aboutsummaryrefslogtreecommitdiff
path: root/crates/secd/store/pg/migrations
diff options
context:
space:
mode:
Diffstat (limited to 'crates/secd/store/pg/migrations')
-rw-r--r--crates/secd/store/pg/migrations/20221116062550_bootstrap.sql49
1 files changed, 49 insertions, 0 deletions
diff --git a/crates/secd/store/pg/migrations/20221116062550_bootstrap.sql b/crates/secd/store/pg/migrations/20221116062550_bootstrap.sql
new file mode 100644
index 0000000..7a1bf07
--- /dev/null
+++ b/crates/secd/store/pg/migrations/20221116062550_bootstrap.sql
@@ -0,0 +1,49 @@
+create extension if not exists pgcrypto;
+create extension if not exists citext;
+create schema if not exists auth;
+
+create table if not exists auth.identity (
+ identity_id bigserial primary key
+ , identity_public_id uuid
+ , data text
+ , created_at timestamptz not null
+ , unique(identity_public_id)
+);
+
+create table if not exists auth.email (
+ email_id bigserial primary key
+ , address text not null
+ , unique(address)
+);
+
+create table if not exists auth.identity_email (
+ identity_email_id bigserial primary key
+ , identity_id bigint not null references auth.identity(identity_id)
+ , email_id bigint not null references auth.email(email_id)
+ , created_at timestamptz not null
+ , deleted_at timestamptz
+);
+
+create table if not exists auth.email_validation (
+ email_validation_id bigserial primary key
+ , email_validation_public_id uuid not null
+ , identity_email_id integer not null references auth.identity_email(identity_email_id)
+ , attempts integer not null
+ , code text
+ , is_validated boolean not null default false
+ , created_at timestamptz not null
+ , expires_at timestamptz
+ , revoked_at timestamptz
+ , unique(email_validation_public_id)
+);
+
+create table if not exists auth.session (
+ session_id bigserial primary key
+ , identity_id bigint not null references auth.identity(identity_id)
+ , secret_hash bytea not null
+ , created_at timestamptz not null
+ , touched_at timestamptz not null
+ , expires_at timestamptz
+ , revoked_at timestamptz
+ , unique(secret_hash)
+);