mirror of
https://github.com/docmost/docmost.git
synced 2026-05-22 01:32:55 +08:00
Philip Okugbe
641ce142df
* SCIM - init (EE) * accept db transaction * sync * Content parser support for scim+json * patch scimmy * sync * return early if userIds is empty * sync * SCIM db table * fixes * scim tokens * backfill * feat(audit): add scim token events * rename scim migration * fix * fix translation * cleanup
111 lines
3.2 KiB
TypeScript
111 lines
3.2 KiB
TypeScript
import { Kysely, sql } from 'kysely';
|
|
|
|
export async function up(db: Kysely<any>): Promise<void> {
|
|
await db.schema
|
|
.createTable('scim_tokens')
|
|
.addColumn('id', 'uuid', (col) =>
|
|
col.primaryKey().defaultTo(sql`gen_uuid_v7()`),
|
|
)
|
|
.addColumn('name', 'varchar', (col) => col.notNull())
|
|
.addColumn('token_hash', 'varchar', (col) => col.notNull())
|
|
.addColumn('token_last_four', 'varchar(4)', (col) => col.notNull())
|
|
.addColumn('last_used_at', 'timestamptz')
|
|
.addColumn('is_enabled', 'boolean', (col) => col.notNull().defaultTo(true))
|
|
.addColumn('creator_id', 'uuid', (col) =>
|
|
col.references('users.id').onDelete('set null'),
|
|
)
|
|
.addColumn('workspace_id', 'uuid', (col) =>
|
|
col.references('workspaces.id').onDelete('cascade').notNull(),
|
|
)
|
|
.addColumn('created_at', 'timestamptz', (col) =>
|
|
col.notNull().defaultTo(sql`now()`),
|
|
)
|
|
.addColumn('updated_at', 'timestamptz', (col) =>
|
|
col.notNull().defaultTo(sql`now()`),
|
|
)
|
|
.addColumn('deleted_at', 'timestamptz')
|
|
.execute();
|
|
|
|
await db.schema
|
|
.createIndex('idx_scim_tokens_token_hash')
|
|
.ifNotExists()
|
|
.on('scim_tokens')
|
|
.column('token_hash')
|
|
.execute();
|
|
|
|
await db.schema
|
|
.createIndex('idx_scim_tokens_workspace_id')
|
|
.ifNotExists()
|
|
.on('scim_tokens')
|
|
.column('workspace_id')
|
|
.execute();
|
|
|
|
await db.schema
|
|
.alterTable('users')
|
|
.addColumn('scim_external_id', 'text')
|
|
.execute();
|
|
|
|
await db.schema
|
|
.createIndex('idx_users_workspace_scim_external_id')
|
|
.ifNotExists()
|
|
.on('users')
|
|
.columns(['workspace_id', 'scim_external_id'])
|
|
.where('scim_external_id', 'is not', null)
|
|
.unique()
|
|
.execute();
|
|
|
|
await db.schema
|
|
.alterTable('groups')
|
|
.addColumn('scim_external_id', 'text')
|
|
.execute();
|
|
|
|
await db.schema
|
|
.createIndex('idx_groups_workspace_scim_external_id')
|
|
.ifNotExists()
|
|
.on('groups')
|
|
.columns(['workspace_id', 'scim_external_id'])
|
|
.where('scim_external_id', 'is not', null)
|
|
.unique()
|
|
.execute();
|
|
|
|
await db.schema
|
|
.alterTable('groups')
|
|
.addColumn('is_external', 'boolean', (col) =>
|
|
col.notNull().defaultTo(false),
|
|
)
|
|
.execute();
|
|
|
|
// Backfill: mark all non-default groups as external in workspaces with SSO group sync enabled
|
|
await sql`
|
|
UPDATE groups SET is_external = true
|
|
WHERE is_default = false
|
|
AND workspace_id IN (
|
|
SELECT workspace_id FROM auth_providers WHERE group_sync = true
|
|
)
|
|
`.execute(db);
|
|
|
|
await db.schema
|
|
.alterTable('workspaces')
|
|
.addColumn('is_scim_enabled', 'boolean', (col) =>
|
|
col.notNull().defaultTo(false),
|
|
)
|
|
.execute();
|
|
}
|
|
|
|
export async function down(db: Kysely<any>): Promise<void> {
|
|
await db.schema.dropTable('scim_tokens').execute();
|
|
|
|
await db.schema.dropIndex('idx_users_workspace_scim_external_id').execute();
|
|
await db.schema.alterTable('users').dropColumn('scim_external_id').execute();
|
|
|
|
await db.schema.dropIndex('idx_groups_workspace_scim_external_id').execute();
|
|
await db.schema.alterTable('groups').dropColumn('scim_external_id').execute();
|
|
|
|
await db.schema.alterTable('groups').dropColumn('is_external').execute();
|
|
|
|
await db.schema
|
|
.alterTable('workspaces')
|
|
.dropColumn('is_scim_enabled')
|
|
.execute();
|
|
}
|