diff options
| author | James Elliott <james-d-elliott@users.noreply.github.com> | 2025-02-22 22:03:33 +1100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-02-22 11:03:33 +0000 |
| commit | e7d387ed9169dcdb4e8171db8ed20ec6ef376e0a (patch) | |
| tree | 96bfca916ad1e25c7f960e98cd7e3d0af8f3fdd3 /internal/storage/sql_provider_queries.go | |
| parent | 111344eaea4fd0c32ce58a181b94414ae639fe2b (diff) | |
feat(oidc): rfc8628 oauth 2.0 device code grant (#8082)
This implements RFC8628 OAuth 2.0 Device Authorization Grant and the accompanying OAuth 2.0 Device Code Flow.
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
Diffstat (limited to 'internal/storage/sql_provider_queries.go')
| -rw-r--r-- | internal/storage/sql_provider_queries.go | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/internal/storage/sql_provider_queries.go b/internal/storage/sql_provider_queries.go index 8fe0787c0..f386954e9 100644 --- a/internal/storage/sql_provider_queries.go +++ b/internal/storage/sql_provider_queries.go @@ -388,6 +388,31 @@ const ( SET active = FALSE WHERE request_id = ?;` + queryFmtSelectOAuth2DeviceCodeSession = ` + SELECT id, challenge_id, request_id, client_id, signature, user_code_signature, status, subject, + requested_at, checked_at, requested_scopes, granted_scopes, requested_audience, granted_audience, + active, revoked, form_data, session_data + FROM %s + WHERE signature = ? AND revoked = FALSE;` + + queryFmtSelectOAuth2DeviceCodeSessionByUserCode = ` + SELECT id, challenge_id, request_id, client_id, signature, user_code_signature, status, subject, + requested_at, checked_at, requested_scopes, granted_scopes, requested_audience, granted_audience, + active, revoked, form_data, session_data + FROM %s + WHERE user_code_signature = ? AND revoked = FALSE;` + + queryFmtInsertOAuth2DeviceCodeSession = ` + INSERT INTO %s (challenge_id, request_id, client_id, signature, user_code_signature, status, subject, + requested_at, checked_at, requested_scopes, granted_scopes, requested_audience, granted_audience, + active, revoked, form_data, session_data) + VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?);` + + queryFmtUpdateOAuth2DeviceCodeSession = ` + UPDATE %s + SET checked_at = ?, status = ? + WHERE signature = ?;` + queryFmtSelectOAuth2PARContext = ` SELECT id, signature, request_id, client_id, requested_at, scopes, audience, handled_response_types, response_mode, response_mode_default, revoked, |