mirror of
https://github.com/MeshTender/MeshTender.git
synced 2026-09-01 17:38:15 +00:00
16 lines
665 B
SQL
16 lines
665 B
SQL
-- +goose Up
|
|
-- Single-use codes that hand off an authenticated session from the auth host to
|
|
-- the app host. The auth host mints a row after a successful sign-in and
|
|
-- redirects the browser to the app host's callback, which consumes it (deleting
|
|
-- the row) to establish its own host-scoped session. Short-lived and one-shot.
|
|
CREATE TABLE auth_codes (
|
|
code TEXT PRIMARY KEY,
|
|
user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
|
|
next TEXT NOT NULL DEFAULT '/', -- validated app-local post-auth path
|
|
expiry TIMESTAMPTZ NOT NULL
|
|
);
|
|
CREATE INDEX auth_codes_expiry_idx ON auth_codes (expiry);
|
|
|
|
-- +goose Down
|
|
DROP TABLE auth_codes;
|