standard_id 0.56.1 → 0.57.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 076ceacf137b604ea48f42f6955f7eb9786656cab0112adc5967f06d5b6a178b
-  data.tar.gz: cb179e91df123b9d5c996626a6af219b170faa1e458c6d185dc6ad597f32c044
+  metadata.gz: c50961cc2c4446bd495efdebca4ad54a871c371fab3c63e0ff1dd6792b44e1ff
+  data.tar.gz: be9ebdaedf84eedfed63f98ade1e8fb37bfc90112b7ba4532aa8d179aefb03b9
 SHA512:
-  metadata.gz: e8f41357e84dbe80520836d321dd3f65e1b81329fe50c34e5c005975612fb77a1bf3d919eb87289c6ddf3ba29f95a22bc84ac45c7d1c9815411ae3efcb6161ae
-  data.tar.gz: 7c9637e8e58f301576d8d5564843b19ae2d58599aa94427cf8ffd3985385badbdb5a9b2b2fe9052fa4ef3a55989b59c1362e5a95e39d933c1cd444062830f0c7
+  metadata.gz: 55f8de3f738e3363e452842bcea0b68fbff7798e59039bdac698de7b0b5d1c1fffdb58fe693e60671aa6c9cc2743059fc3d3269e11bde54a84d7bbb23e64b8f5
+  data.tar.gz: 9c0e08fdb33cc59058c5be1be6f65b7308bb497738a8a338de1072e5cbd105f59417cbd65c4902e6f937ff53544bbd755cf7e8b8e349b2bd058583cc75eaa2bc

data/CHANGELOG.md

@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.57.0] - 2026-10-28
+
+### Added
+
+- **Migration `20261028000000_add_value_lookup_indexes_to_standard_id_tables`.** Adds a
+  `[type, value]` index on `standard_id_identifiers`, which serves the `find_by(value:)` lookup behind
+  every sign-in, OTP start, social login and password reset (the only index containing `value` led
+  with `account_id`, so each lookup was a sequential scan). Also adds a partial
+  `client_application_id` index on `standard_id_refresh_tokens` for `PurgeStaleDynamicClientsJob`.
+  Both are built `CONCURRENTLY` on PostgreSQL and are idempotent. Run
+  `bin/rails standard_id:install:migrations && bin/rails db:migrate`.
+
 ## [0.56.1] - 2026-10-27
 
 ### Fixed

data/db/migrate/20261028000000_add_value_lookup_indexes_to_standard_id_tables.rb

@@ -0,0 +1,73 @@
+class AddValueLookupIndexesToStandardIdTables < ActiveRecord::Migration[8.0]
+  # Indexes for two lookups nothing in the schema serves (deep audit
+  # DBP-002/DBP-011, 2026-10-27):
+  #
+  # - standard_id_identifiers [type, value]: every sign-in, OTP start, social
+  #   login and password reset resolves its identifier with
+  #   `EmailIdentifier.find_by(value:)` / `PhoneNumberIdentifier.find_by(value:)`
+  #   (STI adds `type = ?`). The only index containing `value` leads with
+  #   account_id, so each lookup is a sequential scan. Not unique: the same
+  #   value may belong to more than one account.
+  # - standard_id_refresh_tokens client_application_id: PurgeStaleDynamicClientsJob
+  #   reads refresh tokens per client (`client.refresh_tokens`) and by
+  #   `client_application_id IS NOT NULL`. Partial, because tokens not bound
+  #   to an application (social sign-in refreshes, rows minted before
+  #   20261020000000) leave it NULL.
+  #
+  # At today's table sizes these scans are cheap (Sentry, 14 days: the
+  # identifier lookup is p50 2-4ms, p95 9-15ms in every host); the cost grows
+  # with every account. Idempotent (if_not_exists / if_exists), CONCURRENTLY
+  # on Postgres, and an INVALID index left by a failed concurrent build is
+  # dropped and rebuilt, same conventions as 20260924000000.
+  disable_ddl_transaction!
+
+  INDEXES = [
+    {
+      table: :standard_id_identifiers,
+      columns: [:type, :value],
+      name: "index_standard_id_identifiers_on_type_and_value"
+    },
+    {
+      table: :standard_id_refresh_tokens,
+      columns: :client_application_id,
+      name: "index_standard_id_refresh_tokens_on_client_application_id",
+      where: "client_application_id IS NOT NULL"
+    }
+  ].freeze
+
+  def up
+    INDEXES.each do |index|
+      if postgres? && invalid_postgres_index?(index[:name])
+        remove_index index[:table], name: index[:name], if_exists: true, **concurrent
+      end
+
+      add_index index[:table], index[:columns],
+        name: index[:name], where: index[:where], if_not_exists: true, **concurrent
+    end
+  end
+
+  def down
+    INDEXES.each do |index|
+      remove_index index[:table], name: index[:name], if_exists: true, **concurrent
+    end
+  end
+
+  private
+
+  def postgres?
+    connection.adapter_name.downcase.include?("postgres")
+  end
+
+  def concurrent
+    postgres? ? { algorithm: :concurrently } : {}
+  end
+
+  def invalid_postgres_index?(name)
+    select_value(<<~SQL.squish).present?
+      SELECT 1
+      FROM pg_index i
+      INNER JOIN pg_class c ON c.oid = i.indexrelid
+      WHERE c.relname = #{connection.quote(name)} AND NOT i.indisvalid
+    SQL
+  end
+end

data/lib/standard_id/version.rb

@@ -1,3 +1,3 @@
 module StandardId
-  VERSION = "0.56.1"
+  VERSION = "0.57.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: standard_id
 version: !ruby/object:Gem::Version
-  version: 0.56.1
+  version: 0.57.0
 platform: ruby
 authors:
 - Jaryl Sim
@@ -249,6 +249,7 @@ files:
 - db/migrate/20261020000000_add_client_application_id_to_standard_id_refresh_tokens.rb
 - db/migrate/20261020120000_add_registration_access_token_digest_to_standard_id_client_applications.rb
 - db/migrate/20261022000000_add_signup_source_to_standard_id_identifiers.rb
+- db/migrate/20261028000000_add_value_lookup_indexes_to_standard_id_tables.rb
 - lib/generators/standard_id/install/install_generator.rb
 - lib/generators/standard_id/install/templates/standard_id.rb
 - lib/generators/standard_id/install/templates/standard_id_reference.rb