1
ALTER TABLE `oauth_clients` RENAME COLUMN "type" TO "application_type";--> statement-breakpoint
2
CREATE TABLE `oauth_client_assertions` (
3
	`id` text PRIMARY KEY NOT NULL,
4
	`expires_at` integer NOT NULL
5
);
6
--> statement-breakpoint
7
CREATE TABLE `oauth_client_resources` (
8
	`id` text PRIMARY KEY NOT NULL,
9
	`client_id` text NOT NULL,
10
	`resource_id` text NOT NULL,
11
	`metadata` text,
12
	`created_at` integer,
13
	FOREIGN KEY (`client_id`) REFERENCES `oauth_clients`(`client_id`) ON UPDATE no action ON DELETE cascade,
14
	FOREIGN KEY (`resource_id`) REFERENCES `oauth_resources`(`identifier`) ON UPDATE no action ON DELETE cascade
15
);
16
--> statement-breakpoint
17
CREATE UNIQUE INDEX `oauthClientResources_clientId_resourceId_uidx` ON `oauth_client_resources` (`client_id`,`resource_id`);--> statement-breakpoint
18
CREATE INDEX `oauthClientResources_clientId_idx` ON `oauth_client_resources` (`client_id`);--> statement-breakpoint
19
CREATE INDEX `oauthClientResources_resourceId_idx` ON `oauth_client_resources` (`resource_id`);--> statement-breakpoint
20
CREATE TABLE `oauth_resources` (
21
	`id` text PRIMARY KEY NOT NULL,
22
	`identifier` text NOT NULL,
23
	`name` text NOT NULL,
24
	`access_token_ttl` integer,
25
	`refresh_token_ttl` integer,
26
	`signing_algorithm` text,
27
	`signing_key_id` text,
28
	`allowed_scopes` text,
29
	`custom_claims` text,
30
	`dpop_bound_access_tokens_required` integer DEFAULT false,
31
	`disabled` integer DEFAULT false,
32
	`created_at` integer,
33
	`updated_at` integer,
34
	`policy_version` integer DEFAULT 1,
35
	`metadata` text
36
);
37
--> statement-breakpoint
38
CREATE UNIQUE INDEX `oauth_resources_identifier_unique` ON `oauth_resources` (`identifier`);--> statement-breakpoint
39
ALTER TABLE `oauth_clients` ADD `client_discovery_id` text;--> statement-breakpoint
40
ALTER TABLE `oauth_clients` ADD `client_credentials_scopes` text DEFAULT '[]';--> statement-breakpoint
41
ALTER TABLE `oauth_clients` ADD `backchannel_logout_uri` text;--> statement-breakpoint
42
ALTER TABLE `oauth_clients` ADD `backchannel_logout_session_required` integer;--> statement-breakpoint
43
ALTER TABLE `oauth_clients` ADD `jwks` text;--> statement-breakpoint
44
ALTER TABLE `oauth_clients` ADD `jwks_uri` text;--> statement-breakpoint
45
ALTER TABLE `oauth_clients` ADD `dpop_bound_access_tokens` integer DEFAULT false;--> statement-breakpoint
46
ALTER TABLE `oauth_clients` DROP COLUMN `public`;--> statement-breakpoint
47
ALTER TABLE `jwkss` ADD `alg` text;--> statement-breakpoint
48
ALTER TABLE `jwkss` ADD `crv` text;--> statement-breakpoint
49
ALTER TABLE `oauth_access_tokens` ADD `authorization_code_id` text;--> statement-breakpoint
50
ALTER TABLE `oauth_access_tokens` ADD `resources` text;--> statement-breakpoint
51
ALTER TABLE `oauth_access_tokens` ADD `requested_user_info_claims` text;--> statement-breakpoint
52
ALTER TABLE `oauth_access_tokens` ADD `revoked` integer;--> statement-breakpoint
53
ALTER TABLE `oauth_access_tokens` ADD `confirmation` text;--> statement-breakpoint
54
CREATE INDEX `oauthAccessTokens_authorizationCodeId_idx` ON `oauth_access_tokens` (`authorization_code_id`);--> statement-breakpoint
55
ALTER TABLE `oauth_consents` ADD `resources` text;--> statement-breakpoint
56
ALTER TABLE `oauth_consents` ADD `requested_user_info_claims` text;--> statement-breakpoint
57
ALTER TABLE `oauth_refresh_tokens` ADD `authorization_code_id` text;--> statement-breakpoint
58
ALTER TABLE `oauth_refresh_tokens` ADD `resources` text;--> statement-breakpoint
59
ALTER TABLE `oauth_refresh_tokens` ADD `requested_user_info_claims` text;--> statement-breakpoint
60
ALTER TABLE `oauth_refresh_tokens` ADD `rotated_at` integer;--> statement-breakpoint
61
ALTER TABLE `oauth_refresh_tokens` ADD `rotation_replay_response` text;--> statement-breakpoint
62
ALTER TABLE `oauth_refresh_tokens` ADD `rotation_replay_expires_at` integer;--> statement-breakpoint
63
ALTER TABLE `oauth_refresh_tokens` ADD `confirmation` text;--> statement-breakpoint
64
CREATE INDEX `oauthRefreshTokens_authorizationCodeId_idx` ON `oauth_refresh_tokens` (`authorization_code_id`);