL,
+    UNIQUE(user_id, file_path)
+);
+
+-- Create indexes for user_files
+CREATE INDEX IF NOT EXISTS idx_user_files_user_id ON auth.user_files(user_id);
+CREATE INDEX IF NOT EXISTS idx_user_files_file_id ON auth.user_files(file_id);
+
+COMMENT ON TABLE auth.users IS 'Stores user account information';
+COMMENT ON TABLE auth.sessions IS 'Stores user session information for refresh tokens';
+COMMENT ON TABLE auth.user_files IS 'Tracks file ownership and storage utilization by users';