From 75c57f9f6983d46f3e98403b0f6badd9ec6a7f9b Mon Sep 17 00:00:00 2001 From: gabdevele Date: Wed, 17 Jun 2026 11:01:10 +0000 Subject: [PATCH] Revert "feat: add OIDC tables and update federation cache for improved token management" This reverts commit 379772d94ea1cf1e086cf09953ef26740e8e0c31. --- docs/DATABASE_SCHEMA.md | 12 ------------ migrations/011_oidc_rp_foundation.sql | 15 ++++++--------- 2 files changed, 6 insertions(+), 21 deletions(-) diff --git a/docs/DATABASE_SCHEMA.md b/docs/DATABASE_SCHEMA.md index ffd3877..c252896 100644 --- a/docs/DATABASE_SCHEMA.md +++ b/docs/DATABASE_SCHEMA.md @@ -107,15 +107,3 @@ Schema truth is `migrations/*.sql`. This file is compact human map of current DB - No route-optimization/routing tables - No audit table for intervention link access beyond `last_accessed_at` - Containment check for admin area polygons is simple vertex-inside check - -## OIDC Tables -- `oidc_authentications` - login transaction state, provider snapshot, callback/result lifecycle -- `oidc_authentication_tokens` - authorization code and tokens tied to `oidc_authentications` -- `oidc_federation_cache` - cached federation documents with expiry; uniqueness enforced by generated - SHA-256 `cache_key` over `(document_type, issuer, subject, fetch_url)` to stay - within MySQL index limits -- `user_external_identities` - external provider subject linkage and merged claims snapshot diff --git a/migrations/011_oidc_rp_foundation.sql b/migrations/011_oidc_rp_foundation.sql index 6f384d0..9ca161f 100644 --- a/migrations/011_oidc_rp_foundation.sql +++ b/migrations/011_oidc_rp_foundation.sql @@ -67,19 +67,16 @@ CREATE TABLE IF NOT EXISTS oidc_federation_cache ( issuer VARCHAR(255) NOT NULL, subject VARCHAR(255) NULL, fetch_url VARCHAR(500) NOT NULL, - cache_key BINARY(32) GENERATED ALWAYS AS ( - UNHEX( - SHA2( - JSON_ARRAY(document_type, issuer, subject, fetch_url), - 256 - ) - ) - ) STORED, payload_json JSON NOT NULL, expires_at DATETIME NOT NULL, created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP, updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP, - UNIQUE KEY oidc_federation_cache_unique (cache_key), + UNIQUE KEY oidc_federation_cache_unique ( + document_type, + issuer, + subject, + fetch_url + ), KEY oidc_federation_cache_expires_idx (expires_at) );