@tstdl/base 0.93.178 → 0.93.180

package/authentication/server/drizzle/{0000_soft_tag.sql → 0000_odd_echo.sql}

@@ -1,10 +1,10 @@
-CREATE TYPE "authentication"."subject_status" AS ENUM('active', 'inactive', 'suspended', 'pending-approval', 'invited');--> statement-breakpoint
+CREATE TYPE "authentication"."subject_status" AS ENUM('active', 'suspended');--> statement-breakpoint
 CREATE TYPE "authentication"."subject_type" AS ENUM('system', 'user', 'service-account');--> statement-breakpoint
-CREATE TABLE "authentication"."credentials" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+CREATE TYPE "authentication"."totp_status" AS ENUM('pending', 'active');--> statement-breakpoint
+CREATE TABLE "authentication"."password" (
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"subject_id" uuid NOT NULL,
-	"hash_version" integer NOT NULL,
 	"salt" "bytea" NOT NULL,
 	"hash" "bytea" NOT NULL,
 	"revision" integer NOT NULL,
@@ -12,17 +12,16 @@ CREATE TABLE "authentication"."credentials" (
 	"create_timestamp" timestamp with time zone NOT NULL,
 	"delete_timestamp" timestamp with time zone,
 	"attributes" jsonb DEFAULT '{}'::jsonb NOT NULL,
-	CONSTRAINT "credentials_tenant_id_id_pk" PRIMARY KEY("tenant_id","id"),
-	CONSTRAINT "credentials_tenant_id_subject_id_unique" UNIQUE("tenant_id","subject_id")
+	CONSTRAINT "password_tenant_id_id_pk" PRIMARY KEY("tenant_id","id"),
+	CONSTRAINT "password_tenant_id_subject_id_unique" UNIQUE("tenant_id","subject_id")
 );
 --> statement-breakpoint
 CREATE TABLE "authentication"."session" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"subject_id" uuid NOT NULL,
 	"begin" timestamp with time zone NOT NULL,
 	"end" timestamp with time zone NOT NULL,
-	"refresh_token_hash_version" integer NOT NULL,
 	"refresh_token_salt" "bytea" NOT NULL,
 	"refresh_token_hash" "bytea" NOT NULL,
 	"revision" integer NOT NULL,
@@ -33,8 +32,52 @@ CREATE TABLE "authentication"."session" (
 	CONSTRAINT "session_tenant_id_id_pk" PRIMARY KEY("tenant_id","id")
 );
 --> statement-breakpoint
+CREATE TABLE "authentication"."totp" (
+	"id" uuid DEFAULT uuidv7() NOT NULL,
+	"tenant_id" uuid NOT NULL,
+	"subject_id" uuid NOT NULL,
+	"secret" "bytea" NOT NULL,
+	"recovery_code_salt" "bytea" NOT NULL,
+	"status" "authentication"."totp_status" NOT NULL,
+	"revision" integer NOT NULL,
+	"revision_timestamp" timestamp with time zone NOT NULL,
+	"create_timestamp" timestamp with time zone NOT NULL,
+	"delete_timestamp" timestamp with time zone,
+	"attributes" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	CONSTRAINT "totp_tenant_id_id_pk" PRIMARY KEY("tenant_id","id"),
+	CONSTRAINT "totp_tenant_id_subject_id_unique" UNIQUE("tenant_id","subject_id")
+);
+--> statement-breakpoint
+CREATE TABLE "authentication"."totp_recovery_code" (
+	"id" uuid DEFAULT uuidv7() NOT NULL,
+	"tenant_id" uuid NOT NULL,
+	"totp_id" uuid NOT NULL,
+	"code" "bytea" NOT NULL,
+	"used_timestamp" timestamp with time zone,
+	"revision" integer NOT NULL,
+	"revision_timestamp" timestamp with time zone NOT NULL,
+	"create_timestamp" timestamp with time zone NOT NULL,
+	"delete_timestamp" timestamp with time zone,
+	"attributes" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	CONSTRAINT "totp_recovery_code_tenant_id_id_pk" PRIMARY KEY("tenant_id","id")
+);
+--> statement-breakpoint
+CREATE TABLE "authentication"."used_totp_tokens" (
+	"id" uuid DEFAULT uuidv7() NOT NULL,
+	"tenant_id" uuid NOT NULL,
+	"subject_id" uuid NOT NULL,
+	"token" text NOT NULL,
+	"revision" integer NOT NULL,
+	"revision_timestamp" timestamp with time zone NOT NULL,
+	"create_timestamp" timestamp with time zone NOT NULL,
+	"delete_timestamp" timestamp with time zone,
+	"attributes" jsonb DEFAULT '{}'::jsonb NOT NULL,
+	CONSTRAINT "used_totp_tokens_tenant_id_id_pk" PRIMARY KEY("tenant_id","id"),
+	CONSTRAINT "used_totp_tokens_tenant_id_subject_id_token_unique" UNIQUE("tenant_id","subject_id","token")
+);
+--> statement-breakpoint
 CREATE TABLE "authentication"."service_account" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"type" "authentication"."subject_type" NOT NULL,
 	"display_name" text NOT NULL,
@@ -47,7 +90,7 @@ CREATE TABLE "authentication"."service_account" (
 );
 --> statement-breakpoint
 CREATE TABLE "authentication"."subject" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"type" "authentication"."subject_type" NOT NULL,
 	"status" "authentication"."subject_status" NOT NULL,
@@ -63,7 +106,7 @@ CREATE TABLE "authentication"."subject" (
 );
 --> statement-breakpoint
 CREATE TABLE "authentication"."system_account" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"type" "authentication"."subject_type" NOT NULL,
 	"identifier" text NOT NULL,
@@ -76,7 +119,7 @@ CREATE TABLE "authentication"."system_account" (
 );
 --> statement-breakpoint
 CREATE TABLE "authentication"."user" (
-	"id" uuid DEFAULT gen_random_uuid() NOT NULL,
+	"id" uuid DEFAULT uuidv7() NOT NULL,
 	"tenant_id" uuid NOT NULL,
 	"type" "authentication"."subject_type" NOT NULL,
 	"email" text NOT NULL,
@@ -89,8 +132,11 @@ CREATE TABLE "authentication"."user" (
 	CONSTRAINT "user_type_check" CHECK ("authentication"."user"."type" = 'user')
 );
 --> statement-breakpoint
-ALTER TABLE "authentication"."credentials" ADD CONSTRAINT "credentials_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."password" ADD CONSTRAINT "password_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."session" ADD CONSTRAINT "session_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."totp" ADD CONSTRAINT "totp_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."totp_recovery_code" ADD CONSTRAINT "totp_recovery_code_id_totp_fkey" FOREIGN KEY ("tenant_id","totp_id") REFERENCES "authentication"."totp"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "authentication"."used_totp_tokens" ADD CONSTRAINT "used_totp_tokens_id_subject_fkey" FOREIGN KEY ("tenant_id","subject_id") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."service_account" ADD CONSTRAINT "service_account_tenantId_type_id_subject_fkey" FOREIGN KEY ("tenant_id","type","id") REFERENCES "authentication"."subject"("tenant_id","type","id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."service_account" ADD CONSTRAINT "service_account_id_subject_fkey" FOREIGN KEY ("tenant_id","parent") REFERENCES "authentication"."subject"("tenant_id","id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
 ALTER TABLE "authentication"."system_account" ADD CONSTRAINT "system_account_tenantId_type_id_subject_fkey" FOREIGN KEY ("tenant_id","type","id") REFERENCES "authentication"."subject"("tenant_id","type","id") ON DELETE cascade ON UPDATE no action;--> statement-breakpoint

package/authentication/server/drizzle/meta/0000_snapshot.json

@@ -1,11 +1,11 @@
 {
-  "id": "f52c7376-609d-4fca-a0c2-ee14442d3399",
+  "id": "98e3b751-2fd9-4c4a-a432-c397baa359c0",
   "prevId": "00000000-0000-0000-0000-000000000000",
   "version": "7",
   "dialect": "postgresql",
   "tables": {
-    "authentication.credentials": {
-      "name": "credentials",
+    "authentication.password": {
+      "name": "password",
       "schema": "authentication",
       "columns": {
         "id": {
@@ -13,7 +13,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -27,12 +27,6 @@
           "primaryKey": false,
           "notNull": true
         },
-        "hash_version": {
-          "name": "hash_version",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true
-        },
         "salt": {
           "name": "salt",
           "type": "bytea",
@@ -79,9 +73,9 @@
       },
       "indexes": {},
       "foreignKeys": {
-        "credentials_id_subject_fkey": {
-          "name": "credentials_id_subject_fkey",
-          "tableFrom": "credentials",
+        "password_id_subject_fkey": {
+          "name": "password_id_subject_fkey",
+          "tableFrom": "password",
           "tableTo": "subject",
           "schemaTo": "authentication",
           "columnsFrom": [
@@ -97,8 +91,8 @@
         }
       },
       "compositePrimaryKeys": {
-        "credentials_tenant_id_id_pk": {
-          "name": "credentials_tenant_id_id_pk",
+        "password_tenant_id_id_pk": {
+          "name": "password_tenant_id_id_pk",
           "columns": [
             "tenant_id",
             "id"
@@ -106,8 +100,8 @@
         }
       },
       "uniqueConstraints": {
-        "credentials_tenant_id_subject_id_unique": {
-          "name": "credentials_tenant_id_subject_id_unique",
+        "password_tenant_id_subject_id_unique": {
+          "name": "password_tenant_id_subject_id_unique",
           "nullsNotDistinct": false,
           "columns": [
             "tenant_id",
@@ -128,7 +122,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -154,12 +148,6 @@
           "primaryKey": false,
           "notNull": true
         },
-        "refresh_token_hash_version": {
-          "name": "refresh_token_hash_version",
-          "type": "integer",
-          "primaryKey": false,
-          "notNull": true
-        },
         "refresh_token_salt": {
           "name": "refresh_token_salt",
           "type": "bytea",
@@ -237,6 +225,326 @@
       "checkConstraints": {},
       "isRLSEnabled": false
     },
+    "authentication.totp": {
+      "name": "totp",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "uuidv7()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_id": {
+          "name": "subject_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "secret": {
+          "name": "secret",
+          "type": "bytea",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "recovery_code_salt": {
+          "name": "recovery_code_salt",
+          "type": "bytea",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "status": {
+          "name": "status",
+          "type": "totp_status",
+          "typeSchema": "authentication",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "totp_id_subject_fkey": {
+          "name": "totp_id_subject_fkey",
+          "tableFrom": "totp",
+          "tableTo": "subject",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "subject_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "totp_tenant_id_id_pk": {
+          "name": "totp_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "totp_tenant_id_subject_id_unique": {
+          "name": "totp_tenant_id_subject_id_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "tenant_id",
+            "subject_id"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "authentication.totp_recovery_code": {
+      "name": "totp_recovery_code",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "uuidv7()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "totp_id": {
+          "name": "totp_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "code": {
+          "name": "code",
+          "type": "bytea",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "used_timestamp": {
+          "name": "used_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "totp_recovery_code_id_totp_fkey": {
+          "name": "totp_recovery_code_id_totp_fkey",
+          "tableFrom": "totp_recovery_code",
+          "tableTo": "totp",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "totp_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "totp_recovery_code_tenant_id_id_pk": {
+          "name": "totp_recovery_code_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "authentication.used_totp_tokens": {
+      "name": "used_totp_tokens",
+      "schema": "authentication",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "uuidv7()"
+        },
+        "tenant_id": {
+          "name": "tenant_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "subject_id": {
+          "name": "subject_id",
+          "type": "uuid",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "token": {
+          "name": "token",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision": {
+          "name": "revision",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "revision_timestamp": {
+          "name": "revision_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "create_timestamp": {
+          "name": "create_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "delete_timestamp": {
+          "name": "delete_timestamp",
+          "type": "timestamp with time zone",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "attributes": {
+          "name": "attributes",
+          "type": "jsonb",
+          "primaryKey": false,
+          "notNull": true,
+          "default": "'{}'::jsonb"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "used_totp_tokens_id_subject_fkey": {
+          "name": "used_totp_tokens_id_subject_fkey",
+          "tableFrom": "used_totp_tokens",
+          "tableTo": "subject",
+          "schemaTo": "authentication",
+          "columnsFrom": [
+            "tenant_id",
+            "subject_id"
+          ],
+          "columnsTo": [
+            "tenant_id",
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "used_totp_tokens_tenant_id_id_pk": {
+          "name": "used_totp_tokens_tenant_id_id_pk",
+          "columns": [
+            "tenant_id",
+            "id"
+          ]
+        }
+      },
+      "uniqueConstraints": {
+        "used_totp_tokens_tenant_id_subject_id_token_unique": {
+          "name": "used_totp_tokens_tenant_id_subject_id_token_unique",
+          "nullsNotDistinct": false,
+          "columns": [
+            "tenant_id",
+            "subject_id",
+            "token"
+          ]
+        }
+      },
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
     "authentication.service_account": {
       "name": "service_account",
       "schema": "authentication",
@@ -246,7 +554,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -362,7 +670,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -464,7 +772,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -566,7 +874,7 @@
           "type": "uuid",
           "primaryKey": false,
           "notNull": true,
-          "default": "gen_random_uuid()"
+          "default": "uuidv7()"
         },
         "tenant_id": {
           "name": "tenant_id",
@@ -672,10 +980,7 @@
       "schema": "authentication",
       "values": [
         "active",
-        "inactive",
-        "suspended",
-        "pending-approval",
-        "invited"
+        "suspended"
       ]
     },
     "authentication.subject_type": {
@@ -686,6 +991,14 @@
         "user",
         "service-account"
       ]
+    },
+    "authentication.totp_status": {
+      "name": "totp_status",
+      "schema": "authentication",
+      "values": [
+        "pending",
+        "active"
+      ]
     }
   },
   "schemas": {},

package/authentication/server/drizzle/meta/_journal.json

@@ -5,8 +5,8 @@
     {
       "idx": 0,
       "version": "7",
-      "when": 1768668305913,
-      "tag": "0000_soft_tag",
+      "when": 1774646419727,
+      "tag": "0000_odd_echo",
       "breakpoints": true
     }
   ]