Files
Modrinth-plus/migrations/20231016190056_oauth_provider.sql

34 lines
1.4 KiB
MySQL
Raw Normal View History

OAuth 2.0 Authorization Server [MOD-559] (#733) * WIP end-of-day push * Authorize endpoint, accept endpoints, DB stuff for oauth clients, their redirects, and client authorizations * OAuth Client create route * Get user clients * Client delete * Edit oauth client * Include redirects in edit client route * Database stuff for tokens * Reorg oauth stuff out of auth/flows and into its own module * Impl OAuth get access token endpoint * Accept oauth access tokens as auth and update through AuthQueue * User OAuth authorization management routes * Forgot to actually add the routes lol * Bit o cleanup * Happy path test for OAuth and minor fixes for things it found * Add dummy data oauth client (and detect/handle dummy data version changes) * More tests * Another test * More tests and reject endpoint * Test oauth client and authorization management routes * cargo sqlx prepare * dead code warning * Auto clippy fixes * Uri refactoring * minor name improvement * Don't compile-time check the test sqlx queries * Trying to fix db concurrency problem to get tests to pass * Try fix from test PR * Fixes for updated sqlx * Prevent restricted scopes from being requested or issued * Get OAuth client(s) * Remove joined oauth client info from authorization returns * Add default conversion to OAuthError::error so we can use ? * Rework routes * Consolidate scopes into SESSION_ACCESS * Cargo sqlx prepare * Parse to OAuthClientId automatically through serde and actix * Cargo clippy * Remove validation requiring 1 redirect URI on oauth client creation * Use serde(flatten) on OAuthClientCreationResult
2023-10-30 11:14:38 -05:00
CREATE TABLE oauth_clients (
id bigint PRIMARY KEY,
name text NOT NULL,
icon_url text NULL,
max_scopes bigint NOT NULL,
secret_hash text NOT NULL,
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
created_by bigint NOT NULL REFERENCES users(id)
);
CREATE TABLE oauth_client_redirect_uris (
id bigint PRIMARY KEY,
client_id bigint NOT NULL REFERENCES oauth_clients (id) ON DELETE CASCADE,
uri text
);
CREATE TABLE oauth_client_authorizations (
id bigint PRIMARY KEY,
client_id bigint NOT NULL REFERENCES oauth_clients (id) ON DELETE CASCADE,
user_id bigint NOT NULL REFERENCES users (id) ON DELETE CASCADE,
scopes bigint NOT NULL,
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
UNIQUE (client_id, user_id)
);
CREATE TABLE oauth_access_tokens (
id bigint PRIMARY KEY,
authorization_id bigint NOT NULL REFERENCES oauth_client_authorizations(id) ON DELETE CASCADE,
token_hash text NOT NULL UNIQUE,
scopes bigint NOT NULL,
created timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP,
expires timestamptz NOT NULL DEFAULT CURRENT_TIMESTAMP + interval '14 days',
last_used timestamptz NULL
);
CREATE INDEX oauth_client_creator ON oauth_clients(created_by);
CREATE INDEX oauth_redirect_client ON oauth_client_redirect_uris(client_id);
CREATE INDEX oauth_access_token_hash ON oauth_access_tokens(token_hash);