Jeff Mitchell
3461dcbd0c
* Remove down and dev migrations This won't be the pattern going forward, so this removes these from the code.
66 lines
1.9 KiB
PL/PgSQL
66 lines
1.9 KiB
PL/PgSQL
begin;
|
|
|
|
-- kms_oidc_key entries are DEKs for encrypting oidc entries.
|
|
create table kms_oidc_key (
|
|
private_id wt_private_id primary key,
|
|
root_key_id wt_private_id not null unique -- there can be only one oidc dek per root key
|
|
references kms_root_key(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
create_time wt_timestamp
|
|
);
|
|
|
|
-- define the immutable fields for kms_oidc_key (all of them)
|
|
create trigger
|
|
immutable_columns
|
|
before
|
|
update on kms_oidc_key
|
|
for each row execute procedure immutable_columns('private_id', 'root_key_id', 'create_time');
|
|
|
|
-- define the value of kms_oidc_key's create_time
|
|
create trigger
|
|
default_create_time_column
|
|
before
|
|
insert on kms_oidc_key
|
|
for each row execute procedure default_create_time();
|
|
|
|
-- kms_oidc_key_version entries are version of DEK keys used to encrypt oidc
|
|
-- entries.
|
|
create table kms_oidc_key_version (
|
|
private_id wt_private_id primary key,
|
|
oidc_key_id wt_private_id not null
|
|
references kms_oidc_key(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
root_key_version_id wt_private_id not null
|
|
references kms_root_key_version(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
version wt_version,
|
|
key bytea not null,
|
|
create_time wt_timestamp,
|
|
unique(oidc_key_id, version)
|
|
);
|
|
|
|
-- define the immutable fields for kms_oidc_key_version (all of them)
|
|
create trigger
|
|
immutable_columns
|
|
before
|
|
update on kms_oidc_key_version
|
|
for each row execute procedure immutable_columns('private_id', 'oidc_key_id', 'root_key_version_id', 'version', 'key', 'create_time');
|
|
|
|
-- define the value of kms_oidc_key_version's create_time
|
|
create trigger
|
|
default_create_time_column
|
|
before
|
|
insert on kms_oidc_key_version
|
|
for each row execute procedure default_create_time();
|
|
|
|
-- define the value of kms_oidc_key_version's version column
|
|
create trigger
|
|
kms_version_column
|
|
before insert on kms_oidc_key_version
|
|
for each row execute procedure kms_version_column('oidc_key_id');
|
|
|
|
commit;
|