lib/generators/rodauth/oauth/templates/db/migrate/create_rodauth_oauth.rb in rodauth-oauth-1.0.0.pre.beta1 vs lib/generators/rodauth/oauth/templates/db/migrate/create_rodauth_oauth.rb in rodauth-oauth-1.0.0.pre.beta2

- old
+ new

@@ -3,46 +3,52 @@ create_table :oauth_applications do |t| t.integer :account_id t.foreign_key :accounts, column: :account_id t.string :name, null: false t.string :description, null: true - t.string :homepage_url, null: false + t.string :homepage_url, null: true t.string :redirect_uri, null: false t.string :client_id, null: false, index: { unique: true } t.string :client_secret, null: false, index: { unique: true } t.string :scopes, null: false t.datetime :created_at, null: false, default: -> { "CURRENT_TIMESTAMP" } - # extra params - # t.string :token_endpoint_auth_method, null: true - # t.string :grant_types, null: true - # t.string :response_types, null: true - # t.string :client_uri, null: true - # t.string :logo_uri, null: true - # t.string :tos_uri, null: true - # t.string :policy_uri, null: true - # t.string :jwks_uri, null: true - # t.string :jwks, null: true - # t.string :contacts, null: true - # t.string :software_id, null: true - # t.string :software_version, null: true - # oidc extra params - # t.string :sector_identifier_uri, null: true - # t.string :application_type, null: true - # t.string :subject_type, null: true - # t.string :id_token_signed_response_alg, null: true - # t.string :id_token_encrypted_response_alg, null: true - # t.string :id_token_encrypted_response_enc, null: true - # t.string :userinfo_signed_response_alg, null: true - # t.string :userinfo_encrypted_response_alg, null: true - # t.string :userinfo_encrypted_response_enc, null: true - # t.string :request_object_signing_alg, null: true - # t.string :request_object_encryption_alg, null: true - # t.string :request_object_encryption_enc, null: true - # JWT/OIDC per application signing verification - # t.text :jwt_public_key, null: true - # RP-initiated logout - # t.string :post_logout_redirect_uri, null: false + + # :oauth_dynamic_client_configuration enabled, extra optional params + t.string :token_endpoint_auth_method, null: true + t.string :grant_types, null: true + t.string :response_types, null: true + t.string :client_uri, null: true + t.string :logo_uri, null: true + t.string :tos_uri, null: true + t.string :policy_uri, null: true + t.string :jwks_uri, null: true + t.string :jwks, null: true + t.string :contacts, null: true + t.string :software_id, null: true + t.string :software_version, null: true + + # :oidc_dynamic_client_configuration enabled, extra optional params + t.string :sector_identifier_uri, null: true + t.string :application_type, null: true + + # :oidc enabled + t.string :subject_type, null: true + t.string :id_token_signed_response_alg, null: true + t.string :id_token_encrypted_response_alg, null: true + t.string :id_token_encrypted_response_enc, null: true + t.string :userinfo_signed_response_alg, null: true + t.string :userinfo_encrypted_response_alg, null: true + t.string :userinfo_encrypted_response_enc, null: true + + # :oauth_jwt_secured_authorization_request + t.string :request_object_signing_alg, null: true + t.string :request_object_encryption_alg, null: true + t.string :request_object_encryption_enc, null: true + t.string :request_uris, null: true + + # :oidc_rp_initiated_logout enabled + t.string :post_logout_redirect_uris, null: false end create_table :oauth_grants do |t| t.integer :account_id t.foreign_key :accounts, column: :account_id @@ -56,21 +62,26 @@ t.datetime :expires_in, null: false t.string :redirect_uri t.datetime :revoked_at t.string :scopes, null: false t.datetime :created_at, null: false, default: -> { "CURRENT_TIMESTAMP" } - # for using access_types t.string :access_type, null: false, default: "offline" - # uncomment to enable PKCE - # t.string :code_challenge - # t.string :code_challenge_method - # device code grant - # t.string :user_code, null: true, unique: true - # t.datetime :last_polled_at, null: true - # when using :oauth_resource_indicators feature - # t.string :resource - # uncomment to use OIDC nonce - # t.string :nonce - # t.string :acr + + # :oauth_pkce enabled + t.string :code_challenge + t.string :code_challenge_method + + # :oauth_device_code_grant enabled + t.string :user_code, null: true, unique: true + t.datetime :last_polled_at, null: true + + # :resource_indicators enabled + t.string :resource + + # :oidc enabled + t.string :nonce + t.string :acr + t.string :claims_locales + t.string :claims end end end \ No newline at end of file