From 68c7e68b3f90fd980661774fdb2bb2d6140a34d0 Mon Sep 17 00:00:00 2001
From: winter
Date: Mon, 16 Dec 2024 20:27:01 +0000
Subject: implement the other side of auth (hopefully?)

also mostly untested for the same reason as last time
---
 migrations/20241216_172853_add_instance_auth_secret.php | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 migrations/20241216_172853_add_instance_auth_secret.php

(limited to 'migrations/20241216_172853_add_instance_auth_secret.php')

diff --git a/migrations/20241216_172853_add_instance_auth_secret.php b/migrations/20241216_172853_add_instance_auth_secret.php
new file mode 100644
index 0000000..83438fe
--- /dev/null
+++ b/migrations/20241216_172853_add_instance_auth_secret.php
@@ -0,0 +1,12 @@
+<?php
+
+use \Digitigrade\Db\Migrator;
+
+Migrator::getInstance()->register(20241216_172853, function (PDO $db) {
+    // column for the secret used for dialback for inbound auth
+    // also making inbound auth column unique to prevent accidentally giving two instances the same token
+    $db->exec(<<<END
+    ALTER TABLE instance_auth ADD COLUMN secret text;
+    ALTER TABLE instance_auth ADD CONSTRAINT inbound_token_unq UNIQUE(inbound_token);
+    END);
+});
-- 
cgit v1.3