app.kiosk_pins
TableRow level security on
Kiosk PINs of org members, stored only as bcrypt hashes and set through app.set_kiosk_pin (invariant 8). Five failed attempts lock the PIN.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org, derived from app.memberships on insert; never accepted from the caller and never changed.References app.organizations.id |
| membership_id | uuid | No | Membership the PIN identifies at a kiosk.References app.memberships.id |
| pin_hash | text | No | bcrypt hash of the PIN. Never selectable by signed-in callers. |
| failed_attempts | smallint | No | Consecutive failed attempts; the PIN locks at 5. |
| locked_at | timestamp with time zone | Yes | When the PIN locked; a locked PIN must be reset. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |