Add admin invites and user workspace management tools.

Implement invite-token registration with optional email delivery, add admin UI actions for creating invites and opening user workspaces, and support superuser workspace override while preserving per-user code isolation with shared read-only lib.

Made-with: Cursor

src/editor_app/services/accounts.py

@@ -3,13 +3,15 @@ from __future__ import annotations
 import datetime as dt
 import os
 import secrets
+import smtplib
+from email.message import EmailMessage
 from typing import TYPE_CHECKING
 
 import bcrypt
 from sqlalchemy import func, select
 from sqlalchemy.orm import Session
 
-from editor_app.db.models import AuthSession, User
+from editor_app.db.models import AuthSession, InviteToken, User
 
 if TYPE_CHECKING:
     pass
@@ -75,6 +77,20 @@ def register_user(db: Session, username: str, password: str) -> User:
     return create_user(db, username, password, is_superuser=first)
 
 
+def register_user_with_invite(db: Session, username: str, password: str, invite_token: str) -> User:
+    invite = get_valid_invite(db, invite_token)
+    if invite is None:
+        raise ValueError("Invite is invalid or expired")
+    if get_user_by_username(db, username):
+        raise ValueError("Username already taken")
+    user = create_user(db, username, password, is_superuser=False)
+    invite.used_at = _utc_naive()
+    invite.consumed_by_user_id = user.id
+    db.add(invite)
+    db.commit()
+    return user
+
+
 def authenticate(db: Session, username: str, password: str) -> User | None:
     user = get_user_by_username(db, username.strip())
     if not user or not verify_password(password, user.password_hash):
@@ -126,3 +142,68 @@ def delete_user(db: Session, user_id: int) -> bool:
     db.delete(user)
     db.commit()
     return True
+
+
+def invite_required() -> bool:
+    return os.environ.get("AUTH_INVITE_ONLY", "false").strip().lower() in ("1", "true", "yes", "on")
+
+
+def create_invite(db: Session, email: str, invited_by_user_id: int | None = None, expires_days: int = 7) -> InviteToken:
+    token = secrets.token_urlsafe(36)
+    expires = _utc_naive() + dt.timedelta(days=max(1, min(30, int(expires_days))))
+    row = InviteToken(
+        email=email.strip().lower(),
+        token=token,
+        expires_at=expires,
+        invited_by_user_id=invited_by_user_id,
+    )
+    db.add(row)
+    db.commit()
+    db.refresh(row)
+    return row
+
+
+def get_valid_invite(db: Session, token: str | None) -> InviteToken | None:
+    if not token:
+        return None
+    row = db.scalars(select(InviteToken).where(InviteToken.token == token.strip())).one_or_none()
+    if row is None:
+        return None
+    if row.used_at is not None:
+        return None
+    if row.expires_at < _utc_naive():
+        return None
+    return row
+
+
+def build_invite_url(token: str) -> str:
+    base = (os.environ.get("PUBLIC_BASE_URL") or "http://127.0.0.1:8080").rstrip("/")
+    return f"{base}/register?invite={token}"
+
+
+def send_invite_email(email: str, invite_url: str) -> bool:
+    host = (os.environ.get("SMTP_HOST") or "").strip()
+    if not host:
+        return False
+    port = int((os.environ.get("SMTP_PORT") or "587").strip())
+    user = (os.environ.get("SMTP_USER") or "").strip()
+    password = os.environ.get("SMTP_PASSWORD") or ""
+    sender = (os.environ.get("SMTP_FROM") or user or "noreply@python-editor.local").strip()
+    use_tls = (os.environ.get("SMTP_TLS", "true").strip().lower() in ("1", "true", "yes", "on"))
+
+    msg = EmailMessage()
+    msg["Subject"] = "Your Python Editor invite"
+    msg["From"] = sender
+    msg["To"] = email
+    msg.set_content(
+        "You have been invited to Python Editor.\n\n"
+        f"Use this link to sign up:\n{invite_url}\n\n"
+        "If you did not expect this invite, you can ignore this message.\n"
+    )
+    with smtplib.SMTP(host, port, timeout=10) as smtp:
+        if use_tls:
+            smtp.starttls()
+        if user:
+            smtp.login(user, password)
+        smtp.send_message(msg)
+    return True