@authhero/drizzle 1.7.4 → 1.8.1

package/drizzle/meta/_journal.json

@@ -64,6 +64,13 @@
       "when": 1788700194751,
       "tag": "0008_client_grants_unique_audience",
       "breakpoints": true
+    },
+    {
+      "idx": 9,
+      "version": "6",
+      "when": 1790333364216,
+      "tag": "0009_token_exchange_profiles",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -11,7 +11,7 @@
     "type": "git",
     "url": "https://github.com/markusahlstrand/authhero"
   },
-  "version": "1.7.4",
+  "version": "1.8.1",
   "files": [
     "dist",
     "src/schema",
@@ -35,8 +35,8 @@
   "dependencies": {
     "drizzle-orm": "^0.45.2",
     "nanoid": "^5.1.11",
-    "@authhero/adapter-interfaces": "4.14.0",
-    "@authhero/proxy": "0.11.0"
+    "@authhero/adapter-interfaces": "4.16.0",
+    "@authhero/proxy": "0.11.2"
   },
   "devDependencies": {
     "@hono/zod-openapi": "^1.4.0",

package/src/schema/sqlite/clients.ts

@@ -87,6 +87,7 @@ export const clients = sqliteTable(
     registration_type: text("registration_type", { length: 32 }),
     registration_metadata: text("registration_metadata"),
     user_linking_mode: text("user_linking_mode", { length: 16 }),
+    token_exchange: text("token_exchange"),
   },
   (table) => [
     primaryKey({

package/src/schema/sqlite/index.ts

@@ -49,3 +49,6 @@ export * from "./proxyRoutes";
 
 // SCIM inbound provisioning (#1191)
 export * from "./scim";
+
+// Custom Token Exchange profiles (#1417)
+export * from "./tokenExchangeProfiles";

package/src/schema/sqlite/tokenExchangeProfiles.ts

@@ -0,0 +1,25 @@
+import { sqliteTable, text, uniqueIndex } from "drizzle-orm/sqlite-core";
+
+// Custom Token Exchange profiles (#1417). The unique (tenant_id,
+// subject_token_type) index makes a subject_token_type resolve to a single
+// profile; a duplicate create surfaces as a constraint error (409 upstream).
+export const tokenExchangeProfiles = sqliteTable(
+  "token_exchange_profiles",
+  {
+    id: text("id", { length: 64 }).primaryKey(),
+    tenant_id: text("tenant_id", { length: 255 }).notNull(),
+    name: text("name", { length: 255 }).notNull(),
+    subject_token_type: text("subject_token_type", { length: 255 }).notNull(),
+    action_id: text("action_id", { length: 255 }),
+    type: text("type", { length: 64 }).notNull(),
+    jwt_verification: text("jwt_verification"),
+    created_at: text("created_at", { length: 35 }).notNull(),
+    updated_at: text("updated_at", { length: 35 }).notNull(),
+  },
+  (table) => [
+    uniqueIndex("token_exchange_profiles_tenant_subject_token_type_idx").on(
+      table.tenant_id,
+      table.subject_token_type,
+    ),
+  ],
+);