Infrastructure/logto
0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2024-12-16 20:26:19 -05:00
Code Issues Activity

feat(schemas): add saml_application_configs table

Browse source
This commit is contained in:
Darcy Ye 2024-11-18 12:31:11 +08:00
parent 2ad808c8ff
commit 4fc4b0b6c5
No known key found for this signature in database
GPG key ID: B46F4C07EDEFC610
4 changed files with 80 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
packages/schemas/alterations/next-1731904029-add-saml-application-configs-table.ts Normal file
View file

@ -0,0 +1,32 @@
import { sql } from '@silverhand/slonik';
import type { AlterationScript } from '../lib/types/alteration.js';
import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
const alteration: AlterationScript = {
up: async (pool) => {
await pool.query(sql`
create table saml_application_configs (
application_id varchar(21) not null
references applications (id) on update cascade on delete cascade,
tenant_id varchar(21) not null
references tenants (id) on update cascade on delete cascade,
attribute_mapping jsonb /* @use SamlAttributeMapping */ not null default '{}'::jsonb,
sp_metadata jsonb /* @use SamlSpMetadata */ not null,
primary key (tenant_id, application_id),
constraint application_type
check (check_application_type(application_id, 'SAML'))
);
`);
await applyTableRls(pool, 'saml_application_configs');
},
down: async (pool) => {
await dropTableRls(pool, 'saml_application_configs');
await pool.query(sql`
drop table saml_application_configs;
`);
},
};
export default alteration;

1
packages/schemas/src/foundations/jsonb-types/index.ts
View file

@ -10,6 +10,7 @@ export * from './sso-connector.js';
export * from './applications.js';
export * from './verification-records.js';
export * from './account-centers.js';
export * from './saml-application-configs.js';
export {
configurableConnectorMetadataGuard,

29
packages/schemas/src/foundations/jsonb-types/saml-application-configs.ts Normal file
View file

@ -0,0 +1,29 @@
import { type ToZodObject } from '@logto/connector-kit';
import { z } from 'zod';
export type SamlAttributeMapping = Record<string, string>;
export const samlAttributeMappingGuard = z.record(
z.string()
) satisfies z.ZodType<SamlAttributeMapping>;
export enum BindingType {
POST = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
REDIRECT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
}
export type SamlSpMetadata = {
entityID: string;
acsURL: {
binding: BindingType;
url: string;
};
};
export const samlSpMetadataGuard = z.object({
entityID: z.string(),
acsURL: z.object({
binding: z.nativeEnum(BindingType),
url: z.string(),
}),
}) satisfies ToZodObject<SamlSpMetadata>;

18
packages/schemas/tables/saml_application_configs.sql Normal file
View file

@ -0,0 +1,18 @@
/* init_order = 2 */
/**
* The SAML application config and SAML-type application have a one-to-one correspondence:
* - a SAML-type application can only have one SAML application config
* - a SAML application config can only configure one SAML-type application
*/
create table saml_application_configs (
application_id varchar(21) not null
references applications (id) on update cascade on delete cascade,
tenant_id varchar(21) not null
references tenants (id) on update cascade on delete cascade,
attribute_mapping jsonb /* @use SamlAttributeMapping */ not null default '{}'::jsonb,
sp_metadata jsonb /* @use SamlSpMetadata */ not null,
primary key (tenant_id, application_id),
constraint application_type
check (check_application_type(application_id, 'SAML'))
);