diff options
Diffstat (limited to 'internal/storage/migrations/postgres')
| -rw-r--r-- | internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.down.sql | 1 | ||||
| -rw-r--r-- | internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.up.sql | 32 |
2 files changed, 33 insertions, 0 deletions
diff --git a/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.down.sql b/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.down.sql new file mode 100644 index 000000000..f1739171f --- /dev/null +++ b/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.down.sql @@ -0,0 +1 @@ +DROP TABLE IF EXISTS oauth2_device_code_session; diff --git a/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.up.sql b/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.up.sql new file mode 100644 index 000000000..eea1dbfe1 --- /dev/null +++ b/internal/storage/migrations/postgres/V0018.OAuth2DeviceCode.up.sql @@ -0,0 +1,32 @@ +CREATE TABLE IF NOT EXISTS oauth2_device_code_session ( + id SERIAL CONSTRAINT oauth2_device_code_session_pkey PRIMARY KEY, + challenge_id CHAR(36) NOT NULL, + request_id VARCHAR(40) NOT NULL, + client_id VARCHAR(255) NOT NULL, + signature VARCHAR(255) NOT NULL, + user_code_signature VARCHAR(255) NOT NULL, + status INTEGER NOT NULL, + subject CHAR(36) NOT NULL, + requested_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP, + checked_at TIMESTAMP WITH TIME ZONE NOT NULL DEFAULT CURRENT_TIMESTAMP, + requested_scopes TEXT NOT NULL, + granted_scopes TEXT NOT NULL, + requested_audience TEXT NULL DEFAULT '', + granted_audience TEXT NULL DEFAULT '', + active BOOLEAN NOT NULL DEFAULT FALSE, + revoked BOOLEAN NOT NULL DEFAULT FALSE, + form_data TEXT NOT NULL, + session_data BYTEA NOT NULL +); + +CREATE INDEX oauth2_device_code_session_request_id_idx ON oauth2_device_code_session (request_id); +CREATE INDEX oauth2_device_code_session_client_id_idx ON oauth2_device_code_session (client_id); +CREATE INDEX oauth2_device_code_session_client_id_subject_idx ON oauth2_device_code_session (client_id, subject); + +ALTER TABLE oauth2_device_code_session + ADD CONSTRAINT oauth2_device_code_session_challenge_id_fkey + FOREIGN KEY (challenge_id) + REFERENCES oauth2_consent_session (challenge_id) ON UPDATE CASCADE ON DELETE CASCADE, + ADD CONSTRAINT oauth2_device_code_session_subject_fkey + FOREIGN KEY (subject) + REFERENCES user_opaque_identifier (identifier) ON UPDATE RESTRICT ON DELETE RESTRICT; |