from django.db import migrations, models
import django.db.models.deletion


class Migration(migrations.Migration):

    dependencies = [
        ('human_resource', '0001_initial'),
        ('system_administration', '0003_companyemailsettings_marketing'),
    ]

    operations = [
        migrations.CreateModel(
            name='CompanySecuritySettings',
            fields=[
                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
                ('enable_ip_whitelist', models.BooleanField(default=False)),
                ('allowed_ips', models.TextField(blank=True, default='', help_text='Comma or newline separated IPv4/IPv6 addresses or CIDR ranges.')),
                ('enable_login_otp', models.BooleanField(default=False)),
                ('otp_length', models.PositiveSmallIntegerField(default=6)),
                ('otp_ttl_minutes', models.PositiveSmallIntegerField(default=10)),
                ('otp_max_attempts', models.PositiveSmallIntegerField(default=5)),
                ('created_on', models.DateTimeField(auto_now_add=True)),
                ('last_updated_on', models.DateTimeField(auto_now=True)),
                ('company_profile', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, related_name='security_settings', to='system_administration.companyprofile')),
            ],
            options={
                'verbose_name': 'Company Security Settings',
                'verbose_name_plural': 'Company Security Settings',
            },
        ),
        migrations.CreateModel(
            name='LoginOtpChallenge',
            fields=[
                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
                ('challenge_id', models.CharField(db_index=True, max_length=64, unique=True)),
                ('otp_hash', models.CharField(max_length=128)),
                ('attempts', models.PositiveSmallIntegerField(default=0)),
                ('expires_at', models.DateTimeField()),
                ('created_on', models.DateTimeField(auto_now_add=True)),
                ('staff_profile', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='login_otp_challenges', to='human_resource.staffprofile')),
            ],
            options={
                'verbose_name': 'Login OTP Challenge',
                'verbose_name_plural': 'Login OTP Challenges',
            },
        ),
    ]
