mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-13 16:52:23 -05:00
500feba50d
so we can be in line with what the admin handles, and keep it simple on the api side and do as little manipulation of binary data as possible. ### Minor changes * id is a UUID we can use for referencing within notify. No relation to the key itself. * name is a user viewable name that can be set/edited * fix updated_at to have onupdate, not default ### Simplify the webauthn data credential_data is the data we store about an authenticator that we'll use to identify the key when logging in. includes the credential_id, the public_key, and the aaguid (which identifies the authenticator make/model) registration_response is the data containing audit information - in the future we can use this to ensure that the authenticators used are of high quality. both of these fields are CBOR (a kind of binary json), encoded in base64 so that they can be embedded within our regular JSON api endpoints. we don't anticipate the api ever needing to interact with this data directly.
36 lines
1000 B
Python
36 lines
1000 B
Python
"""
|
|
|
|
Revision ID: 0355_add_webauthn_table
|
|
Revises: 0354_government_channel
|
|
Create Date: 2021-05-07 17:04:22.017137
|
|
|
|
"""
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
from sqlalchemy.dialects import postgresql
|
|
|
|
revision = '0355_add_webauthn_table'
|
|
down_revision = '0354_government_channel'
|
|
|
|
|
|
def upgrade():
|
|
op.create_table(
|
|
'webauthn_credential',
|
|
sa.Column('id', postgresql.UUID(as_uuid=True), nullable=False),
|
|
sa.Column('user_id', postgresql.UUID(as_uuid=True), nullable=False),
|
|
sa.Column('name', sa.String(), nullable=False),
|
|
|
|
sa.Column('credential_data', sa.String(), nullable=False),
|
|
sa.Column('registration_response', sa.String(), nullable=False),
|
|
|
|
sa.Column('created_at', sa.DateTime(), nullable=False),
|
|
sa.Column('updated_at', sa.DateTime(), nullable=True),
|
|
|
|
sa.ForeignKeyConstraint(['user_id'], ['users.id'], ),
|
|
sa.PrimaryKeyConstraint('id')
|
|
)
|
|
|
|
|
|
def downgrade():
|
|
op.drop_table('webauthn_credential')
|