thary/sp-config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth: kanidm.db migration to v1.5.0 for provisioning

Browse Source 
- ExecStartPre sqlite script for any kanidm version <= 1.5.0.
This commit is contained in:
Alexander Tomokhov
2025-04-21 20:21:55 +04:00
parent 69a5103f8b
commit 217fdce469
2 changed files with 71 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

56
auth/kanidm-db-migration.sql Normal file
View File

@@ -0,0 +1,56 @@
update id2entry
set data = cast(
json_replace(
data,
'$.ent.V3.attrs.acp_create_attr.I8',
json_array(
'class','description','displayname','image','name',
'oauth2_allow_insecure_client_disable_pkce',
'oauth2_allow_localhost_redirect',
'oauth2_device_flow_enable',
'oauth2_jwt_legacy_crypto_enable',
'oauth2_prefer_short_username',
'oauth2_rs_claim_map',
'oauth2_rs_basic_secret',
'oauth2_rs_name',
'oauth2_rs_origin',
'oauth2_rs_origin_landing',
'oauth2_rs_scope_map',
'oauth2_rs_sup_scope_map',
'oauth2_strict_redirect_uri'
)
) as blob
)
where cast (id as text) = (
select json_extract(idl, '$.t.s[0]')
from idx_eq_name
where key = 'idm_acp_oauth2_manage'
);
update id2entry
set data = cast(
json_replace(
data,
'$.ent.V3.attrs.acp_modify_presentattr.I8',
json_array(
'description','displayname','image','name',
'oauth2_allow_insecure_client_disable_pkce',
'oauth2_allow_localhost_redirect',
'oauth2_device_flow_enable',
'oauth2_jwt_legacy_crypto_enable',
'oauth2_prefer_short_username',
'oauth2_rs_claim_map',
'oauth2_rs_basic_secret',
'oauth2_rs_origin',
'oauth2_rs_origin_landing',
'oauth2_rs_scope_map',
'oauth2_rs_sup_scope_map',
'oauth2_strict_redirect_uri'
)
) as blob
)
where cast (id as text) = (
select json_extract(idl, '$.t.s[0]')
from idx_eq_name
where key = 'idm_acp_oauth2_manage'
);