initial commit

fluxer_devops/cassandra/migrations/20251111164136_oauth.cql

@@ -0,0 +1,135 @@
+CREATE TABLE IF NOT EXISTS fluxer.oauth_clients (
+    client_id bigint PRIMARY KEY,
+    client_secret_hash text,
+    name text,
+    description text,
+    icon_url text,
+    owner_user_id bigint,
+    team_id bigint,
+    type text,
+    redirect_uris set<text>,
+    scopes set<text>,
+    grant_types set<text>,
+    homepage_url text,
+    created_at timestamp,
+    updated_at timestamp
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_clients_by_owner (
+    owner_user_id bigint,
+    client_id bigint,
+    PRIMARY KEY ((owner_user_id), client_id)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_authorization_requests (
+    request_id text PRIMARY KEY,
+    client_id bigint,
+    redirect_uri text,
+    scope set<text>,
+    state text,
+    code_challenge text,
+    code_challenge_method text,
+    nonce text,
+    created_at timestamp,
+    expires_at timestamp
+) WITH default_time_to_live = 900;
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_authorization_codes (
+    code text PRIMARY KEY,
+    client_id bigint,
+    user_id bigint,
+    redirect_uri text,
+    scope set<text>,
+    code_challenge text,
+    code_challenge_method text,
+    nonce text,
+    created_at timestamp,
+    expires_at timestamp
+) WITH default_time_to_live = 900;
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_access_tokens (
+    token_ text PRIMARY KEY,
+    client_id bigint,
+    user_id bigint,
+    scope set<text>,
+    created_at timestamp,
+    expires_at timestamp
+) WITH default_time_to_live = 86400;
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_access_tokens_by_client (
+    client_id bigint,
+    token_ text,
+    PRIMARY KEY ((client_id), token_)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_access_tokens_by_user (
+    user_id bigint,
+    token_ text,
+    PRIMARY KEY ((user_id), token_)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_refresh_tokens (
+    token_ text PRIMARY KEY,
+    client_id bigint,
+    user_id bigint,
+    scope set<text>,
+    created_at timestamp,
+    expires_at timestamp
+) WITH default_time_to_live = 2592000;
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_refresh_tokens_by_client (
+    client_id bigint,
+    token_ text,
+    PRIMARY KEY ((client_id), token_)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_refresh_tokens_by_user (
+    user_id bigint,
+    token_ text,
+    PRIMARY KEY ((user_id), token_)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_teams (
+    team_id bigint PRIMARY KEY,
+    name text,
+    owner_user_id bigint,
+    created_at timestamp
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_teams_by_owner (
+    owner_user_id bigint,
+    team_id bigint,
+    PRIMARY KEY ((owner_user_id), team_id)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_team_members (
+    team_id bigint,
+    user_id bigint,
+    role text,
+    added_at timestamp,
+    PRIMARY KEY ((team_id), user_id)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_team_members_by_user (
+    user_id bigint,
+    team_id bigint,
+    PRIMARY KEY ((user_id), team_id)
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oauth_bot_tokens (
+    token_ text PRIMARY KEY,
+    client_id bigint,
+    user_id bigint,
+    scopes set<text>,
+    created_at timestamp,
+    revoked boolean
+);
+
+CREATE TABLE IF NOT EXISTS fluxer.oidc_keys (
+    kid text PRIMARY KEY,
+    alg text,
+    public_jwk text,
+    private_jwk text,
+    created_at timestamp,
+    active boolean
+);