feat(schemas,cli): seed default scope for management api (#2869)

Co-authored-by: Gao Sun <gao@silverhand.io>

packages/cli/src/commands/database/seed/index.ts

@@ -10,6 +10,8 @@ import {
   createDefaultSetting,
   createDemoAppApplication,
   defaultRole,
+  managementResourceScope,
+  defaultRoleScopeRelation,
 } from '@logto/schemas';
 import { Hooks } from '@logto/schemas/models';
 import chalk from 'chalk';
@@ -57,10 +59,12 @@ const createTables = async (connection: DatabaseTransactionConnection) => {
 const seedTables = async (connection: DatabaseTransactionConnection, latestTimestamp: number) => {
   await Promise.all([
     connection.query(insertInto(managementResource, 'resources')),
+    connection.query(insertInto(managementResourceScope, 'scopes')),
     connection.query(insertInto(createDefaultSetting(), 'settings')),
     connection.query(insertInto(defaultSignInExperience, 'sign_in_experiences')),
     connection.query(insertInto(createDemoAppApplication(generateStandardId()), 'applications')),
     connection.query(insertInto(defaultRole, 'roles')),
+    connection.query(insertInto(defaultRoleScopeRelation, 'roles_scopes')),
     updateDatabaseTimestamp(connection, latestTimestamp),
   ]);
 };

packages/schemas/src/seeds/index.ts

@@ -3,3 +3,4 @@ export * from './resource.js';
 export * from './setting.js';
 export * from './sign-in-experience.js';
 export * from './roles.js';
+export * from './scope.js';

packages/schemas/src/seeds/resource.ts

@@ -1,7 +1,9 @@
 import type { CreateResource } from '../db-entries/index.js';
 
+export const managementResourceId = 'management-api';
+
 export const managementResource: Readonly<CreateResource> = Object.freeze({
-  id: 'management-api',
+  id: managementResourceId,
   /**
    * The fixed resource indicator for Management APIs.
    *

packages/schemas/src/seeds/roles.ts

@@ -1,5 +1,6 @@
-import type { CreateRole } from '../db-entries/index.js';
+import type { CreateRole, CreateRolesScope } from '../db-entries/index.js';
 import { UserRole } from '../types/index.js';
+import { managementResourceScopeId } from './scope.js';
 
 export const adminConsoleAdminRoleId = 'ac-admin-id';
 
@@ -11,3 +12,8 @@ export const defaultRole: Readonly<CreateRole> = {
   name: UserRole.Admin,
   description: 'Admin role for Logto.',
 };
+
+export const defaultRoleScopeRelation: Readonly<CreateRolesScope> = {
+  roleId: adminConsoleAdminRoleId,
+  scopeId: managementResourceScopeId,
+};

packages/schemas/src/seeds/scope.ts

@@ -0,0 +1,11 @@
+import type { CreateScope } from '../db-entries/index.js';
+import { managementResourceId } from './resource.js';
+
+export const managementResourceScopeId = 'management-api-scope';
+
+export const managementResourceScope: Readonly<CreateScope> = Object.freeze({
+  id: managementResourceScopeId,
+  name: 'default',
+  description: 'Default scope for management API',
+  resourceId: managementResourceId,
+});