Infrastructure/logto
0
Fork 0
mirror of https://github.com/logto-io/logto.git synced 2024-12-16 20:26:19 -05:00
Code Issues Activity

Merge pull request #6817 from logto-io/yemq-log-10113-add-saml-application-proxies-table

Browse source 
feat(schemas): add `saml_application_configs` table
This commit is contained in:
Darcy Ye 2024-11-22 14:56:52 +08:00 committed by GitHub
commit f563517c68
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 76 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
packages/schemas/alterations/next-1731904029-add-saml-application-configs-table.ts Normal file
View file

@ -0,0 +1,33 @@
import { sql } from '@silverhand/slonik';
import type { AlterationScript } from '../lib/types/alteration.js';
import { applyTableRls, dropTableRls } from './utils/1704934999-tables.js';
const alteration: AlterationScript = {
up: async (pool) => {
await pool.query(sql`
create table saml_application_configs (
application_id varchar(21) not null
references applications (id) on update cascade on delete cascade,
tenant_id varchar(21) not null
references tenants (id) on update cascade on delete cascade,
attribute_mapping jsonb /* @use SamlAttributeMapping */ not null default '{}'::jsonb,
entity_id varchar(128),
acs_url jsonb /* @use SamlAcsUrl */,
primary key (tenant_id, application_id),
constraint application_type
check (check_application_type(application_id, 'SAML'))
);
`);
await applyTableRls(pool, 'saml_application_configs');
},
down: async (pool) => {
await dropTableRls(pool, 'saml_application_configs');
await pool.query(sql`
drop table saml_application_configs;
`);
},
};
export default alteration;

1
packages/schemas/src/foundations/jsonb-types/index.ts
View file

@ -10,6 +10,7 @@ export * from './sso-connector.js';
export * from './applications.js'; export * from './applications.js';
export * from './verification-records.js'; export * from './verification-records.js';
export * from './account-centers.js'; export * from './account-centers.js';
export * from './saml-application-configs.js';
export { export {
configurableConnectorMetadataGuard, configurableConnectorMetadataGuard,

23
packages/schemas/src/foundations/jsonb-types/saml-application-configs.ts Normal file
View file

@ -0,0 +1,23 @@
import { type ToZodObject } from '@logto/connector-kit';
import { z } from 'zod';
export type SamlAttributeMapping = Record<string, string>;
export const samlAttributeMappingGuard = z.record(
z.string()
) satisfies z.ZodType<SamlAttributeMapping>;
export enum BindingType {
POST = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST',
REDIRECT = 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect',
}
export type SamlAcsUrl = {
binding?: BindingType;
url: string;
};
export const samlAcsUrlGuard = z.object({
binding: z.nativeEnum(BindingType),
url: z.string(),
}) satisfies ToZodObject<SamlAcsUrl>;

19
packages/schemas/tables/saml_application_configs.sql Normal file
View file

@ -0,0 +1,19 @@
/* init_order = 2 */
/**
* The SAML application config and SAML-type application have a one-to-one correspondence:
* - a SAML-type application can only have one SAML application config
* - a SAML application config can only configure one SAML-type application
*/
create table saml_application_configs (
application_id varchar(21) not null
references applications (id) on update cascade on delete cascade,
tenant_id varchar(21) not null
references tenants (id) on update cascade on delete cascade,
attribute_mapping jsonb /* @use SamlAttributeMapping */ not null default '{}'::jsonb,
entity_id varchar(128),
acs_url jsonb /* @use SamlAcsUrl */,
primary key (tenant_id, application_id),
constraint application_type
check (check_application_type(application_id, 'SAML'))
);