1
|
|
|
<?php |
2
|
|
|
|
3
|
|
|
namespace rhertogh\Yii2Oauth2Server\migrations; |
4
|
|
|
|
5
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2AccessTokenInterface; |
6
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2AccessTokenScopeInterface; |
7
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2AuthCodeInterface; |
8
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2AuthCodeScopeInterface; |
9
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2ClientInterface; |
10
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2ClientScopeInterface; |
11
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2RefreshTokenInterface; |
12
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2ScopeInterface; |
13
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2UserClientInterface; |
14
|
|
|
use rhertogh\Yii2Oauth2Server\interfaces\models\Oauth2UserClientScopeInterface; |
15
|
|
|
use rhertogh\Yii2Oauth2Server\migrations\base\Oauth2BaseMigration; |
16
|
|
|
use rhertogh\Yii2Oauth2Server\models\Oauth2AccessToken; |
17
|
|
|
use rhertogh\Yii2Oauth2Server\Oauth2Module; |
18
|
|
|
use yii\base\InvalidConfigException; |
19
|
|
|
use yii\db\ColumnSchemaBuilder; |
20
|
|
|
|
21
|
|
|
/** |
22
|
|
|
* phpcs:disable Squiz.Classes.ValidClassName.NotCamelCaps |
23
|
|
|
* phpcs:disable Generic.Files.LineLength.TooLong |
24
|
|
|
*/ |
25
|
|
|
abstract class Oauth2_00001_CreateOauth2TablesMigration extends Oauth2BaseMigration |
26
|
|
|
{ |
27
|
|
|
/** |
28
|
|
|
* @var int Number of tables expected to be returned by getTables(), |
29
|
|
|
* when dependency injection is misconfigured this can be off. |
30
|
|
|
*/ |
31
|
|
|
protected $numTables = 10; |
32
|
|
|
|
33
|
|
|
/** |
34
|
|
|
* @inheritDoc |
35
|
|
|
*/ |
36
|
1 |
|
public static function generationIsActive($module) |
37
|
|
|
{ |
38
|
1 |
|
return true; |
39
|
|
|
} |
40
|
|
|
|
41
|
|
|
/** |
42
|
|
|
* @inheritDoc |
43
|
|
|
*/ |
44
|
2 |
|
public function safeUp() |
45
|
|
|
{ |
46
|
2 |
|
foreach ($this->getTables() as $table => $definition) { |
47
|
|
|
|
48
|
2 |
|
$tableDefinition = $definition['table']; |
49
|
2 |
|
if (!$this->commentsSupported()) { |
50
|
2 |
|
foreach ($tableDefinition as $tableColumn) { /** @var ColumnSchemaBuilder $tableColumn */ |
51
|
2 |
|
$tableColumn->comment(null); |
52
|
|
|
} |
53
|
|
|
} |
54
|
2 |
|
if (!empty($definition['primaryKey']) && !$this->deferredPrimaryKeyCreationSupported()) { |
55
|
2 |
|
$tableDefinition[] = 'PRIMARY KEY (' . implode(', ', $definition['primaryKey']['columns']) . ')'; |
56
|
|
|
} |
57
|
2 |
|
if (!empty($definition['foreignKeys']) && !$this->deferredForeignKeyCreationSupported()) { |
58
|
2 |
|
foreach ($definition['foreignKeys'] as $foreignKey) { |
59
|
2 |
|
$tableDefinition[] = 'FOREIGN KEY (' . implode(', ', $foreignKey['columns']) . ')' |
60
|
2 |
|
. ' REFERENCES ' . $foreignKey['refTable'] . '(' . implode(', ', $foreignKey['refColumns']) . ')' |
61
|
2 |
|
. ' ON DELETE ' . $foreignKey['delete'] . ' ON UPDATE ' . $foreignKey['update']; |
62
|
|
|
} |
63
|
|
|
} |
64
|
|
|
|
65
|
2 |
|
$this->createTable($table, $tableDefinition); |
66
|
2 |
|
$rawTableName = $this->getDb()->getSchema()->getRawTableName($table); |
67
|
|
|
|
68
|
2 |
|
if (!empty($definition['primaryKey']) && $this->deferredPrimaryKeyCreationSupported()) { |
69
|
|
|
$this->addPrimaryKey( |
70
|
|
|
$rawTableName . '_pk', |
71
|
|
|
$table, |
72
|
|
|
$definition['primaryKey']['columns'] |
73
|
|
|
); |
74
|
|
|
} |
75
|
|
|
|
76
|
2 |
|
if (!empty($definition['indexes'])) { |
77
|
2 |
|
foreach ($definition['indexes'] as $index) { |
78
|
2 |
|
$this->createIndex( |
79
|
2 |
|
$rawTableName . '_' . $index['name'] . '_index', |
80
|
2 |
|
$table, |
81
|
2 |
|
$index['columns'], |
82
|
2 |
|
$index['unique'] |
83
|
2 |
|
); |
84
|
|
|
} |
85
|
|
|
} |
86
|
|
|
|
87
|
2 |
|
if (!empty($definition['foreignKeys']) && $this->deferredForeignKeyCreationSupported()) { |
88
|
|
|
foreach ($definition['foreignKeys'] as $foreignKey) { |
89
|
|
|
$this->addForeignKey( |
90
|
|
|
$rawTableName . '_' . $foreignKey['name'] . '_fk', |
91
|
|
|
$table, |
92
|
|
|
$foreignKey['columns'], |
93
|
|
|
$foreignKey['refTable'], |
94
|
|
|
$foreignKey['refColumns'], |
95
|
|
|
$foreignKey['delete'], |
96
|
|
|
$foreignKey['update'], |
97
|
|
|
); |
98
|
|
|
} |
99
|
|
|
} |
100
|
|
|
} |
101
|
|
|
} |
102
|
|
|
|
103
|
|
|
/** |
104
|
|
|
* @inheritDoc |
105
|
|
|
*/ |
106
|
2 |
|
public function safeDown() |
107
|
|
|
{ |
108
|
2 |
|
foreach (array_reverse($this->getTables()) as $table => $definition) { |
109
|
2 |
|
$this->dropTable($table); |
110
|
|
|
} |
111
|
|
|
} |
112
|
|
|
|
113
|
|
|
/** |
114
|
|
|
* Get all table definitions. |
115
|
|
|
* @return array[] |
116
|
|
|
* @throws InvalidConfigException |
117
|
|
|
* @since 1.0.0 |
118
|
|
|
*/ |
119
|
5 |
|
protected function getTables() |
120
|
|
|
{ |
121
|
5 |
|
$module = Oauth2Module::getInstance(); |
122
|
5 |
|
if (empty($module)) { |
123
|
1 |
|
throw new InvalidConfigException('Oauth2Module is not instantiated. Is it added to the config in the "module" and "bootstrap" section?'); |
124
|
|
|
} |
125
|
|
|
|
126
|
4 |
|
$accessTokenTable = $this->getTableName(Oauth2AccessTokenInterface::class); |
127
|
4 |
|
$accessTokenScopeTable = $this->getTableName(Oauth2AccessTokenScopeInterface::class); |
128
|
4 |
|
$authCodeTable = $this->getTableName(Oauth2AuthCodeInterface::class); |
129
|
4 |
|
$authCodeScopeTable = $this->getTableName(Oauth2AuthCodeScopeInterface::class); |
130
|
4 |
|
$clientTable = $this->getTableName(Oauth2ClientInterface::class); |
131
|
4 |
|
$clientScopeTable = $this->getTableName(Oauth2ClientScopeInterface::class); |
132
|
4 |
|
$refreshTokenTable = $this->getTableName(Oauth2RefreshTokenInterface::class); |
133
|
4 |
|
$scopeTable = $this->getTableName(Oauth2ScopeInterface::class); |
134
|
4 |
|
$userClientTable = $this->getTableName(Oauth2UserClientInterface::class); |
135
|
4 |
|
$userClientScopeTable = $this->getTableName(Oauth2UserClientScopeInterface::class); |
136
|
|
|
|
137
|
4 |
|
$userTableSchema = $this->getTableSchema($module->identityClass); |
138
|
4 |
|
if ($userTableSchema) { |
|
|
|
|
139
|
3 |
|
if (count($userTableSchema->primaryKey) != 1) { |
140
|
1 |
|
throw new InvalidConfigException('The primary key of `userClass` must consist of a single column'); |
141
|
|
|
} |
142
|
2 |
|
$userTable = $userTableSchema->name; |
143
|
2 |
|
$userPkColumn = $userTableSchema->primaryKey[0]; |
144
|
2 |
|
$userPkSchema = $userTableSchema->columns[$userPkColumn]; |
145
|
|
|
} else { |
146
|
1 |
|
$userTable = false; |
147
|
1 |
|
$userPkColumn = null; |
148
|
1 |
|
$userPkSchema = null; |
149
|
|
|
} |
150
|
|
|
|
151
|
3 |
|
if ($userPkSchema) { |
|
|
|
|
152
|
2 |
|
$userPkSchemaColumnBuilder = $this->getColumnSchemaBuilder($userPkSchema); |
153
|
|
|
} else { |
154
|
1 |
|
$userPkSchemaColumnBuilder = $this->string(); |
155
|
|
|
} |
156
|
|
|
|
157
|
|
|
// See https://datatracker.ietf.org/doc/html/rfc7591#section-2 |
158
|
|
|
// (although not yet fully implemented, some fields follow this standard). |
159
|
3 |
|
$tables = [ |
160
|
3 |
|
$clientTable => [ |
161
|
3 |
|
'table' => [ |
162
|
3 |
|
'id' => $this->primaryKey(), |
163
|
3 |
|
'identifier' => $this->string()->notNull()->unique() |
164
|
3 |
|
->comment('Unique textual identifier by which the Client identifies itself.'), |
165
|
3 |
|
'name' => $this->string()->notNull() |
166
|
3 |
|
->comment('Descriptive name of the Client'), |
167
|
3 |
|
'type' => $this->integer()->notNull()->defaultValue(Oauth2ClientInterface::TYPE_CONFIDENTIAL) |
168
|
3 |
|
->comment('Client type, "confidential" clients must authenticate themselves via a "client secret".'), |
169
|
3 |
|
'secret' => $this->text() |
170
|
3 |
|
->comment('"Confidential" clients must authenticate themselves via this secret.'), |
171
|
3 |
|
'old_secret' => $this->text() |
172
|
3 |
|
->comment('Checked when the `secret` does not match, can be used for key rotation.'), |
173
|
3 |
|
'old_secret_valid_until' => $this->dateTime() |
174
|
3 |
|
->comment('Determines till which date the `old_secret` may be used.'), |
175
|
3 |
|
'env_var_config' => $this->json() |
176
|
3 |
|
->comment('Configuration for environment variable replacement in the `redirect_uris`, setting this value overrides the `Oauth2Module::$clientRedirectUrisEnvVarConfig`.'), |
177
|
3 |
|
'logo_uri' => $this->string() |
178
|
3 |
|
->comment('Logo which is presented to the end user during client authorization.'), |
179
|
3 |
|
'tos_uri' => $this->string() |
180
|
3 |
|
->comment('Link to the "Term of Service" which is presented to the end user during client authorization.'), |
181
|
3 |
|
'contacts' => $this->json() |
182
|
3 |
|
->comment('Array of e-mail addresses of people responsible for this Client.'), |
183
|
3 |
|
'redirect_uris' => $this->json() |
184
|
3 |
|
->comment('Array of redirect uris which the Client is allowed to use.'), |
185
|
3 |
|
'post_logout_redirect_uris' => $this->json() |
186
|
3 |
|
->comment('Array of post logout redirect uris which the Client is allowed to use.'), |
187
|
3 |
|
'allow_variable_redirect_uri_query' => $this->boolean()->notNull()->defaultValue(false) |
188
|
3 |
|
->comment('By default, the client is validated against the full redirect URI including the "query" part. If the "query" part of the return URI is variable it may be marked as such.'), |
189
|
3 |
|
'token_types' => $this->integer()->notNull()->defaultValue(Oauth2AccessToken::TYPE_BEARER), |
190
|
3 |
|
'grant_types' => $this->integer()->notNull()->defaultValue(Oauth2Module::GRANT_TYPE_AUTH_CODE | Oauth2Module::GRANT_TYPE_REFRESH_TOKEN) |
191
|
3 |
|
->comment('Oauth2 grant types enabled for this Client.'), |
192
|
3 |
|
'allow_generic_scopes' => $this->boolean()->notNull()->defaultValue(false) |
193
|
3 |
|
->comment('Determines if scopes must be explicitly linked this client (default) or all defined scopes may be used.'), |
194
|
3 |
|
'exception_on_invalid_scope' => $this->boolean() |
195
|
3 |
|
->comment('Determines if an exception is thrown when the Client requests an unknown scope.'), |
196
|
3 |
|
'end_users_may_authorize_client' => $this->boolean()->notNull()->defaultValue(true) |
197
|
3 |
|
->comment('Determines if the user can authorize a client (the client has to be pre-authorized otherwise).'), |
198
|
3 |
|
'user_account_selection' => $this->integer() |
199
|
3 |
|
->comment('Determines when to show user account selection screen. Using Oauth2Module::$defaultUserAccountSelection when `null`.'), |
200
|
3 |
|
'allow_auth_code_without_pkce' => $this->boolean()->notNull()->defaultValue(false) |
201
|
3 |
|
->comment('Require clients to use PKCE when using the auth_code grant type.'), |
202
|
3 |
|
'skip_authorization_if_scope_is_allowed' => $this->boolean()->notNull()->defaultValue(false) |
203
|
3 |
|
->comment('Skip user authorization of client if there are no scopes that require authorization.'), |
204
|
3 |
|
'client_credentials_grant_user_id' => (clone $userPkSchemaColumnBuilder) |
205
|
3 |
|
->comment("Optional user id to use in case of grant type 'client_credentials'." |
206
|
3 |
|
. " This user account should also be connected to the client via the `$userClientTable` table and, if applicable, the `$userClientScopeTable` table."), |
207
|
3 |
|
'oidc_allow_offline_access_without_consent' => $this->boolean()->notNull()->defaultValue(false) |
208
|
3 |
|
->comment('Allow the OpenID Connect "offline_access" scope for this client without the "prompt" parameter contains "consent".'), |
209
|
3 |
|
'oidc_rp_initiated_logout' => $this->integer()->notNull()->defaultValue(Oauth2ClientInterface::OIDC_RP_INITIATED_LOGOUT_DISABLED) |
210
|
3 |
|
->comment('Configuration for OpenID Connect RP-Initiated Logout.'), |
211
|
3 |
|
'oidc_userinfo_encrypted_response_alg' => $this->string(), |
212
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
213
|
3 |
|
'created_at' => $this->integer()->notNull(), |
214
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
215
|
3 |
|
], |
216
|
3 |
|
'foreignKeys' => [ |
217
|
3 |
|
...( |
218
|
3 |
|
$userTable |
219
|
2 |
|
? [ |
220
|
2 |
|
[ |
221
|
2 |
|
'name' => 'client_credentials_grant_user_id', |
222
|
2 |
|
'columns' => ['client_credentials_grant_user_id'], |
223
|
2 |
|
'refTable' => $userTable, |
224
|
2 |
|
'refColumns' => [$userPkColumn], |
225
|
2 |
|
'delete' => static::RESTRICT, |
226
|
2 |
|
'update' => static::CASCADE, |
227
|
2 |
|
], |
228
|
2 |
|
] |
229
|
|
|
: [] |
230
|
3 |
|
), |
231
|
3 |
|
], |
232
|
3 |
|
'indexes' => [ |
233
|
3 |
|
...( |
234
|
3 |
|
!$userTable |
235
|
|
|
? [ |
236
|
|
|
[ |
237
|
|
|
'name' => 'client_credentials_grant_user_id', |
238
|
|
|
'columns' => ['client_credentials_grant_user_id'], |
239
|
|
|
'unique' => false, |
240
|
|
|
], |
241
|
|
|
] |
242
|
|
|
: [] |
243
|
3 |
|
), |
244
|
3 |
|
[ |
245
|
3 |
|
'name' => 'token_types', |
246
|
3 |
|
'columns' => ['token_types'], |
247
|
3 |
|
'unique' => false, |
248
|
3 |
|
], |
249
|
3 |
|
[ |
250
|
3 |
|
'name' => 'grant_types', |
251
|
3 |
|
'columns' => ['grant_types'], |
252
|
3 |
|
'unique' => false, |
253
|
3 |
|
], |
254
|
3 |
|
[ |
255
|
3 |
|
'name' => 'enabled', |
256
|
3 |
|
'columns' => ['enabled'], |
257
|
3 |
|
'unique' => false, |
258
|
3 |
|
], |
259
|
3 |
|
], |
260
|
3 |
|
], |
261
|
|
|
|
262
|
3 |
|
$scopeTable => [ |
263
|
3 |
|
'table' => [ |
264
|
3 |
|
'id' => $this->primaryKey(), |
265
|
3 |
|
'identifier' => $this->string()->notNull()->unique() |
266
|
3 |
|
->comment('Unique textual identifier by which the Client identifies the scope.'), |
267
|
3 |
|
'description' => $this->text() |
268
|
3 |
|
->comment('Descriptive text about this scope.'), |
269
|
3 |
|
'authorization_message' => $this->text() |
270
|
3 |
|
->comment('Message that is shown to the end user on the Client authorization screen for this scope.'), |
271
|
3 |
|
'applied_by_default' => $this->integer()->notNull()->defaultValue(Oauth2ScopeInterface::APPLIED_BY_DEFAULT_NO) |
272
|
3 |
|
->comment('Should this scope be applied without the Client specifically requesting it, and if so, does the end user needs to authorize it.'), |
273
|
3 |
|
'required_on_authorization' => $this->boolean()->notNull()->defaultValue(true) |
274
|
3 |
|
->comment('Is this scope required or optional on the Client authorization screen.'), |
275
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
276
|
3 |
|
'created_at' => $this->integer()->notNull(), |
277
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
278
|
3 |
|
], |
279
|
3 |
|
'indexes' => [ |
280
|
3 |
|
[ |
281
|
3 |
|
'name' => 'applied_by_default', |
282
|
3 |
|
'columns' => ['applied_by_default'], |
283
|
3 |
|
'unique' => false, |
284
|
3 |
|
], |
285
|
3 |
|
[ |
286
|
3 |
|
'name' => 'enabled', |
287
|
3 |
|
'columns' => ['enabled'], |
288
|
3 |
|
'unique' => false, |
289
|
3 |
|
], |
290
|
3 |
|
], |
291
|
3 |
|
], |
292
|
|
|
|
293
|
3 |
|
$clientScopeTable => [ |
294
|
3 |
|
'table' => [ |
295
|
3 |
|
'client_id' => $this->integer()->notNull(), |
296
|
3 |
|
'scope_id' => $this->integer()->notNull(), |
297
|
3 |
|
'applied_by_default' => $this->integer() |
298
|
3 |
|
->comment('Should this scope be applied without the Client specifically requesting it, and if so, does the end user needs to authorize it. Note: Setting this value overrides the `scope.applied_by_default`.'), |
299
|
3 |
|
'required_on_authorization' => $this->boolean() |
300
|
3 |
|
->comment('Is this scope required or optional on the Client authorization screen. Note: Setting this value overrides the `scope.required_on_authorization`.'), |
301
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
302
|
3 |
|
'created_at' => $this->integer()->notNull(), |
303
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
304
|
3 |
|
], |
305
|
3 |
|
'primaryKey' => [ |
306
|
3 |
|
'columns' => ['client_id', 'scope_id'], |
307
|
3 |
|
], |
308
|
3 |
|
'foreignKeys' => [ |
309
|
3 |
|
[ |
310
|
3 |
|
'name' => 'client_id', |
311
|
3 |
|
'columns' => ['client_id'], |
312
|
3 |
|
'refTable' => $clientTable, |
313
|
3 |
|
'refColumns' => ['id'], |
314
|
3 |
|
'delete' => static::CASCADE, |
315
|
3 |
|
'update' => static::CASCADE, |
316
|
3 |
|
], |
317
|
3 |
|
[ |
318
|
3 |
|
'name' => 'scope_id', |
319
|
3 |
|
'columns' => ['scope_id'], |
320
|
3 |
|
'refTable' => $scopeTable, |
321
|
3 |
|
'refColumns' => ['id'], |
322
|
3 |
|
'delete' => static::CASCADE, |
323
|
3 |
|
'update' => static::CASCADE, |
324
|
3 |
|
], |
325
|
3 |
|
], |
326
|
3 |
|
'indexes' => [ |
327
|
3 |
|
[ |
328
|
3 |
|
'name' => 'applied_by_default', |
329
|
3 |
|
'columns' => ['applied_by_default'], |
330
|
3 |
|
'unique' => false, |
331
|
3 |
|
], |
332
|
3 |
|
[ |
333
|
3 |
|
'name' => 'enabled', |
334
|
3 |
|
'columns' => ['enabled'], |
335
|
3 |
|
'unique' => false, |
336
|
3 |
|
], |
337
|
3 |
|
], |
338
|
3 |
|
], |
339
|
|
|
|
340
|
3 |
|
$authCodeTable => [ |
341
|
3 |
|
'table' => [ |
342
|
3 |
|
'id' => $this->bigPrimaryKey()->unsigned(), |
343
|
3 |
|
'identifier' => $this->string()->notNull()->unique(), |
344
|
3 |
|
'redirect_uri' => $this->string(), |
345
|
3 |
|
'expiry_date_time' => $this->dateTime()->notNull(), |
346
|
3 |
|
'client_id' => $this->integer()->notNull(), |
347
|
3 |
|
'user_id' => (clone $userPkSchemaColumnBuilder)->notNull(), |
348
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), // ToDo: do we need this ??? |
349
|
3 |
|
'created_at' => $this->integer()->notNull(), |
350
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
351
|
3 |
|
], |
352
|
3 |
|
'foreignKeys' => [ |
353
|
3 |
|
[ |
354
|
3 |
|
'name' => 'client_id', |
355
|
3 |
|
'columns' => ['client_id'], |
356
|
3 |
|
'refTable' => $clientTable, |
357
|
3 |
|
'refColumns' => ['id'], |
358
|
3 |
|
'delete' => static::CASCADE, |
359
|
3 |
|
'update' => static::CASCADE, |
360
|
3 |
|
], |
361
|
3 |
|
...( |
362
|
3 |
|
$userTable |
363
|
2 |
|
? [ |
364
|
2 |
|
[ |
365
|
2 |
|
'name' => 'user_id', |
366
|
2 |
|
'columns' => ['user_id'], |
367
|
2 |
|
'refTable' => $userTable, |
368
|
2 |
|
'refColumns' => [$userPkColumn], |
369
|
2 |
|
'delete' => static::CASCADE, |
370
|
2 |
|
'update' => static::CASCADE, |
371
|
2 |
|
], |
372
|
2 |
|
] |
373
|
|
|
: [] |
374
|
3 |
|
), |
375
|
3 |
|
], |
376
|
3 |
|
'indexes' => [ |
377
|
3 |
|
...( |
378
|
3 |
|
!$userTable |
379
|
|
|
? [ |
380
|
|
|
[ |
381
|
|
|
'name' => 'user_id', |
382
|
|
|
'columns' => ['user_id'], |
383
|
|
|
'unique' => false, |
384
|
|
|
], |
385
|
|
|
] |
386
|
|
|
: [] |
387
|
3 |
|
), |
388
|
3 |
|
[ |
389
|
3 |
|
'name' => 'enabled', |
390
|
3 |
|
'columns' => ['enabled'], |
391
|
3 |
|
'unique' => false, |
392
|
3 |
|
], |
393
|
3 |
|
], |
394
|
3 |
|
], |
395
|
|
|
|
396
|
3 |
|
$authCodeScopeTable => [ |
397
|
3 |
|
'table' => [ |
398
|
3 |
|
'auth_code_id' => $this->bigInteger()->unsigned()->notNull(), |
399
|
3 |
|
'scope_id' => $this->integer()->notNull(), |
400
|
3 |
|
'created_at' => $this->integer()->notNull(), |
401
|
3 |
|
], |
402
|
3 |
|
'primaryKey' => [ |
403
|
3 |
|
'columns' => ['auth_code_id', 'scope_id'], |
404
|
3 |
|
], |
405
|
3 |
|
'foreignKeys' => [ |
406
|
3 |
|
[ |
407
|
3 |
|
'name' => 'auth_code_id', |
408
|
3 |
|
'columns' => ['auth_code_id'], |
409
|
3 |
|
'refTable' => $authCodeTable, |
410
|
3 |
|
'refColumns' => ['id'], |
411
|
3 |
|
'delete' => static::CASCADE, |
412
|
3 |
|
'update' => static::CASCADE, |
413
|
3 |
|
], |
414
|
3 |
|
[ |
415
|
3 |
|
'name' => 'scope_id', |
416
|
3 |
|
'columns' => ['scope_id'], |
417
|
3 |
|
'refTable' => $scopeTable, |
418
|
3 |
|
'refColumns' => ['id'], |
419
|
3 |
|
'delete' => static::CASCADE, |
420
|
3 |
|
'update' => static::CASCADE, |
421
|
3 |
|
], |
422
|
3 |
|
], |
423
|
3 |
|
], |
424
|
|
|
|
425
|
3 |
|
$accessTokenTable => [ |
426
|
3 |
|
'table' => [ |
427
|
3 |
|
'id' => $this->bigPrimaryKey()->unsigned(), |
428
|
3 |
|
'identifier' => $this->string()->notNull()->unique(), |
429
|
3 |
|
'client_id' => $this->integer()->notNull(), |
430
|
3 |
|
'user_id' => (clone $userPkSchemaColumnBuilder), |
431
|
3 |
|
'type' => $this->integer()->notNull(), |
432
|
3 |
|
'mac_key' => $this->string(500), |
433
|
3 |
|
'mac_algorithm' => $this->smallInteger(), |
434
|
3 |
|
'allowance' => $this->smallInteger(), |
435
|
3 |
|
'allowance_updated_at' => $this->integer(), |
436
|
3 |
|
'expiry_date_time' => $this->dateTime()->notNull(), |
437
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
438
|
3 |
|
'created_at' => $this->integer()->notNull(), |
439
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
440
|
3 |
|
], |
441
|
3 |
|
'foreignKeys' => [ |
442
|
3 |
|
[ |
443
|
3 |
|
'name' => 'client_id', |
444
|
3 |
|
'columns' => ['client_id'], |
445
|
3 |
|
'refTable' => $clientTable, |
446
|
3 |
|
'refColumns' => ['id'], |
447
|
3 |
|
'delete' => static::CASCADE, |
448
|
3 |
|
'update' => static::CASCADE, |
449
|
3 |
|
], |
450
|
3 |
|
...( |
451
|
3 |
|
$userTable |
452
|
2 |
|
? [ |
453
|
2 |
|
[ |
454
|
2 |
|
'name' => 'user_id', |
455
|
2 |
|
'columns' => ['user_id'], |
456
|
2 |
|
'refTable' => $userTable, |
457
|
2 |
|
'refColumns' => [$userPkColumn], |
458
|
2 |
|
'delete' => static::CASCADE, |
459
|
2 |
|
'update' => static::CASCADE, |
460
|
2 |
|
], |
461
|
2 |
|
] |
462
|
|
|
: [] |
463
|
3 |
|
), |
464
|
3 |
|
], |
465
|
3 |
|
'indexes' => [ |
466
|
3 |
|
...( |
467
|
3 |
|
!$userTable |
468
|
|
|
? [ |
469
|
|
|
[ |
470
|
|
|
'name' => 'user_id', |
471
|
|
|
'columns' => ['user_id'], |
472
|
|
|
'unique' => false, |
473
|
|
|
], |
474
|
|
|
] |
475
|
|
|
: [] |
476
|
3 |
|
), |
477
|
3 |
|
[ |
478
|
3 |
|
'name' => 'type', |
479
|
3 |
|
'columns' => ['type'], |
480
|
3 |
|
'unique' => false, |
481
|
3 |
|
], |
482
|
3 |
|
[ |
483
|
3 |
|
'name' => 'mac_algorithm', |
484
|
3 |
|
'columns' => ['mac_algorithm'], |
485
|
3 |
|
'unique' => false, |
486
|
3 |
|
], |
487
|
3 |
|
[ |
488
|
3 |
|
'name' => 'enabled', |
489
|
3 |
|
'columns' => ['enabled'], |
490
|
3 |
|
'unique' => false, |
491
|
3 |
|
], |
492
|
3 |
|
], |
493
|
3 |
|
], |
494
|
|
|
|
495
|
3 |
|
$accessTokenScopeTable => [ |
496
|
3 |
|
'table' => [ |
497
|
3 |
|
'access_token_id' => $this->bigInteger()->unsigned()->notNull(), |
498
|
3 |
|
'scope_id' => $this->integer()->notNull(), |
499
|
3 |
|
'created_at' => $this->integer()->notNull(), |
500
|
3 |
|
], |
501
|
3 |
|
'primaryKey' => [ |
502
|
3 |
|
'columns' => ['access_token_id', 'scope_id'], |
503
|
3 |
|
], |
504
|
3 |
|
'foreignKeys' => [ |
505
|
3 |
|
[ |
506
|
3 |
|
'name' => 'access_token_id', |
507
|
3 |
|
'columns' => ['access_token_id'], |
508
|
3 |
|
'refTable' => $accessTokenTable, |
509
|
3 |
|
'refColumns' => ['id'], |
510
|
3 |
|
'delete' => static::CASCADE, |
511
|
3 |
|
'update' => static::CASCADE, |
512
|
3 |
|
], |
513
|
3 |
|
[ |
514
|
3 |
|
'name' => 'scope_id', |
515
|
3 |
|
'columns' => ['scope_id'], |
516
|
3 |
|
'refTable' => $scopeTable, |
517
|
3 |
|
'refColumns' => ['id'], |
518
|
3 |
|
'delete' => static::CASCADE, |
519
|
3 |
|
'update' => static::CASCADE, |
520
|
3 |
|
], |
521
|
3 |
|
], |
522
|
3 |
|
], |
523
|
|
|
|
524
|
3 |
|
$refreshTokenTable => [ |
525
|
3 |
|
'table' => [ |
526
|
3 |
|
'id' => $this->bigPrimaryKey()->unsigned(), |
527
|
3 |
|
'access_token_id' => $this->bigInteger()->unsigned(), |
528
|
3 |
|
'identifier' => $this->string()->notNull()->unique(), |
529
|
3 |
|
'expiry_date_time' => $this->dateTime()->notNull(), |
530
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
531
|
3 |
|
'created_at' => $this->integer()->notNull(), |
532
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
533
|
3 |
|
], |
534
|
3 |
|
'foreignKeys' => [ |
535
|
3 |
|
[ |
536
|
3 |
|
'name' => 'access_token_id', |
537
|
3 |
|
'columns' => ['access_token_id'], |
538
|
3 |
|
'refTable' => $accessTokenTable, |
539
|
3 |
|
'refColumns' => ['id'], |
540
|
3 |
|
'delete' => static::CASCADE, |
541
|
3 |
|
'update' => static::CASCADE, |
542
|
3 |
|
], |
543
|
3 |
|
], |
544
|
3 |
|
'indexes' => [ |
545
|
3 |
|
[ |
546
|
3 |
|
'name' => 'enabled', |
547
|
3 |
|
'columns' => ['enabled'], |
548
|
3 |
|
'unique' => false, |
549
|
3 |
|
], |
550
|
3 |
|
], |
551
|
3 |
|
], |
552
|
|
|
|
553
|
3 |
|
$userClientTable => [ |
554
|
3 |
|
'table' => [ |
555
|
3 |
|
'user_id' => (clone $userPkSchemaColumnBuilder)->notNull(), |
556
|
3 |
|
'client_id' => $this->integer()->notNull(), |
557
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
558
|
3 |
|
'created_at' => $this->integer()->notNull(), |
559
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
560
|
3 |
|
], |
561
|
3 |
|
'primaryKey' => [ |
562
|
3 |
|
'columns' => ['user_id', 'client_id'], |
563
|
3 |
|
], |
564
|
3 |
|
'foreignKeys' => [ |
565
|
3 |
|
[ |
566
|
3 |
|
'name' => 'client_id', |
567
|
3 |
|
'columns' => ['client_id'], |
568
|
3 |
|
'refTable' => $clientTable, |
569
|
3 |
|
'refColumns' => ['id'], |
570
|
3 |
|
'delete' => static::CASCADE, |
571
|
3 |
|
'update' => static::CASCADE, |
572
|
3 |
|
], |
573
|
3 |
|
...( |
574
|
3 |
|
$userTable |
575
|
2 |
|
? [ |
576
|
2 |
|
[ |
577
|
2 |
|
'name' => 'user_id', |
578
|
2 |
|
'columns' => ['user_id'], |
579
|
2 |
|
'refTable' => $userTable, |
580
|
2 |
|
'refColumns' => [$userPkColumn], |
581
|
2 |
|
'delete' => static::CASCADE, |
582
|
2 |
|
'update' => static::CASCADE, |
583
|
2 |
|
], |
584
|
2 |
|
] |
585
|
|
|
: [] |
586
|
3 |
|
), |
587
|
3 |
|
], |
588
|
3 |
|
'indexes' => [ |
589
|
3 |
|
...( |
590
|
3 |
|
!$userTable |
591
|
|
|
? [ |
592
|
|
|
[ |
593
|
|
|
'name' => 'user_id', |
594
|
|
|
'columns' => ['user_id'], |
595
|
|
|
'unique' => false, |
596
|
|
|
], |
597
|
|
|
] |
598
|
|
|
: [] |
599
|
3 |
|
), |
600
|
3 |
|
[ |
601
|
3 |
|
'name' => 'enabled', |
602
|
3 |
|
'columns' => ['enabled'], |
603
|
3 |
|
'unique' => false, |
604
|
3 |
|
], |
605
|
3 |
|
], |
606
|
3 |
|
], |
607
|
|
|
|
608
|
3 |
|
$userClientScopeTable => [ |
609
|
3 |
|
'table' => [ |
610
|
3 |
|
'user_id' => (clone $userPkSchemaColumnBuilder)->notNull(), |
611
|
3 |
|
'client_id' => $this->integer()->notNull(), |
612
|
3 |
|
'scope_id' => $this->integer()->notNull(), |
613
|
3 |
|
'enabled' => $this->boolean()->notNull()->defaultValue(true), |
614
|
3 |
|
'created_at' => $this->integer()->notNull(), |
615
|
3 |
|
'updated_at' => $this->integer()->notNull(), |
616
|
3 |
|
], |
617
|
3 |
|
'primaryKey' => [ |
618
|
3 |
|
'columns' => ['user_id', 'client_id', 'scope_id'], |
619
|
3 |
|
], |
620
|
3 |
|
'foreignKeys' => [ |
621
|
3 |
|
[ |
622
|
3 |
|
'name' => 'user_client_id', |
623
|
3 |
|
'columns' => ['user_id', 'client_id'], |
624
|
3 |
|
'refTable' => $userClientTable, |
625
|
3 |
|
'refColumns' => ['user_id', 'client_id'], |
626
|
3 |
|
'delete' => static::CASCADE, |
627
|
3 |
|
'update' => static::CASCADE, |
628
|
3 |
|
], |
629
|
3 |
|
[ # Note: Not connected to client_scope table since scopes can also be applied by default to all clients |
630
|
3 |
|
'name' => 'scope_id', |
631
|
3 |
|
'columns' => ['scope_id'], |
632
|
3 |
|
'refTable' => $scopeTable, |
633
|
3 |
|
'refColumns' => ['id'], |
634
|
3 |
|
'delete' => static::CASCADE, |
635
|
3 |
|
'update' => static::CASCADE, |
636
|
3 |
|
], |
637
|
3 |
|
], |
638
|
3 |
|
'indexes' => [ |
639
|
3 |
|
[ |
640
|
3 |
|
'name' => 'enabled', |
641
|
3 |
|
'columns' => ['enabled'], |
642
|
3 |
|
'unique' => false, |
643
|
3 |
|
], |
644
|
3 |
|
], |
645
|
3 |
|
], |
646
|
3 |
|
]; |
647
|
|
|
|
648
|
3 |
|
if (count(array_unique(array_keys($tables))) != $this->numTables) { |
649
|
1 |
|
throw new InvalidConfigException('Incorrect number of tables in definition. Are the Active Record classes correctly configured?'); |
650
|
|
|
} |
651
|
|
|
|
652
|
2 |
|
return $tables; |
653
|
|
|
} |
654
|
|
|
|
655
|
|
|
// /** |
656
|
|
|
// * @param string $tableClass |
657
|
|
|
// * @return ActiveRecord |
658
|
|
|
// * @throws InvalidConfigException |
659
|
|
|
// */ |
660
|
|
|
// protected function getArInstance($tableClass) |
661
|
|
|
// { |
662
|
|
|
// $activeRecord = Yii::createObject($tableClass); |
663
|
|
|
// |
664
|
|
|
// if (!($activeRecord instanceof ActiveRecord)) { |
665
|
|
|
// throw new InvalidConfigException($tableClass . ' must be an instance of ActiveRecord'); |
666
|
|
|
// } |
667
|
|
|
// |
668
|
|
|
// return $activeRecord; |
669
|
|
|
// } |
670
|
|
|
} |
671
|
|
|
|