feat(api): 账户资料与密码安全

2026-09-03 16:56:20 +08:00
parent 46d98ab11e
commit a5b89ddb1d
13 changed files with 552 additions and 14 deletions
@@ -0,0 +1,9 @@
+-- 用户头像是账户资料的一部分；素材文件仍由受工作空间隔离的 media_assets 管理。
+SET search_path TO atlas, public;
+
+ALTER TABLE users
+    ADD COLUMN avatar_asset_id UUID REFERENCES media_assets(id) ON DELETE SET NULL,
+    ADD COLUMN revision INTEGER NOT NULL DEFAULT 1 CHECK (revision > 0);
+
+CREATE INDEX ix_users_avatar_asset ON users (avatar_asset_id)
+    WHERE avatar_asset_id IS NOT NULL;