Public Access
jaap-jan
e24012b039
Closes the largest remaining M1 gap in the data layer: a username and password can live in the vault, sync between machines, and be named by a host as how it authenticates. What is not here is the interface for creating one — see the end of this message. The third item type, and the first one that cost almost nothing to add. Server: a VaultCredential row, an EF configuration, a migration, and a CredentialKind. Client: a secret, a codec, a merge, a cipher, a kind, a repository facade and a session property. No new reconciliation logic, no change to the sync engine, no client cache migration. That was the whole point of the item-kind seam, and this is the evidence it holds. The narrowest type of the three on plaintext, and not for symmetry. A host has a deliberate concession — the relay needs an address it can resolve. A key has a fingerprint, public by nature, which this client still declines to send. A password has no part that is safe to expose: not its length, not a hash, not a hint. So CredentialKind refuses every plaintext field there is, hydrates none, and the table has no column to put one in. HostSecret.CredentialId is the password counterpart of SshKeyId, and the two are mutually exclusive. SSH itself would happily try a key and fall back to a password, but a host naming both leaves "how does this authenticate?" without a single answer — the interface, the connect path and the user would each be free to guess differently. TryValidate refuses it. One consequence was not anticipated: "a full host" stops being a coherent idea, which is what broke AFullHost_RoundTrips and is now written into that test. The schema version became a ladder rather than a maximum: credential-bound is 3, key-bound is 2, neither is still 1. Adding credentials therefore does not drag every key-bound host in every vault onto a version that clients understanding keys perfectly well would refuse to edit. A test pins exactly that, because it is the property the whole content-dependent-version rule exists to provide, and the obvious implementation would quietly lose it. Two tests had become false and said so: - Push_AnUnsupportedEntityType_IsInvalidNotAFailedBatch used Credential as its example of a type this server does not implement. It now asks the server's own registry what is still missing, so it cannot go stale again, and skips with a reason if that set ever empties. - ThePullFilterNamesEveryTypeThisBuildSynchronises pinned the exact list, which is what it is for. Also fixes ten nullable warnings — eight in SyncEndpointTests, two in a test file added earlier today. Neither set was introduced here; both were invisible until an unrelated change forced their project to recompile, which means the zero-warning claims made earlier in this work only ever covered what happened to be rebuilt. 777 tests green. Zero warnings, dotnet format clean. Not done, and deliberately: the credential interface. The vault column is 340 pixels wide and already holds two lists and two editors, kept from clipping its own buttons at the window's minimum height only by the one-editor-at-a-time rule added earlier today. A third list and a third editor would recreate that defect rather than avoid it, so the column needs a shape decision first. Credentials sync; they cannot yet be created in the interface.
1163 lines
46 KiB
C#
1163 lines
46 KiB
C#
// <auto-generated />
|
|
using System;
|
|
using DodoSSH.Infrastructure;
|
|
using Microsoft.EntityFrameworkCore;
|
|
using Microsoft.EntityFrameworkCore.Infrastructure;
|
|
using Microsoft.EntityFrameworkCore.Migrations;
|
|
using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
|
|
using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
|
|
|
|
#nullable disable
|
|
|
|
namespace DodoSSH.Infrastructure.Migrations
|
|
{
|
|
[DbContext(typeof(DodoDbContext))]
|
|
[Migration("20260729185638_AddCredentialItem")]
|
|
partial class AddCredentialItem
|
|
{
|
|
/// <inheritdoc />
|
|
protected override void BuildTargetModel(ModelBuilder modelBuilder)
|
|
{
|
|
#pragma warning disable 612, 618
|
|
modelBuilder
|
|
.HasDefaultSchema("dodo")
|
|
.HasAnnotation("ProductVersion", "10.0.10")
|
|
.HasAnnotation("Relational:MaxIdentifierLength", 63);
|
|
|
|
NpgsqlModelBuilderExtensions.HasPostgresExtension(modelBuilder, "citext");
|
|
NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Device", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("EnrolledAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("enrolled_at_utc");
|
|
|
|
b.Property<DateTimeOffset?>("LastSeenAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("last_seen_at_utc");
|
|
|
|
b.Property<string>("Name")
|
|
.IsRequired()
|
|
.HasMaxLength(256)
|
|
.HasColumnType("character varying(256)")
|
|
.HasColumnName("name");
|
|
|
|
b.Property<int>("Platform")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("platform");
|
|
|
|
b.Property<byte[]>("PublicKey")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("public_key");
|
|
|
|
b.Property<DateTimeOffset?>("RevokedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("revoked_at_utc");
|
|
|
|
b.Property<Guid>("UserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("user_id");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_device");
|
|
|
|
b.HasIndex("UserId")
|
|
.HasDatabaseName("ix_device_user_id");
|
|
|
|
b.ToTable("device", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.KeyLogEntry", b =>
|
|
{
|
|
b.Property<long>("Sequence")
|
|
.ValueGeneratedOnAdd()
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("sequence");
|
|
|
|
NpgsqlPropertyBuilderExtensions.UseIdentityAlwaysColumn(b.Property<long>("Sequence"));
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<byte[]>("EncryptionPublicKey")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("encryption_public_key");
|
|
|
|
b.Property<int>("Generation")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("generation");
|
|
|
|
b.Property<byte[]>("Hash")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("hash");
|
|
|
|
b.Property<byte[]>("PreviousHash")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("previous_hash");
|
|
|
|
b.Property<byte[]>("SigningPublicKey")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("signing_public_key");
|
|
|
|
b.Property<byte[]>("StatementSignature")
|
|
.IsRequired()
|
|
.HasMaxLength(64)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("statement_signature");
|
|
|
|
b.Property<Guid>("UserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("user_id");
|
|
|
|
b.HasKey("Sequence")
|
|
.HasName("pk_key_log");
|
|
|
|
b.HasIndex("Hash")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_key_log_hash");
|
|
|
|
b.HasIndex("UserId")
|
|
.HasDatabaseName("ix_key_log_user_id");
|
|
|
|
b.ToTable("key_log", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.SshHost", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<long>("ChangeSequence")
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("change_sequence");
|
|
|
|
b.Property<Guid?>("ContentKeyId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("content_key_id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<Guid>("CreatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("created_by_user_id");
|
|
|
|
b.Property<byte[]>("DataKeyWrap")
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("data_key_wrap");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<Guid?>("GroupId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("group_id");
|
|
|
|
b.Property<string>("Hostname")
|
|
.HasMaxLength(255)
|
|
.HasColumnType("character varying(255)")
|
|
.HasColumnName("hostname");
|
|
|
|
b.Property<int>("KeyGeneration")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("key_generation");
|
|
|
|
b.Property<byte[]>("Payload")
|
|
.IsRequired()
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("payload");
|
|
|
|
b.Property<short>("PayloadAadVersion")
|
|
.HasColumnType("smallint")
|
|
.HasColumnName("payload_aad_version");
|
|
|
|
b.Property<int?>("Port")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("port");
|
|
|
|
b.Property<bool>("RelayEnabled")
|
|
.HasColumnType("boolean")
|
|
.HasColumnName("relay_enabled");
|
|
|
|
b.Property<DateTimeOffset>("UpdatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("updated_at_utc");
|
|
|
|
b.Property<Guid>("UpdatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("updated_by_user_id");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.Property<int>("Version")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("version");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_host");
|
|
|
|
b.HasIndex("VaultId")
|
|
.HasDatabaseName("ix_host_vault_live")
|
|
.HasFilter("deleted_at_utc IS NULL");
|
|
|
|
b.HasIndex("VaultId", "ChangeSequence")
|
|
.HasDatabaseName("ix_host_vault_id_change_sequence");
|
|
|
|
b.ToTable("host", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_host_port_range", "port IS NULL OR (port BETWEEN 1 AND 65535)");
|
|
|
|
t.HasCheckConstraint("ck_host_relay_target", "(relay_enabled AND hostname IS NOT NULL AND port IS NOT NULL)\nOR (NOT relay_enabled AND hostname IS NULL AND port IS NULL)");
|
|
|
|
t.HasCheckConstraint("ck_host_version", "version >= 1");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.SyncOperationReceipt", b =>
|
|
{
|
|
b.Property<Guid>("OperationId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("operation_id");
|
|
|
|
b.Property<long?>("AppliedChangeSequence")
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("applied_change_sequence");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<int?>("ResultVersion")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("result_version");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.HasKey("OperationId")
|
|
.HasName("pk_sync_operation_receipt");
|
|
|
|
b.HasIndex("VaultId", "CreatedAtUtc")
|
|
.HasDatabaseName("ix_sync_operation_receipt_vault_id_created_at_utc");
|
|
|
|
b.ToTable("sync_operation_receipt", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Team", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<Guid>("CreatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("created_by_user_id");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<string>("Description")
|
|
.HasMaxLength(2048)
|
|
.HasColumnType("character varying(2048)")
|
|
.HasColumnName("description");
|
|
|
|
b.Property<string>("Name")
|
|
.IsRequired()
|
|
.HasMaxLength(256)
|
|
.HasColumnType("character varying(256)")
|
|
.HasColumnName("name");
|
|
|
|
b.Property<string>("Slug")
|
|
.IsRequired()
|
|
.HasMaxLength(128)
|
|
.HasColumnType("citext")
|
|
.HasColumnName("slug");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_team");
|
|
|
|
b.HasIndex("Slug")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_team_slug")
|
|
.HasFilter("deleted_at_utc IS NULL");
|
|
|
|
b.ToTable("team", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.TeamMembership", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<Guid?>("InvitedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("invited_by_user_id");
|
|
|
|
b.Property<DateTimeOffset?>("JoinedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("joined_at_utc");
|
|
|
|
b.Property<int>("Role")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("role");
|
|
|
|
b.Property<int>("Status")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("status");
|
|
|
|
b.Property<Guid>("TeamId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("team_id");
|
|
|
|
b.Property<Guid>("UserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("user_id");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_team_membership");
|
|
|
|
b.HasIndex("UserId")
|
|
.HasDatabaseName("ix_team_membership_user_id");
|
|
|
|
b.HasIndex("TeamId", "UserId")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_team_membership_team_id_user_id")
|
|
.HasFilter("deleted_at_utc IS NULL");
|
|
|
|
b.ToTable("team_membership", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserAccount", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<string>("DisplayName")
|
|
.HasMaxLength(256)
|
|
.HasColumnType("character varying(256)")
|
|
.HasColumnName("display_name");
|
|
|
|
b.Property<string>("Email")
|
|
.HasMaxLength(320)
|
|
.HasColumnType("citext")
|
|
.HasColumnName("email");
|
|
|
|
b.Property<DateTimeOffset?>("EnrolledAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("enrolled_at_utc");
|
|
|
|
b.Property<string>("Issuer")
|
|
.IsRequired()
|
|
.HasMaxLength(512)
|
|
.HasColumnType("character varying(512)")
|
|
.HasColumnName("issuer");
|
|
|
|
b.Property<DateTimeOffset?>("LastSeenAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("last_seen_at_utc");
|
|
|
|
b.Property<int>("Status")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("status");
|
|
|
|
b.Property<string>("Subject")
|
|
.IsRequired()
|
|
.HasMaxLength(256)
|
|
.HasColumnType("character varying(256)")
|
|
.HasColumnName("subject");
|
|
|
|
b.Property<DateTimeOffset>("UpdatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("updated_at_utc");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_user_account");
|
|
|
|
b.HasIndex("Email")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_account_email")
|
|
.HasFilter("email IS NOT NULL AND deleted_at_utc IS NULL");
|
|
|
|
b.HasIndex("Issuer", "Subject")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_account_issuer_subject");
|
|
|
|
b.ToTable("user_account", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserKey", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<byte[]>("EncryptionPublicKey")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("encryption_public_key");
|
|
|
|
b.Property<byte[]>("FingerprintSha256")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("fingerprint_sha256");
|
|
|
|
b.Property<int>("Generation")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("generation");
|
|
|
|
b.Property<string>("IdentityProviderBinding")
|
|
.HasColumnType("jsonb")
|
|
.HasColumnName("identity_provider_binding");
|
|
|
|
b.Property<bool>("IsCurrent")
|
|
.HasColumnType("boolean")
|
|
.HasColumnName("is_current");
|
|
|
|
b.Property<DateTimeOffset?>("RevokedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("revoked_at_utc");
|
|
|
|
b.Property<byte[]>("SigningPublicKey")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("signing_public_key");
|
|
|
|
b.Property<string>("Statement")
|
|
.IsRequired()
|
|
.HasColumnType("jsonb")
|
|
.HasColumnName("statement");
|
|
|
|
b.Property<byte[]>("StatementSignature")
|
|
.IsRequired()
|
|
.HasMaxLength(64)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("statement_signature");
|
|
|
|
b.Property<Guid>("UserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("user_id");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_user_key");
|
|
|
|
b.HasIndex("FingerprintSha256")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_key_fingerprint_sha256");
|
|
|
|
b.HasIndex("UserId")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_key_current")
|
|
.HasFilter("is_current");
|
|
|
|
b.HasIndex("UserId", "Generation")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_key_user_id_generation");
|
|
|
|
b.ToTable("user_key", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserKeyWrap", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<Guid?>("DeviceId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("device_id");
|
|
|
|
b.Property<string>("KdfAlgorithm")
|
|
.HasMaxLength(64)
|
|
.HasColumnType("character varying(64)")
|
|
.HasColumnName("kdf_algorithm");
|
|
|
|
b.Property<int?>("KdfMemoryKibibytes")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("kdf_memory_kibibytes");
|
|
|
|
b.Property<int?>("KdfParallelism")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("kdf_parallelism");
|
|
|
|
b.Property<int?>("KdfPasses")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("kdf_passes");
|
|
|
|
b.Property<byte[]>("KdfSalt")
|
|
.HasMaxLength(64)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("kdf_salt");
|
|
|
|
b.Property<int>("Kind")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("kind");
|
|
|
|
b.Property<DateTimeOffset?>("LastUsedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("last_used_at_utc");
|
|
|
|
b.Property<Guid>("UserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("user_id");
|
|
|
|
b.Property<byte[]>("Wrap")
|
|
.IsRequired()
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("wrap");
|
|
|
|
b.Property<int>("WrapVersion")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("wrap_version");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_user_key_wrap");
|
|
|
|
b.HasIndex("DeviceId")
|
|
.HasDatabaseName("ix_user_key_wrap_device_id");
|
|
|
|
b.HasIndex("UserId", "DeviceId")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_key_wrap_user_device")
|
|
.HasFilter("device_id IS NOT NULL");
|
|
|
|
b.HasIndex("UserId", "Kind")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_user_key_wrap_user_kind")
|
|
.HasFilter("device_id IS NULL");
|
|
|
|
b.ToTable("user_key_wrap", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_user_key_wrap_device", "(kind = 2 AND device_id IS NOT NULL) OR (kind <> 2 AND device_id IS NULL)");
|
|
|
|
t.HasCheckConstraint("ck_user_key_wrap_kdf", "(kind IN (1, 3) AND kdf_algorithm IS NOT NULL AND kdf_salt IS NOT NULL\n AND kdf_memory_kibibytes IS NOT NULL AND kdf_passes IS NOT NULL\n AND kdf_parallelism IS NOT NULL)\nOR (kind IN (2, 4) AND kdf_algorithm IS NULL AND kdf_salt IS NULL)");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Vault", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<int>("KeyGeneration")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("key_generation");
|
|
|
|
b.Property<string>("Name")
|
|
.IsRequired()
|
|
.HasMaxLength(256)
|
|
.HasColumnType("character varying(256)")
|
|
.HasColumnName("name");
|
|
|
|
b.Property<int>("OwnerKind")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("owner_kind");
|
|
|
|
b.Property<Guid?>("OwnerUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("owner_user_id");
|
|
|
|
b.Property<int>("RekeyReason")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("rekey_reason");
|
|
|
|
b.Property<bool>("RekeyRequired")
|
|
.HasColumnType("boolean")
|
|
.HasColumnName("rekey_required");
|
|
|
|
b.Property<Guid?>("TeamId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("team_id");
|
|
|
|
b.Property<DateTimeOffset>("UpdatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("updated_at_utc");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_vault");
|
|
|
|
b.HasIndex("OwnerUserId")
|
|
.HasDatabaseName("ix_vault_owner_user_id");
|
|
|
|
b.HasIndex("TeamId")
|
|
.HasDatabaseName("ix_vault_team_id");
|
|
|
|
b.ToTable("vault", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_vault_key_generation", "key_generation >= 1");
|
|
|
|
t.HasCheckConstraint("ck_vault_owner", "(owner_kind = 1 AND owner_user_id IS NOT NULL AND team_id IS NULL)\nOR (owner_kind = 2 AND team_id IS NOT NULL AND owner_user_id IS NULL)");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultChange", b =>
|
|
{
|
|
b.Property<long>("Sequence")
|
|
.ValueGeneratedOnAdd()
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("sequence");
|
|
|
|
NpgsqlPropertyBuilderExtensions.UseIdentityAlwaysColumn(b.Property<long>("Sequence"));
|
|
|
|
b.Property<Guid>("ActorUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("actor_user_id");
|
|
|
|
b.Property<Guid>("EntityId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("entity_id");
|
|
|
|
b.Property<int>("EntityType")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("entity_type");
|
|
|
|
b.Property<DateTimeOffset>("OccurredAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("occurred_at_utc");
|
|
|
|
b.Property<int>("Operation")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("operation");
|
|
|
|
b.Property<int>("Revision")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("revision");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.HasKey("Sequence")
|
|
.HasName("pk_sync_change");
|
|
|
|
b.HasIndex("VaultId", "Sequence")
|
|
.HasDatabaseName("ix_sync_change_vault_id_sequence");
|
|
|
|
b.HasIndex("VaultId", "EntityId", "Sequence")
|
|
.IsDescending(false, false, true)
|
|
.HasDatabaseName("ix_sync_change_vault_id_entity_id_sequence");
|
|
|
|
b.ToTable("sync_change", "dodo");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultCredential", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<long>("ChangeSequence")
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("change_sequence");
|
|
|
|
b.Property<Guid?>("ContentKeyId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("content_key_id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<Guid>("CreatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("created_by_user_id");
|
|
|
|
b.Property<byte[]>("DataKeyWrap")
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("data_key_wrap");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<int>("KeyGeneration")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("key_generation");
|
|
|
|
b.Property<byte[]>("Payload")
|
|
.IsRequired()
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("payload");
|
|
|
|
b.Property<short>("PayloadAadVersion")
|
|
.HasColumnType("smallint")
|
|
.HasColumnName("payload_aad_version");
|
|
|
|
b.Property<DateTimeOffset>("UpdatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("updated_at_utc");
|
|
|
|
b.Property<Guid>("UpdatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("updated_by_user_id");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.Property<int>("Version")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("version");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_credential");
|
|
|
|
b.HasIndex("VaultId")
|
|
.HasDatabaseName("ix_credential_vault_live")
|
|
.HasFilter("deleted_at_utc IS NULL");
|
|
|
|
b.HasIndex("VaultId", "ChangeSequence")
|
|
.HasDatabaseName("ix_credential_vault_id_change_sequence");
|
|
|
|
b.ToTable("credential", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_credential_version", "version >= 1");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultKeyGrant", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<byte[]>("GranterKeyFingerprint")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("granter_key_fingerprint");
|
|
|
|
b.Property<Guid>("GranterUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("granter_user_id");
|
|
|
|
b.Property<int>("KeyGeneration")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("key_generation");
|
|
|
|
b.Property<byte[]>("KeyLogHead")
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("key_log_head");
|
|
|
|
b.Property<int>("Kind")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("kind");
|
|
|
|
b.Property<byte[]>("RecipientKeyFingerprint")
|
|
.IsRequired()
|
|
.HasMaxLength(32)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("recipient_key_fingerprint");
|
|
|
|
b.Property<Guid?>("RecipientUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("recipient_user_id");
|
|
|
|
b.Property<DateTimeOffset?>("RevokedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("revoked_at_utc");
|
|
|
|
b.Property<byte[]>("Signature")
|
|
.IsRequired()
|
|
.HasMaxLength(64)
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("signature");
|
|
|
|
b.Property<int>("State")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("state");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.Property<byte[]>("WrappedKey")
|
|
.IsRequired()
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("wrapped_key");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_vault_key_grant");
|
|
|
|
b.HasIndex("RecipientUserId")
|
|
.HasDatabaseName("ix_vault_key_grant_recipient_user_id");
|
|
|
|
b.HasIndex("VaultId", "KeyGeneration", "RecipientUserId")
|
|
.IsUnique()
|
|
.HasDatabaseName("ix_vault_key_grant_vault_id_key_generation_recipient_user_id")
|
|
.HasFilter("revoked_at_utc IS NULL AND recipient_user_id IS NOT NULL");
|
|
|
|
b.ToTable("vault_key_grant", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_vault_key_grant_recipient", "(kind = 1 AND recipient_user_id IS NOT NULL) OR (kind <> 1 AND recipient_user_id IS NULL)");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultSshKey", b =>
|
|
{
|
|
b.Property<Guid>("Id")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("id");
|
|
|
|
b.Property<long>("ChangeSequence")
|
|
.HasColumnType("bigint")
|
|
.HasColumnName("change_sequence");
|
|
|
|
b.Property<Guid?>("ContentKeyId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("content_key_id");
|
|
|
|
b.Property<DateTimeOffset>("CreatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("created_at_utc");
|
|
|
|
b.Property<Guid>("CreatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("created_by_user_id");
|
|
|
|
b.Property<byte[]>("DataKeyWrap")
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("data_key_wrap");
|
|
|
|
b.Property<DateTimeOffset?>("DeletedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("deleted_at_utc");
|
|
|
|
b.Property<int>("KeyGeneration")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("key_generation");
|
|
|
|
b.Property<byte[]>("Payload")
|
|
.IsRequired()
|
|
.HasColumnType("bytea")
|
|
.HasColumnName("payload");
|
|
|
|
b.Property<short>("PayloadAadVersion")
|
|
.HasColumnType("smallint")
|
|
.HasColumnName("payload_aad_version");
|
|
|
|
b.Property<string>("PublicKeyFingerprint")
|
|
.HasMaxLength(128)
|
|
.HasColumnType("character varying(128)")
|
|
.HasColumnName("public_key_fingerprint");
|
|
|
|
b.Property<DateTimeOffset>("UpdatedAtUtc")
|
|
.HasColumnType("timestamp with time zone")
|
|
.HasColumnName("updated_at_utc");
|
|
|
|
b.Property<Guid>("UpdatedByUserId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("updated_by_user_id");
|
|
|
|
b.Property<Guid>("VaultId")
|
|
.HasColumnType("uuid")
|
|
.HasColumnName("vault_id");
|
|
|
|
b.Property<int>("Version")
|
|
.HasColumnType("integer")
|
|
.HasColumnName("version");
|
|
|
|
b.Property<uint>("xmin")
|
|
.IsConcurrencyToken()
|
|
.ValueGeneratedOnAddOrUpdate()
|
|
.HasColumnType("xid")
|
|
.HasColumnName("xmin");
|
|
|
|
b.HasKey("Id")
|
|
.HasName("pk_ssh_key");
|
|
|
|
b.HasIndex("VaultId")
|
|
.HasDatabaseName("ix_ssh_key_vault_live")
|
|
.HasFilter("deleted_at_utc IS NULL");
|
|
|
|
b.HasIndex("VaultId", "ChangeSequence")
|
|
.HasDatabaseName("ix_ssh_key_vault_id_change_sequence");
|
|
|
|
b.ToTable("ssh_key", "dodo", t =>
|
|
{
|
|
t.HasCheckConstraint("ck_ssh_key_version", "version >= 1");
|
|
});
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Device", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "User")
|
|
.WithMany("Devices")
|
|
.HasForeignKey("UserId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_device_users_user_id");
|
|
|
|
b.Navigation("User");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.SshHost", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.Vault", "Vault")
|
|
.WithMany("Hosts")
|
|
.HasForeignKey("VaultId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_host_vaults_vault_id");
|
|
|
|
b.Navigation("Vault");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.TeamMembership", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.Team", "Team")
|
|
.WithMany("Memberships")
|
|
.HasForeignKey("TeamId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_team_membership_team_team_id");
|
|
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "User")
|
|
.WithMany()
|
|
.HasForeignKey("UserId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_team_membership_users_user_id");
|
|
|
|
b.Navigation("Team");
|
|
|
|
b.Navigation("User");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserKey", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "User")
|
|
.WithMany("Keys")
|
|
.HasForeignKey("UserId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_user_key_user_account_user_id");
|
|
|
|
b.Navigation("User");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserKeyWrap", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.Device", "Device")
|
|
.WithMany()
|
|
.HasForeignKey("DeviceId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.HasConstraintName("fk_user_key_wrap_device_device_id");
|
|
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "User")
|
|
.WithMany("KeyWraps")
|
|
.HasForeignKey("UserId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_user_key_wrap_user_account_user_id");
|
|
|
|
b.Navigation("Device");
|
|
|
|
b.Navigation("User");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Vault", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "OwnerUser")
|
|
.WithMany()
|
|
.HasForeignKey("OwnerUserId")
|
|
.OnDelete(DeleteBehavior.Restrict)
|
|
.HasConstraintName("fk_vault_user_account_owner_user_id");
|
|
|
|
b.HasOne("DodoSSH.Domain.Team", "Team")
|
|
.WithMany()
|
|
.HasForeignKey("TeamId")
|
|
.OnDelete(DeleteBehavior.Restrict)
|
|
.HasConstraintName("fk_vault_team_team_id");
|
|
|
|
b.Navigation("OwnerUser");
|
|
|
|
b.Navigation("Team");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultCredential", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.Vault", "Vault")
|
|
.WithMany()
|
|
.HasForeignKey("VaultId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_credential_vaults_vault_id");
|
|
|
|
b.Navigation("Vault");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultKeyGrant", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.UserAccount", "RecipientUser")
|
|
.WithMany()
|
|
.HasForeignKey("RecipientUserId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.HasConstraintName("fk_vault_key_grant_user_account_recipient_user_id");
|
|
|
|
b.HasOne("DodoSSH.Domain.Vault", "Vault")
|
|
.WithMany("KeyGrants")
|
|
.HasForeignKey("VaultId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_vault_key_grant_vault_vault_id");
|
|
|
|
b.Navigation("RecipientUser");
|
|
|
|
b.Navigation("Vault");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.VaultSshKey", b =>
|
|
{
|
|
b.HasOne("DodoSSH.Domain.Vault", "Vault")
|
|
.WithMany()
|
|
.HasForeignKey("VaultId")
|
|
.OnDelete(DeleteBehavior.Cascade)
|
|
.IsRequired()
|
|
.HasConstraintName("fk_ssh_key_vaults_vault_id");
|
|
|
|
b.Navigation("Vault");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Team", b =>
|
|
{
|
|
b.Navigation("Memberships");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.UserAccount", b =>
|
|
{
|
|
b.Navigation("Devices");
|
|
|
|
b.Navigation("KeyWraps");
|
|
|
|
b.Navigation("Keys");
|
|
});
|
|
|
|
modelBuilder.Entity("DodoSSH.Domain.Vault", b =>
|
|
{
|
|
b.Navigation("Hosts");
|
|
|
|
b.Navigation("KeyGrants");
|
|
});
|
|
#pragma warning restore 612, 618
|
|
}
|
|
}
|
|
}
|