harden telegram webapp production readiness

app/schemas/car.py

@@ -29,7 +29,7 @@ class CarBase(BaseModel):
 
 
 class CarCreate(CarBase):
-    owner_id: int
+    owner_id: int | None = None
 
 
 class CarUpdate(BaseModel):

app/schemas/expense.py

@@ -28,6 +28,18 @@ class FuelEntryCreate(FuelEntryBase):
     car_id: int
 
 
+class FuelEntryUpdate(BaseModel):
+    entry_date: date | None = None
+    odometer: int | None = None
+    liters: Decimal | None = None
+    price_per_liter: Decimal | None = None
+    total_cost: Decimal | None = None
+    station: str | None = None
+    fuel_brand: str | None = None
+    is_full_tank: bool | None = None
+    notes: str | None = None
+
+
 class FuelEntryRead(FuelEntryBase):
     id: int
     car_id: int
@@ -54,6 +66,19 @@ class ServiceEntryCreate(ServiceEntryBase):
     car_id: int
 
 
+class ServiceEntryUpdate(BaseModel):
+    entry_date: date | None = None
+    odometer: int | None = None
+    service_type: ServiceType | None = None
+    title: str | None = None
+    category: str | None = None
+    vendor: str | None = None
+    total_cost: Decimal | None = None
+    next_due_date: date | None = None
+    next_due_odometer: int | None = None
+    notes: str | None = None
+
+
 class ServiceEntryRead(ServiceEntryBase):
     id: int
     car_id: int

app/schemas/user.py

@@ -29,6 +29,8 @@ class TelegramLoginRequest(BaseModel):
 class AuthConfig(BaseModel):
     bot_username: str
     vapid_public_key: str | None = None
+    app_env: str
+    allow_dev_auth: bool = False
 
 
 class PushSubscriptionKeys(BaseModel):