@logto/schemas 1.10.0 → 1.11.0

package/tables/organizations.sql

@@ -0,0 +1,19 @@
+/* init_order = 1 */
+
+/** Organizations defined by [RFC 0001](https://github.com/logto-io/rfcs/blob/HEAD/active/0001-organization.md). */
+create table organizations (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  /** The globally unique identifier of the organization. */
+  id varchar(21) not null,
+  /** The organization's name for display. */
+  name varchar(128) not null,
+  /** A brief description of the organization. */
+  description varchar(256),
+  /** When the organization was created. */
+  created_at timestamptz not null default(now()),
+  primary key (id)
+);
+
+create index organizations__id
+  on organizations (tenant_id, id);

package/tables/sso_connectors.sql

@@ -0,0 +1,28 @@
+/* init_order = 1 */
+create table sso_connectors (
+  tenant_id varchar(21) not null 
+    references tenants (id) on update cascade on delete cascade,
+  /** The globally unique identifier of the SSO connector. */
+  id varchar(128) not null,
+  /** The connector factory name of the SSO provider. */
+  provider_name varchar(128) not null,
+  /** The name of the SSO provider for display. */
+  connector_name varchar(128) not null,
+  /** The connector configuration. Different schemas for different provide type */
+  config jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  /** The SSO email domains. */
+  domains jsonb /* @use SsoDomains */ not null default '[]'::jsonb,
+  /** The SSO branding. */
+  branding jsonb /* @use SsoBranding */ not null default '{}'::jsonb,
+  /** Determines whether to synchronize the user's profile on each login. */
+  sync_profile boolean not null default FALSE,
+  /** When the SSO connector was created. */
+  created_at timestamptz not null default(now()),
+  primary key (id)
+);
+
+create index sso_connectors__id
+  on sso_connectors (tenant_id, id);
+
+create index sso_connectors__id__provider_name
+  on sso_connectors (tenant_id, id, provider_name);

package/tables/user_sso_identities.sql

@@ -0,0 +1,20 @@
+/* init_order = 2 */
+
+create table user_sso_identities (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  id varchar(21) not null,
+  user_id varchar(12) not null references users (id) on update cascade on delete cascade,
+  /** Unique provider identifier. Issuer of the OIDC connectors, entityId of the SAML providers */
+  issuer varchar(256) not null,
+  /** Provider user identity id*/
+  identity_id varchar(128) not null,
+  detail jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  created_at timestamp not null default(now()),
+  sso_connector_id
+    varchar(128) not null
+    references sso_connectors (id) on update cascade on delete cascade,
+  primary key (id),
+  constraint user_sso_identities__issuer__identity_id
+    unique (tenant_id, issuer, identity_id)
+);

package/tables/users.sql

@@ -16,6 +16,7 @@ create table users (
   application_id varchar(21),
   identities jsonb /* @use Identities */ not null default '{}'::jsonb,
   custom_data jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  logto_config jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   mfa_verifications jsonb /* @use MfaVerifications */ not null default '[]'::jsonb,
   is_suspended boolean not null default false,
   last_sign_in_at timestamptz,