authentik.providers.oauth2.migrations.0007_auto_20201016_1107_squashed_0017_alter_oauth2provider_token_validity

  1# Generated by Django 3.2.8 on 2021-10-10 16:24
  2
  3import django.db.models.deletion
  4from django.apps.registry import Apps
  5from django.db import migrations, models
  6from django.db.backends.base.schema import BaseDatabaseSchemaEditor
  7
  8import authentik.lib.utils.time
  9
 10scope_uid_map = {
 11    "openid": "goauthentik.io/providers/oauth2/scope-openid",
 12    "email": "goauthentik.io/providers/oauth2/scope-email",
 13    "profile": "goauthentik.io/providers/oauth2/scope-profile",
 14    "ak_proxy": "goauthentik.io/providers/proxy/scope-proxy",
 15}
 16
 17
 18def set_managed_flag(apps: Apps, schema_editor: BaseDatabaseSchemaEditor):
 19    ScopeMapping = apps.get_model("authentik_providers_oauth2", "ScopeMapping")
 20    db_alias = schema_editor.connection.alias
 21    for mapping in ScopeMapping.objects.using(db_alias).filter(name__startswith="Autogenerated "):
 22        mapping.managed = scope_uid_map[mapping.scope_name]
 23        mapping.save()
 24
 25
 26class Migration(migrations.Migration):
 27    replaces = [
 28        ("authentik_providers_oauth2", "0007_auto_20201016_1107"),
 29        ("authentik_providers_oauth2", "0008_oauth2provider_issuer_mode"),
 30        ("authentik_providers_oauth2", "0009_remove_oauth2provider_response_type"),
 31        ("authentik_providers_oauth2", "0010_auto_20201227_1804"),
 32        ("authentik_providers_oauth2", "0011_managed"),
 33        ("authentik_providers_oauth2", "0012_oauth2provider_access_code_validity"),
 34        ("authentik_providers_oauth2", "0013_alter_authorizationcode_nonce"),
 35        ("authentik_providers_oauth2", "0014_alter_oauth2provider_rsa_key"),
 36        ("authentik_providers_oauth2", "0015_auto_20210703_1313"),
 37        ("authentik_providers_oauth2", "0016_alter_authorizationcode_nonce"),
 38        ("authentik_providers_oauth2", "0017_alter_oauth2provider_token_validity"),
 39    ]
 40
 41    dependencies = [
 42        ("authentik_core", "0017_managed"),
 43        ("authentik_crypto", "0002_create_self_signed_kp"),
 44        ("authentik_providers_oauth2", "0006_remove_oauth2provider_name"),
 45    ]
 46
 47    operations = [
 48        migrations.AlterModelOptions(
 49            name="refreshtoken",
 50            options={"verbose_name": "OAuth2 Token", "verbose_name_plural": "OAuth2 Tokens"},
 51        ),
 52        migrations.AddField(
 53            model_name="oauth2provider",
 54            name="issuer_mode",
 55            field=models.TextField(
 56                choices=[
 57                    ("global", "Same identifier is used for all providers"),
 58                    (
 59                        "per_provider",
 60                        "Each provider has a different issuer, based on the application slug.",
 61                    ),
 62                ],
 63                default="per_provider",
 64                help_text="Configure how the issuer field of the ID Token should be filled.",
 65            ),
 66        ),
 67        migrations.RemoveField(
 68            model_name="oauth2provider",
 69            name="response_type",
 70        ),
 71        migrations.AlterField(
 72            model_name="refreshtoken",
 73            name="access_token",
 74            field=models.TextField(verbose_name="Access Token"),
 75        ),
 76        migrations.RunPython(
 77            code=set_managed_flag,
 78        ),
 79        migrations.AddField(
 80            model_name="oauth2provider",
 81            name="access_code_validity",
 82            field=models.TextField(
 83                default="minutes=1",
 84                help_text=(
 85                    "Access codes not valid on or after current time + this value (Format:"
 86                    " hours=1;minutes=2;seconds=3)."
 87                ),
 88                validators=[authentik.lib.utils.time.timedelta_string_validator],
 89            ),
 90        ),
 91        migrations.AlterField(
 92            model_name="authorizationcode",
 93            name="nonce",
 94            field=models.TextField(blank=True, default="", verbose_name="Nonce"),
 95        ),
 96        migrations.AlterField(
 97            model_name="oauth2provider",
 98            name="rsa_key",
 99            field=models.ForeignKey(
100                help_text=(
101                    "Key used to sign the tokens. Only required when JWT Algorithm is set to RS256."
102                ),
103                null=True,
104                on_delete=django.db.models.deletion.SET_NULL,
105                to="authentik_crypto.certificatekeypair",
106                verbose_name="RSA Key",
107            ),
108        ),
109        migrations.AddField(
110            model_name="authorizationcode",
111            name="revoked",
112            field=models.BooleanField(default=False),
113        ),
114        migrations.AddField(
115            model_name="refreshtoken",
116            name="revoked",
117            field=models.BooleanField(default=False),
118        ),
119        migrations.AlterField(
120            model_name="authorizationcode",
121            name="nonce",
122            field=models.TextField(default=None, null=True, verbose_name="Nonce"),
123        ),
124        migrations.AlterField(
125            model_name="oauth2provider",
126            name="token_validity",
127            field=models.TextField(
128                default="days=30",
129                help_text=(
130                    "Tokens not valid on or after current time + this value (Format:"
131                    " hours=1;minutes=2;seconds=3)."
132                ),
133                validators=[authentik.lib.utils.time.timedelta_string_validator],
134            ),
135        ),
136    ]