Add Slack OpenID login with verified identities and callback replay protection

2026-11-05 18:49:41 +08:00
parent 206cd45098
commit 5c0ad30a7a
10 changed files with 524 additions and 38 deletions
@@ -11,6 +11,10 @@ ALTER TABLE project_accounts
 CREATE UNIQUE INDEX project_account_username ON project_accounts(project, lower(username))
    WHERE username IS NOT NULL;

+ALTER TABLE oauth_attempts
+ ADD COLUMN provider text NOT NULL DEFAULT 'google' CHECK (provider IN ('google','slack')),
+ ADD COLUMN oidc_nonce text;
+
 CREATE TABLE account_identities (
    project text NOT NULL,
    provider text NOT NULL CHECK (provider IN ('google', 'slack')),