@logto/schemas 1.9.2 → 1.10.1

package/tables/organization_scopes.sql

@@ -0,0 +1,19 @@
+/* init_order = 1 */
+
+/** The scopes (permissions) defined by the organization template. */
+create table organization_scopes (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  /** The globally unique identifier of the organization scope. */
+  id varchar(21) not null,
+  /** The organization scope's name, unique within the organization template. */
+  name varchar(128) not null,
+  /** A brief description of the organization scope. */
+  description varchar(256),
+  primary key (id),
+  constraint organization_scopes__name
+    unique (tenant_id, name)
+);
+
+create index organization_scopes__id
+  on organization_scopes (tenant_id, id);

package/tables/organization_user_relations.sql

@@ -0,0 +1,12 @@
+/* init_order = 2 */
+
+/** The relations between organizations and users. It indicates membership of users in organizations. */
+create table organization_user_relations (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  organization_id varchar(21) not null
+    references organizations (id) on update cascade on delete cascade,
+  user_id varchar(21) not null
+    references users (id) on update cascade on delete cascade,
+  primary key (tenant_id, organization_id, user_id)
+);

package/tables/organizations.sql

@@ -0,0 +1,19 @@
+/* init_order = 1 */
+
+/** Organizations defined by [RFC 0001](https://github.com/logto-io/rfcs/blob/HEAD/active/0001-organization.md). */
+create table organizations (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  /** The globally unique identifier of the organization. */
+  id varchar(21) not null,
+  /** The organization's name for display. */
+  name varchar(128) not null,
+  /** A brief description of the organization. */
+  description varchar(256),
+  /** When the organization was created. */
+  created_at timestamptz not null default(now()),
+  primary key (id)
+);
+
+create index organizations__id
+  on organizations (tenant_id, id);

package/tables/sso_connectors.sql

@@ -0,0 +1,29 @@
+create table sso_connectors (
+  tenant_id varchar(21) not null 
+    references tenants (id) on update cascade on delete cascade,
+  /** The globally unique identifier of the SSO connector. */
+  id varchar(128) not null,
+  /** The connector factory name of the SSO provider. */
+  provider_name varchar(128) not null,
+  /** The name of the SSO provider for display. */
+  connector_name varchar(128) not null,
+  /** The connector configuration. Different schemas for different provide type */
+  config jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  /** The SSO email domains. */
+  domains jsonb /* @use SsoDomains */ not null default '[]'::jsonb,
+  /** The SSO branding. */
+  branding jsonb /* @use SsoBranding */ not null default '{}'::jsonb,
+  /** Determines whether to synchronize the user's profile on each login. */
+  sync_profile boolean not null default FALSE,
+  /** Determines whether SSO is the restricted sign-in method for users with the SSO registered email domains */
+  sso_only boolean not null default FALSE,
+  /** When the SSO connector was created. */
+  created_at timestamptz not null default(now()),
+  primary key (id)
+);
+
+create index sso_connectors__id
+  on sso_connectors (tenant_id, id);
+
+create index sso_connectors__id__provider_name
+  on sso_connectors (tenant_id, id, provider_name);

package/tables/user_sso_identities.sql

@@ -0,0 +1,17 @@
+/* init_order = 2 */
+
+create table user_sso_identities (
+  tenant_id varchar(21) not null
+    references tenants (id) on update cascade on delete cascade,
+  id varchar(21) not null,
+  user_id varchar(12) not null references users (id) on update cascade on delete cascade,
+  /** Unique provider identifier. Issuer of the OIDC connectors, entityId of the SAML providers */
+  issuer varchar(256) not null,
+  /** Provider user identity id*/
+  identity_id varchar(128) not null,
+  detail jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  created_at timestamp not null default(now()),
+  primary key (id),
+  constraint user_sso_identities__issuer__identity_id
+    unique (tenant_id, issuer, identity_id)
+);

package/tables/users.sql

@@ -16,6 +16,7 @@ create table users (
   application_id varchar(21),
   identities jsonb /* @use Identities */ not null default '{}'::jsonb,
   custom_data jsonb /* @use JsonObject */ not null default '{}'::jsonb,
+  logto_config jsonb /* @use JsonObject */ not null default '{}'::jsonb,
   mfa_verifications jsonb /* @use MfaVerifications */ not null default '[]'::jsonb,
   is_suspended boolean not null default false,
   last_sign_in_at timestamptz,