implement the other side of auth (hopefully?)

also mostly untested for the same reason as last time

1 files changed, 12 insertions, 0 deletions

diff --git a/migrations/20241216_172853_add_instance_auth_secret.php b/migrations/20241216_172853_add_instance_auth_secret.php
new file mode 100644
index 0000000..83438fe
--- /dev/null
+++ b/migrations/20241216_172853_add_instance_auth_secret.php
@@ -0,0 +1,12 @@
+<?php
+
+use \Digitigrade\Db\Migrator;
+
+Migrator::getInstance()->register(20241216_172853, function (PDO $db) {
+    // column for the secret used for dialback for inbound auth
+    // also making inbound auth column unique to prevent accidentally giving two instances the same token
+    $db->exec(<<<END
+    ALTER TABLE instance_auth ADD COLUMN secret text;
+    ALTER TABLE instance_auth ADD CONSTRAINT inbound_token_unq UNIQUE(inbound_token);
+    END);
+});