darkhelm/notifications-api
1
0
Fork 0
mirror of https://github.com/GSA/notifications-api.git synced 2025-12-16 02:02:13 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
ae29ae28e5bdcd2440830b3791f0a8e1c36dfe7d
notifications-api/migrations/versions/0355_add_webauthn_table.py

36 lines
1000 B
Python
Raw Normal View History

Add webauthn_credential table This is to store data for registered webauthn credentials, so platform admins can later use them to log in.
2021-05-07 16:08:34 +01:00
"""
Revision ID: 0355_add_webauthn_table
Revises: 0354_government_channel
Create Date: 2021-05-07 17:04:22.017137
"""
from alembic import op
import sqlalchemy as sa
from sqlalchemy.dialects import postgresql
revision = '0355_add_webauthn_table'
down_revision = '0354_government_channel'
def upgrade():
op.create_table(
'webauthn_credential',
add name/id and consolidate webauthn types in model/table so we can be in line with what the admin handles, and keep it simple on the api side and do as little manipulation of binary data as possible. ### Minor changes * id is a UUID we can use for referencing within notify. No relation to the key itself. * name is a user viewable name that can be set/edited * fix updated_at to have onupdate, not default ### Simplify the webauthn data credential_data is the data we store about an authenticator that we'll use to identify the key when logging in. includes the credential_id, the public_key, and the aaguid (which identifies the authenticator make/model) registration_response is the data containing audit information - in the future we can use this to ensure that the authenticators used are of high quality. both of these fields are CBOR (a kind of binary json), encoded in base64 so that they can be embedded within our regular JSON api endpoints. we don't anticipate the api ever needing to interact with this data directly.
2021-05-10 16:36:00 +01:00
sa.Column('id', postgresql.UUID(as_uuid=True), nullable=False),
Add webauthn_credential table This is to store data for registered webauthn credentials, so platform admins can later use them to log in.
2021-05-07 16:08:34 +01:00
sa.Column('user_id', postgresql.UUID(as_uuid=True), nullable=False),
add name/id and consolidate webauthn types in model/table so we can be in line with what the admin handles, and keep it simple on the api side and do as little manipulation of binary data as possible. ### Minor changes * id is a UUID we can use for referencing within notify. No relation to the key itself. * name is a user viewable name that can be set/edited * fix updated_at to have onupdate, not default ### Simplify the webauthn data credential_data is the data we store about an authenticator that we'll use to identify the key when logging in. includes the credential_id, the public_key, and the aaguid (which identifies the authenticator make/model) registration_response is the data containing audit information - in the future we can use this to ensure that the authenticators used are of high quality. both of these fields are CBOR (a kind of binary json), encoded in base64 so that they can be embedded within our regular JSON api endpoints. we don't anticipate the api ever needing to interact with this data directly.
2021-05-10 16:36:00 +01:00
sa.Column('name', sa.String(), nullable=False),
sa.Column('credential_data', sa.String(), nullable=False),
sa.Column('registration_response', sa.String(), nullable=False),
Add webauthn_credential table This is to store data for registered webauthn credentials, so platform admins can later use them to log in.
2021-05-07 16:08:34 +01:00
sa.Column('created_at', sa.DateTime(), nullable=False),
sa.Column('updated_at', sa.DateTime(), nullable=True),
add name/id and consolidate webauthn types in model/table so we can be in line with what the admin handles, and keep it simple on the api side and do as little manipulation of binary data as possible. ### Minor changes * id is a UUID we can use for referencing within notify. No relation to the key itself. * name is a user viewable name that can be set/edited * fix updated_at to have onupdate, not default ### Simplify the webauthn data credential_data is the data we store about an authenticator that we'll use to identify the key when logging in. includes the credential_id, the public_key, and the aaguid (which identifies the authenticator make/model) registration_response is the data containing audit information - in the future we can use this to ensure that the authenticators used are of high quality. both of these fields are CBOR (a kind of binary json), encoded in base64 so that they can be embedded within our regular JSON api endpoints. we don't anticipate the api ever needing to interact with this data directly.
2021-05-10 16:36:00 +01:00
Add webauthn_credential table This is to store data for registered webauthn credentials, so platform admins can later use them to log in.
2021-05-07 16:08:34 +01:00
sa.ForeignKeyConstraint(['user_id'], ['users.id'], ),
add name/id and consolidate webauthn types in model/table so we can be in line with what the admin handles, and keep it simple on the api side and do as little manipulation of binary data as possible. ### Minor changes * id is a UUID we can use for referencing within notify. No relation to the key itself. * name is a user viewable name that can be set/edited * fix updated_at to have onupdate, not default ### Simplify the webauthn data credential_data is the data we store about an authenticator that we'll use to identify the key when logging in. includes the credential_id, the public_key, and the aaguid (which identifies the authenticator make/model) registration_response is the data containing audit information - in the future we can use this to ensure that the authenticators used are of high quality. both of these fields are CBOR (a kind of binary json), encoded in base64 so that they can be embedded within our regular JSON api endpoints. we don't anticipate the api ever needing to interact with this data directly.
2021-05-10 16:36:00 +01:00
sa.PrimaryKeyConstraint('id')
Add webauthn_credential table This is to store data for registered webauthn credentials, so platform admins can later use them to log in.
2021-05-07 16:08:34 +01:00
)
def downgrade():
op.drop_table('webauthn_credential')
Reference in New Issue Copy Permalink