logto/packages/schemas/alterations/1.15.0-1709521416-user-password-encrypt-method.ts

import { sql } from '@silverhand/slonik';

import type { AlterationScript } from '../lib/types/alteration.js';

const alteration: AlterationScript = {
  up: async (pool) => {
    await pool.query(sql`
      alter type users_password_encryption_method add value 'SHA1';
      alter type users_password_encryption_method add value 'SHA256';
      alter type users_password_encryption_method add value 'MD5';
      alter type users_password_encryption_method add value 'Bcrypt';
    `);
  },
  down: async (pool) => {
    const { rows } = await pool.query(sql`
      select id from users
      where password_encryption_method <> ${'Argon2i'}
    `);
    if (rows.length > 0) {
      throw new Error('There are users with password encryption methods other than Argon2i.');
    }

    await pool.query(sql`
      create type users_password_encryption_method_revised as enum ('Argon2i');

      alter table users 
      alter column password_encryption_method type users_password_encryption_method_revised 
      using password_encryption_method::text::users_password_encryption_method_revised;

      drop type users_password_encryption_method;
      alter type users_password_encryption_method_revised rename to users_password_encryption_method;
    `);
  },
};

export default alteration;