6231424e88
* feat: add personal access tokens * feat: replace MCP tokens with OAuth foundation * fix: keep OAuth constants private in auth foundation * fix: clean up mcp oauth branch scope * fix: expose oauth metadata endpoints * fix: trim mcp oauth config to non-default options Drop OIDC scopes, the org-id JWT claim, and the openid-configuration metadata endpoint since the MCP integration is OAuth-only and the org gets resolved server-side. Also remove options that just duplicated better-auth defaults. * fix: drop redundant oauth metadata helpers Remove `session.storeSessionInDatabase: true` since better-auth only enforces it when secondaryStorage is configured. Inline the `getHostedBaseUrlForOAuthMetadata` alias and skip the async `getOAuthServerConfig()` call in the protected-resource metadata handler — the issuer is just `baseURL` without a custom jwt.issuer override. * docs: explain cache headers on mcp metadata response * Use escaped file routes for OAuth metadata * save
90 lines
2.9 KiB
SQL
90 lines
2.9 KiB
SQL
CREATE TABLE `jwks` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`public_key` text NOT NULL,
|
|
`private_key` text NOT NULL,
|
|
`created_at` integer NOT NULL,
|
|
`expires_at` integer
|
|
);
|
|
--> statement-breakpoint
|
|
CREATE TABLE `oauth_access_token` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`token` text NOT NULL,
|
|
`client_id` text NOT NULL,
|
|
`session_id` text,
|
|
`user_id` text,
|
|
`reference_id` text,
|
|
`refresh_id` text,
|
|
`expires_at` integer NOT NULL,
|
|
`created_at` integer NOT NULL,
|
|
`scopes` text NOT NULL,
|
|
FOREIGN KEY (`client_id`) REFERENCES `oauth_client`(`client_id`) ON UPDATE no action ON DELETE cascade,
|
|
FOREIGN KEY (`session_id`) REFERENCES `session`(`id`) ON UPDATE no action ON DELETE set null,
|
|
FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade,
|
|
FOREIGN KEY (`refresh_id`) REFERENCES `oauth_refresh_token`(`id`) ON UPDATE no action ON DELETE cascade
|
|
);
|
|
--> statement-breakpoint
|
|
CREATE UNIQUE INDEX `oauth_access_token_token_unique` ON `oauth_access_token` (`token`);--> statement-breakpoint
|
|
CREATE TABLE `oauth_client` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`client_id` text NOT NULL,
|
|
`client_secret` text,
|
|
`disabled` integer DEFAULT false,
|
|
`skip_consent` integer,
|
|
`enable_end_session` integer,
|
|
`subject_type` text,
|
|
`scopes` text,
|
|
`user_id` text,
|
|
`created_at` integer,
|
|
`updated_at` integer,
|
|
`name` text,
|
|
`uri` text,
|
|
`icon` text,
|
|
`contacts` text,
|
|
`tos` text,
|
|
`policy` text,
|
|
`software_id` text,
|
|
`software_version` text,
|
|
`software_statement` text,
|
|
`redirect_uris` text NOT NULL,
|
|
`post_logout_redirect_uris` text,
|
|
`token_endpoint_auth_method` text,
|
|
`grant_types` text,
|
|
`response_types` text,
|
|
`public` integer,
|
|
`type` text,
|
|
`require_pkce` integer,
|
|
`reference_id` text,
|
|
`metadata` text,
|
|
FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade
|
|
);
|
|
--> statement-breakpoint
|
|
CREATE UNIQUE INDEX `oauth_client_client_id_unique` ON `oauth_client` (`client_id`);--> statement-breakpoint
|
|
CREATE TABLE `oauth_consent` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`client_id` text NOT NULL,
|
|
`user_id` text,
|
|
`reference_id` text,
|
|
`scopes` text NOT NULL,
|
|
`created_at` integer NOT NULL,
|
|
`updated_at` integer NOT NULL,
|
|
FOREIGN KEY (`client_id`) REFERENCES `oauth_client`(`client_id`) ON UPDATE no action ON DELETE cascade,
|
|
FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade
|
|
);
|
|
--> statement-breakpoint
|
|
CREATE TABLE `oauth_refresh_token` (
|
|
`id` text PRIMARY KEY NOT NULL,
|
|
`token` text NOT NULL,
|
|
`client_id` text NOT NULL,
|
|
`session_id` text,
|
|
`user_id` text NOT NULL,
|
|
`reference_id` text,
|
|
`expires_at` integer NOT NULL,
|
|
`created_at` integer NOT NULL,
|
|
`revoked` integer,
|
|
`auth_time` integer,
|
|
`scopes` text NOT NULL,
|
|
FOREIGN KEY (`client_id`) REFERENCES `oauth_client`(`client_id`) ON UPDATE no action ON DELETE cascade,
|
|
FOREIGN KEY (`session_id`) REFERENCES `session`(`id`) ON UPDATE no action ON DELETE set null,
|
|
FOREIGN KEY (`user_id`) REFERENCES `user`(`id`) ON UPDATE no action ON DELETE cascade
|
|
);
|