feat: add OIDC tables and update federation cache for improved token management

2026-06-17 11:56:22 +02:00
parent addb382112
commit 379772d94e
2 changed files with 21 additions and 6 deletions
@@ -107,3 +107,15 @@ Schema truth is `migrations/*.sql`. This file is compact human map of current DB
 - No route-optimization/routing tables
 - No audit table for intervention link access beyond `last_accessed_at`
 - Containment check for admin area polygons is simple vertex-inside check
+
+## OIDC Tables
+- `oidc_authentications`
+  login transaction state, provider snapshot, callback/result lifecycle
+- `oidc_authentication_tokens`
+  authorization code and tokens tied to `oidc_authentications`
+- `oidc_federation_cache`
+  cached federation documents with expiry; uniqueness enforced by generated
+  SHA-256 `cache_key` over `(document_type, issuer, subject, fetch_url)` to stay
+  within MySQL index limits
+- `user_external_identities`
+  external provider subject linkage and merged claims snapshot