Lucas Berger
703fad2ca2
- Remove .notNull() from users.oidc_iss and users.oidc_sub (wizard creates local rows before OIDC identity is known; first-login-claims binds later) - Add users.claimed boolean (default false NOT NULL) to distinguish pending wizard rows from OIDC-bound rows (D-07) - Add Phase 12 app_config key documentation + prohibition comment (D-01/SC-3) - Generate migration 0002_lethal_millenium_guard.sql via drizzle-kit generate (MODIFY COLUMN for nullable, ADD COLUMN claimed — no DROP/recreate) - Append backfill: UPDATE users SET claimed=true WHERE oidc_iss IS NOT NULL so existing OIDC users cannot be matched by first-login-claims (D-08) - Apply migration via drizzle-kit migrate — users.claimed column verified in dev DB
7 lines
493 B
SQL
7 lines
493 B
SQL
ALTER TABLE `users` MODIFY COLUMN `oidc_iss` varchar(512);--> statement-breakpoint
|
|
ALTER TABLE `users` MODIFY COLUMN `oidc_sub` varchar(256);--> statement-breakpoint
|
|
ALTER TABLE `users` ADD `claimed` boolean DEFAULT false NOT NULL;
|
|
--> statement-breakpoint
|
|
-- Phase 12 backfill (D-07): existing OIDC users are effectively claimed —
|
|
-- prevents first-login-claims (D-08) from matching rows that already have an identity bound.
|
|
UPDATE `users` SET `claimed` = true WHERE `oidc_iss` IS NOT NULL; |