soeren/fotospiel-app
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

stage 1 of oauth removal, switch to sanctum pat tokens

Browse Source
This commit is contained in:
Codex Agent
2025-11-06 20:35:58 +01:00
parent c9783bd57b
commit 776da57ca9
47 changed files with 1571 additions and 2555 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
database/factories/UserFactory.php
View File

@@ -34,6 +34,7 @@ class UserFactory extends Factory
'email' => $this->faker->unique()->safeEmail(),
'address' => $this->faker->streetAddress(),
'phone' => $this->faker->phoneNumber(),
'role' => 'user', // Regular users have 'user' role
'email_verified_at' => now(),
'password' => static::$password ??= Hash::make('password'),
'remember_token' => Str::random(10),

127
database/migrations/2025_09_15_000000_create_oauth_system.php
View File

@@ -1,127 +0,0 @@
<?php
use Illuminate\Database\Migrations\Migration;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Support\Facades\Schema;
return new class extends Migration
{
public function up(): void
{
// OAuth Clients
if (!Schema::hasTable('oauth_clients')) {
Schema::create('oauth_clients', function (Blueprint $table) {
$table->string('id', 255)->primary();
$table->string('client_id', 255)->unique();
$table->string('client_secret', 255)->nullable();
$table->text('redirect_uris')->nullable();
$table->text('scopes')->default('tenant:read tenant:write');
$table->boolean('is_active')->default(true); // From add_is_active
$table->foreignId('tenant_id')->nullable()->after('client_secret')->constrained('tenants')->nullOnDelete(); // From add_tenant_id
$table->timestamp('created_at')->useCurrent();
$table->timestamp('updated_at')->useCurrent()->useCurrentOnUpdate();
$table->index('tenant_id');
});
} else {
if (!Schema::hasColumn('oauth_clients', 'is_active')) {
Schema::table('oauth_clients', function (Blueprint $table) {
$table->boolean('is_active')->default(true)->after('scopes');
});
}
if (!Schema::hasColumn('oauth_clients', 'tenant_id')) {
Schema::table('oauth_clients', function (Blueprint $table) {
$table->foreignId('tenant_id')->nullable()->after('client_secret')->constrained('tenants')->nullOnDelete();
$table->index('tenant_id');
});
}
}
// Refresh Tokens
if (!Schema::hasTable('refresh_tokens')) {
Schema::create('refresh_tokens', function (Blueprint $table) {
$table->string('id', 255)->primary();
$table->string('tenant_id', 255)->index();
$table->string('client_id', 255)->nullable()->index(); // From add_client_id
$table->string('token', 255)->unique()->index();
$table->string('access_token', 255)->nullable();
$table->timestamp('expires_at')->nullable();
$table->text('scope')->nullable();
$table->string('ip_address', 45)->nullable();
$table->text('user_agent')->nullable();
$table->timestamp('created_at')->useCurrent();
$table->timestamp('revoked_at')->nullable();
$table->index('expires_at');
});
} else {
if (!Schema::hasColumn('refresh_tokens', 'client_id')) {
Schema::table('refresh_tokens', function (Blueprint $table) {
$table->string('client_id', 255)->nullable()->after('tenant_id')->index();
});
}
}
// Tenant Tokens
if (!Schema::hasTable('tenant_tokens')) {
Schema::create('tenant_tokens', function (Blueprint $table) {
$table->string('id', 255)->primary();
$table->string('tenant_id', 255)->index();
$table->string('jti', 255)->unique()->index();
$table->string('token_type', 50)->index();
$table->timestamp('expires_at');
$table->timestamp('revoked_at')->nullable();
$table->timestamp('created_at')->useCurrent();
$table->index('expires_at');
});
}
// OAuth Codes
if (!Schema::hasTable('oauth_codes')) {
Schema::create('oauth_codes', function (Blueprint $table) {
$table->string('id', 255)->primary();
$table->string('client_id', 255);
$table->string('user_id', 255);
$table->string('code', 255)->unique()->index();
$table->string('code_challenge', 255);
$table->string('state', 255)->nullable();
$table->string('redirect_uri', 255)->nullable();
$table->text('scope')->nullable();
$table->timestamp('expires_at');
$table->timestamp('created_at')->useCurrent();
$table->index('expires_at');
$table->foreign('client_id')->references('client_id')->on('oauth_clients')->onDelete('cascade');
});
}
}
public function down(): void
{
if (app()->environment('local', 'testing')) {
if (Schema::hasTable('oauth_codes')) {
Schema::table('oauth_codes', function (Blueprint $table) {
$table->dropForeign(['client_id']);
});
Schema::dropIfExists('oauth_codes');
}
if (Schema::hasColumn('refresh_tokens', 'client_id')) {
Schema::table('refresh_tokens', function (Blueprint $table) {
$table->dropIndex(['client_id']);
$table->dropColumn('client_id');
});
}
Schema::dropIfExists('refresh_tokens');
Schema::dropIfExists('tenant_tokens');
if (Schema::hasColumn('oauth_clients', 'tenant_id')) {
Schema::table('oauth_clients', function (Blueprint $table) {
$table->dropForeign(['tenant_id']);
$table->dropColumn('tenant_id');
});
}
if (Schema::hasColumn('oauth_clients', 'is_active')) {
Schema::table('oauth_clients', function (Blueprint $table) {
$table->dropColumn('is_active');
});
}
Schema::dropIfExists('oauth_clients');
}
}
};