6cfd4637db
* WIP end-of-day push * Authorize endpoint, accept endpoints, DB stuff for oauth clients, their redirects, and client authorizations * OAuth Client create route * Get user clients * Client delete * Edit oauth client * Include redirects in edit client route * Database stuff for tokens * Reorg oauth stuff out of auth/flows and into its own module * Impl OAuth get access token endpoint * Accept oauth access tokens as auth and update through AuthQueue * User OAuth authorization management routes * Forgot to actually add the routes lol * Bit o cleanup * Happy path test for OAuth and minor fixes for things it found * Add dummy data oauth client (and detect/handle dummy data version changes) * More tests * Another test * More tests and reject endpoint * Test oauth client and authorization management routes * cargo sqlx prepare * dead code warning * Auto clippy fixes * Uri refactoring * minor name improvement * Don't compile-time check the test sqlx queries * Trying to fix db concurrency problem to get tests to pass * Try fix from test PR * Fixes for updated sqlx * Prevent restricted scopes from being requested or issued * Get OAuth client(s) * Remove joined oauth client info from authorization returns * Add default conversion to OAuthError::error so we can use ? * Rework routes * Consolidate scopes into SESSION_ACCESS * Cargo sqlx prepare * Parse to OAuthClientId automatically through serde and actix * Cargo clippy * Remove validation requiring 1 redirect URI on oauth client creation * Use serde(flatten) on OAuthClientCreationResult
71 lines
3.4 KiB
SQL
71 lines
3.4 KiB
SQL
-- Dummy test data for use in tests.
|
|
-- IDs are listed as integers, followed by their equivalent base 62 representation.
|
|
|
|
-- Inserts 5 dummy users for testing, with slight differences
|
|
-- 'Friend' and 'enemy' function like 'user', but we can use them to simulate 'other' users that may or may not be able to access certain things
|
|
-- IDs 1-5, 1-5
|
|
INSERT INTO users (id, username, name, email, role) VALUES (1, 'admin', 'Administrator Test', 'admin@modrinth.com', 'admin');
|
|
INSERT INTO users (id, username, name, email, role) VALUES (2, 'moderator', 'Moderator Test', 'moderator@modrinth.com', 'moderator');
|
|
INSERT INTO users (id, username, name, email, role) VALUES (3, 'user', 'User Test', 'user@modrinth.com', 'developer');
|
|
INSERT INTO users (id, username, name, email, role) VALUES (4, 'friend', 'Friend Test', 'friend@modrinth.com', 'developer');
|
|
INSERT INTO users (id, username, name, email, role) VALUES (5, 'enemy', 'Enemy Test', 'enemy@modrinth.com', 'developer');
|
|
|
|
-- Full PATs for each user, with different scopes
|
|
-- These are not legal PATs, as they contain all scopes- they mimic permissions of a logged in user
|
|
-- IDs: 50-54, o p q r s
|
|
INSERT INTO pats (id, user_id, name, access_token, scopes, expires) VALUES (50, 1, 'admin-pat', 'mrp_patadmin', $1, '2030-08-18 15:48:58.435729+00');
|
|
INSERT INTO pats (id, user_id, name, access_token, scopes, expires) VALUES (51, 2, 'moderator-pat', 'mrp_patmoderator', $1, '2030-08-18 15:48:58.435729+00');
|
|
INSERT INTO pats (id, user_id, name, access_token, scopes, expires) VALUES (52, 3, 'user-pat', 'mrp_patuser', $1, '2030-08-18 15:48:58.435729+00');
|
|
INSERT INTO pats (id, user_id, name, access_token, scopes, expires) VALUES (53, 4, 'friend-pat', 'mrp_patfriend', $1, '2030-08-18 15:48:58.435729+00');
|
|
INSERT INTO pats (id, user_id, name, access_token, scopes, expires) VALUES (54, 5, 'enemy-pat', 'mrp_patenemy', $1, '2030-08-18 15:48:58.435729+00');
|
|
|
|
-- -- Sample game versions, loaders, categories
|
|
INSERT INTO game_versions (id, version, type, created)
|
|
VALUES (20000, '1.20.1', 'release', timezone('utc', now()));
|
|
|
|
INSERT INTO loaders (id, loader) VALUES (1, 'fabric');
|
|
INSERT INTO loaders_project_types (joining_loader_id, joining_project_type_id) VALUES (1,1);
|
|
INSERT INTO loaders_project_types (joining_loader_id, joining_project_type_id) VALUES (1,2);
|
|
|
|
INSERT INTO categories (id, category, project_type) VALUES
|
|
(1, 'combat', 1),
|
|
(2, 'decoration', 1),
|
|
(3, 'economy', 1),
|
|
(4, 'food', 1),
|
|
(5, 'magic', 1),
|
|
(6, 'mobs', 1),
|
|
(7, 'optimization', 1);
|
|
|
|
INSERT INTO categories (id, category, project_type) VALUES
|
|
(101, 'combat', 2),
|
|
(102, 'decoration', 2),
|
|
(103, 'economy', 2),
|
|
(104, 'food', 2),
|
|
(105, 'magic', 2),
|
|
(106, 'mobs', 2),
|
|
(107, 'optimization', 2);
|
|
|
|
-- Create dummy oauth client, secret_hash is SHA512 hash of full lowercase alphabet
|
|
INSERT INTO oauth_clients (
|
|
id,
|
|
name,
|
|
icon_url,
|
|
max_scopes,
|
|
secret_hash,
|
|
created_by
|
|
)
|
|
VALUES (
|
|
1,
|
|
'oauth_client_alpha',
|
|
NULL,
|
|
$1,
|
|
'4dbff86cc2ca1bae1e16468a05cb9881c97f1753bce3619034898faa1aabe429955a1bf8ec483d7421fe3c1646613a59ed5441fb0f321389f77f48a879c7b1f1',
|
|
3
|
|
);
|
|
INSERT INTO oauth_client_redirect_uris (id, client_id, uri) VALUES (1, 1, 'https://modrinth.com/oauth_callback');
|
|
|
|
-- Create dummy data table to mark that this file has been run
|
|
CREATE TABLE dummy_data (
|
|
update_id bigint PRIMARY KEY
|
|
);
|