mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/OATHAuth
synced 2024-11-27 17:50:15 +00:00
6ef3d2418a
This adds new database tables to support storing multiple authentication factors for a single user. The current approach taken is to use a single database row per 2fa method and key. The current module/key abstraction will have to be updated to support having multiple module types for a single user (for example for having a separate module for recovery codes), but this patch does not address that and instead keeps the existing limitations, however the needed updates for that should be doable with this database schema. I've decided to add a new table instead of modifying the existing oathauth_users table. This is mainly because adding an auto_increment column to the existing table would be difficult, but also allows us to update the table definition to follow MW conventions (namely the column name prefixes). I've also used the opportunity to normalize the device types onto a separate table. The migration stage variable is set to SCHEMA_COMPAT_NEW so that third-party wikis can use update.php normally and don't have to adjust anything. This means that it needs to be manually set to _OLD on wmf-config before merging this patch. Since we're already working with the database schema, this add a new, currently unused column for the creation data, so that T242847 will not require a new schema change. Bug: T242031 Bug: T242847 Change-Id: I6aa69c089340434737b55201b80398708a70c355
21 lines
687 B
SQL
21 lines
687 B
SQL
-- This file is automatically generated using maintenance/generateSchemaSql.php.
|
|
-- Source: sql/tables.json
|
|
-- Do not modify this file directly.
|
|
-- See https://www.mediawiki.org/wiki/Manual:Schema_changes
|
|
CREATE TABLE /*_*/oathauth_types (
|
|
oat_id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,
|
|
oat_name BLOB NOT NULL
|
|
);
|
|
|
|
CREATE UNIQUE INDEX oat_name ON /*_*/oathauth_types (oat_name);
|
|
|
|
|
|
CREATE TABLE /*_*/oathauth_devices (
|
|
oad_id INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,
|
|
oad_user INTEGER NOT NULL, oad_type INTEGER NOT NULL,
|
|
oad_name BLOB DEFAULT NULL, oad_created BLOB DEFAULT NULL,
|
|
oad_data BLOB DEFAULT NULL
|
|
);
|
|
|
|
CREATE INDEX oad_user ON /*_*/oathauth_devices (oad_user);
|