soroush.asadi
675b60d858
Build backend images / build content-svc (push) Failing after 1m2s
Build backend images / build file-svc (push) Failing after 3m11s
Build backend images / build gateway (push) Failing after 5m39s
Build backend images / build identity-svc (push) Failing after 38s
Build backend images / build notification-svc (push) Failing after 2m0s
Build backend images / build render-svc (push) Failing after 58s
Build backend images / build studio-svc (push) Failing after 58s
Backend (identity-svc):
- oauth_config table (mig 22) + OAuthConfig entity
- OAuthService: admin config CRUD + Google authorization-code flow (build consent
URL, exchange code, fetch userinfo, find/create RegisterMode.Google user, issue
session via AuthService.IssueOAuthSessionAsync)
- AuthController: GET /v1/auth/google/{start,callback} (public); tokens handed to
frontend via URL fragment
- AdminController: GET/PUT /v1/admin/oauth/{provider} (admin, secret masked)
Frontend:
- "ورود با گوگل" button on /auth → identity start endpoint
- /auth/callback reads fragment tokens → /api/auth/oauth-session sets httpOnly cookies
- /admin/integrations: Google client_id/secret/redirect_uri + enable, with setup guide
- nav + fa/en labels
Client ID/Secret are configured entirely in the admin panel — no redeploy needed.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
20 lines
870 B
SQL
20 lines
870 B
SQL
-- =====================================================================
|
|
-- IDENTITY SCHEMA — Part 22: external OAuth provider config (Google, …)
|
|
-- Admin-editable client credentials for social login. Read by identity at
|
|
-- login time; secrets never leave the server (masked in the admin API).
|
|
-- =====================================================================
|
|
|
|
SET search_path TO identity, public;
|
|
|
|
CREATE TABLE IF NOT EXISTS oauth_config (
|
|
provider TEXT PRIMARY KEY, -- 'google' (extensible: 'github', …)
|
|
client_id TEXT,
|
|
client_secret TEXT,
|
|
redirect_uri TEXT, -- must match the provider console
|
|
enabled BOOLEAN NOT NULL DEFAULT FALSE,
|
|
updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
|
|
);
|
|
|
|
INSERT INTO oauth_config (provider) VALUES ('google')
|
|
ON CONFLICT (provider) DO NOTHING;
|