You've already forked AstralRinth
forked from didirus/AstralRinth
6cfd4637db
* WIP end-of-day push * Authorize endpoint, accept endpoints, DB stuff for oauth clients, their redirects, and client authorizations * OAuth Client create route * Get user clients * Client delete * Edit oauth client * Include redirects in edit client route * Database stuff for tokens * Reorg oauth stuff out of auth/flows and into its own module * Impl OAuth get access token endpoint * Accept oauth access tokens as auth and update through AuthQueue * User OAuth authorization management routes * Forgot to actually add the routes lol * Bit o cleanup * Happy path test for OAuth and minor fixes for things it found * Add dummy data oauth client (and detect/handle dummy data version changes) * More tests * Another test * More tests and reject endpoint * Test oauth client and authorization management routes * cargo sqlx prepare * dead code warning * Auto clippy fixes * Uri refactoring * minor name improvement * Don't compile-time check the test sqlx queries * Trying to fix db concurrency problem to get tests to pass * Try fix from test PR * Fixes for updated sqlx * Prevent restricted scopes from being requested or issued * Get OAuth client(s) * Remove joined oauth client info from authorization returns * Add default conversion to OAuthError::error so we can use ? * Rework routes * Consolidate scopes into SESSION_ACCESS * Cargo sqlx prepare * Parse to OAuthClientId automatically through serde and actix * Cargo clippy * Remove validation requiring 1 redirect URI on oauth client creation * Use serde(flatten) on OAuthClientCreationResult
34 lines
1.4 KiB
SQL
34 lines
1.4 KiB
SQL
CREATE TABLE oauth_clients (
|
|
id bigint PRIMARY KEY,
|
|
name text NOT NULL,
|
|
icon_url text NULL,
|
|
max_scopes bigint NOT NULL,
|
|
secret_hash text NOT NULL,
|
|
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
created_by bigint NOT NULL REFERENCES users(id)
|
|
);
|
|
CREATE TABLE oauth_client_redirect_uris (
|
|
id bigint PRIMARY KEY,
|
|
client_id bigint NOT NULL REFERENCES oauth_clients (id) ON DELETE CASCADE,
|
|
uri text
|
|
);
|
|
CREATE TABLE oauth_client_authorizations (
|
|
id bigint PRIMARY KEY,
|
|
client_id bigint NOT NULL REFERENCES oauth_clients (id) ON DELETE CASCADE,
|
|
user_id bigint NOT NULL REFERENCES users (id) ON DELETE CASCADE,
|
|
scopes bigint NOT NULL,
|
|
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
UNIQUE (client_id, user_id)
|
|
);
|
|
CREATE TABLE oauth_access_tokens (
|
|
id bigint PRIMARY KEY,
|
|
authorization_id bigint NOT NULL REFERENCES oauth_client_authorizations(id) ON DELETE CASCADE,
|
|
token_hash text NOT NULL UNIQUE,
|
|
scopes bigint NOT NULL,
|
|
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
expires timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP + interval '14 days',
|
|
last_used timestamptz NULL
|
|
);
|
|
CREATE INDEX oauth_client_creator ON oauth_clients(created_by);
|
|
CREATE INDEX oauth_redirect_client ON oauth_client_redirect_uris(client_id);
|
|
CREATE INDEX oauth_access_token_hash ON oauth_access_tokens(token_hash); |