Jeff Mitchell
1782f6a4e4
This stores worker connection nonces within the database to ensure uniqueness of connections. Prior the connection required any attacker to be able to decrypt the incoming encrypted authentication message in order to replay (and if the attacker has access to the KMS you have bigger problems), but with this change even if an attacker does have access to the KMS key, they cannot reuse the same message. (If they're able to encrypt against the KMS key, they can still act as a worker with a new message, so this only really helps if they only have decryption capabilities.)
57 lines
1.4 KiB
PL/PgSQL
57 lines
1.4 KiB
PL/PgSQL
begin;
|
|
|
|
-- This migration exists to generalize the nonce behavior since we need it for
|
|
-- more than recovery nonces.
|
|
|
|
create table nonce_type_enm (
|
|
name text primary key
|
|
constraint only_predefined_nonce_types_allowed
|
|
check (
|
|
name in (
|
|
'recovery',
|
|
'worker-auth'
|
|
)
|
|
)
|
|
);
|
|
comment on table nonce_type_enm is
|
|
'nonce_type_enm is an enumeration table for nonce types. '
|
|
'It contains rows for representing nonces as either for recovery or worker authentication purposes.';
|
|
|
|
insert into nonce_type_enm (name) values
|
|
('recovery'),
|
|
('worker-auth');
|
|
|
|
-- Drop existing triggers
|
|
drop trigger default_create_time_column on recovery_nonces;
|
|
drop trigger immutable_columns on recovery_nonces;
|
|
|
|
-- Update table name
|
|
alter table recovery_nonces rename to nonce;
|
|
|
|
-- Add purpose field
|
|
alter table nonce
|
|
add column purpose text not null
|
|
default 'recovery'
|
|
constraint nonce_type_enm_fkey
|
|
references nonce_type_enm(name)
|
|
on update cascade
|
|
on delete restrict;
|
|
|
|
alter table nonce
|
|
alter column purpose drop default;
|
|
|
|
|
|
-- Recreate triggers
|
|
create trigger
|
|
default_create_time_column
|
|
before
|
|
insert on nonce
|
|
for each row execute procedure default_create_time();
|
|
|
|
create trigger
|
|
immutable_columns
|
|
before
|
|
update on nonce
|
|
for each row execute procedure immutable_columns('nonce', 'create_time', 'purpose');
|
|
|
|
commit; |